Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34322e302f32342d3234203d3e203439393939.roa
File: 37372e33372e34322e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: OqTu8qBMcEo3ZBVonAzNH1oxKGasdrpucgaM0p53RyY=
Subject key identifier: 8F:C8:35:12:81:66:B1:E4:52:03:50:74:9A:46:A9:58:D9:4E:DF:44
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 49F43577F0A2AEC1BF6CA728B7F2A370F4204782
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34322e302f32342d3234203d3e203439393939.roa
Signing time: Sat 28 Jan 2023 22:22:59 +0000
ROA not before: Sat 28 Jan 2023 22:17:59 +0000
ROA not after: Sat 27 Jan 2024 22:22:59 +0000
asID: 49999
IP address blocks: 77.37.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f4:35:77:f0:a2:ae:c1:bf:6c:a7:28:b7:f2:a3:70:f4:20:47:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 28 22:17:59 2023 GMT
Not After : Jan 27 22:22:59 2024 GMT
Subject: CN=8FC835128166B1E4520350749A46A958D94EDF44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:0a:49:32:3c:38:29:f0:06:19:e8:d9:f0:
6f:58:e7:8b:ce:d7:aa:9e:1f:76:51:07:ec:81:56:
a1:49:a9:8d:1f:1b:09:4c:29:80:e8:a5:73:ba:dd:
a6:0b:a1:4c:73:6f:94:a2:fa:a1:11:ab:d9:f3:02:
94:dd:42:85:53:aa:b5:cd:0e:82:78:f2:64:d8:10:
76:fb:5c:50:c7:2f:e7:b8:52:7e:b4:60:4b:84:da:
15:a5:ec:4e:70:80:ad:f0:25:ef:15:3d:6e:6d:c0:
5d:e9:eb:2b:8c:52:71:73:aa:51:b4:ab:ec:f6:e5:
3b:11:58:3a:48:37:16:22:d9:4e:bb:9f:01:f7:1e:
02:6b:d3:41:0d:d2:0d:48:c0:ad:37:4b:e3:cd:e8:
f5:91:b8:3b:5a:b6:de:97:6a:e9:70:34:39:fd:b3:
2e:09:8a:4f:4a:77:ed:b6:cc:30:e4:08:b3:60:32:
fa:00:17:cb:b7:85:92:23:3e:3c:a1:e8:f8:f3:0c:
48:2e:3a:b6:ed:af:e9:58:fc:bb:33:8d:42:ea:db:
56:b3:df:ef:7b:25:36:23:e8:12:31:88:9f:8c:5f:
45:e2:47:63:ae:38:7a:ee:27:78:a2:ff:b2:51:d3:
40:3c:71:97:2e:ad:11:74:62:f1:dd:10:40:98:fc:
ac:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C8:35:12:81:66:B1:E4:52:03:50:74:9A:46:A9:58:D9:4E:DF:44
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34322e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.42.0/24
Signature Algorithm: sha256WithRSAEncryption
42:41:a7:d2:15:f4:13:6c:fd:3e:98:80:9b:6d:68:81:3c:be:
54:7f:80:ff:65:37:ce:ec:b3:2d:21:85:d2:a3:ae:8f:68:7a:
dd:5a:78:82:10:3b:46:8d:48:38:ba:72:db:c5:82:f0:bb:f3:
a8:61:8a:23:c5:c9:2d:95:cc:35:13:ff:5d:04:77:1e:70:c5:
a0:5c:ba:84:97:21:71:2f:4d:94:d7:04:41:93:c5:e8:7c:ca:
f0:79:d2:4e:45:c6:83:76:55:c1:87:9b:3a:99:47:e5:9b:e4:
63:a4:05:c3:1a:a6:80:2f:fd:11:40:3c:eb:7e:7a:49:7b:77:
2a:ca:cb:84:80:5a:c1:a2:9b:3d:19:3e:41:8e:7a:13:2d:0e:
b2:11:4c:6c:6b:76:7f:c4:74:f5:c2:a5:ba:d8:ec:92:af:bc:
ff:cd:dd:ed:c6:50:37:09:a0:6b:5d:3c:cc:39:53:4d:69:29:
82:27:53:1d:57:c9:d4:80:36:66:9f:81:76:39:df:24:4e:71:
ea:f1:82:fd:a0:89:45:d1:d1:e5:de:94:c2:96:91:43:90:8c:
c8:43:be:c5:ba:74:93:e9:37:f8:60:7a:f1:60:c1:ab:78:cc:
c6:08:e9:34:87:d1:31:e1:71:f7:c1:d2:a5:97:5f:b8:46:61:
3e:36:67:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org