Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34322e302f32342d3234203d3e20383334.roa
File: 37372e33372e34322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 40z781c/bQQfj+cG14FycT+5Oe9cjpFTsSGLAy8p8Gs=
Subject key identifier: 5F:40:97:DA:E5:B0:B5:76:EF:92:22:21:17:DD:C9:9F:0E:E4:47:75
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 525D8DDC31BD4F74AC9B27E738257BECA73FDB85
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34322e302f32342d3234203d3e20383334.roa
Signing time: Fri 31 Mar 2023 00:00:17 +0000
ROA not before: Thu 30 Mar 2023 23:55:17 +0000
ROA not after: Fri 29 Mar 2024 00:00:17 +0000
asID: 834
IP address blocks: 77.37.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:5d:8d:dc:31:bd:4f:74:ac:9b:27:e7:38:25:7b:ec:a7:3f:db:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Mar 30 23:55:17 2023 GMT
Not After : Mar 29 00:00:17 2024 GMT
Subject: CN=5F4097DAE5B0B576EF92222117DDC99F0EE44775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:89:55:5c:33:0d:f5:ca:9d:4b:6c:c4:58:0d:
00:ac:23:04:36:46:ff:2b:1f:63:70:bc:14:00:01:
c5:4d:0a:10:a9:9f:b8:4d:e5:23:96:18:76:61:79:
3d:07:67:31:63:14:4c:b7:fa:b5:a1:22:d0:99:d0:
67:7f:45:7a:4a:21:6d:f6:ee:d9:fa:fc:f4:68:b5:
28:e2:b0:4f:44:6f:cf:d2:1a:04:a9:fe:ac:49:f4:
24:96:e2:af:08:99:21:be:33:d7:0b:dd:92:d0:36:
a5:7d:82:c7:73:65:97:4e:02:00:52:68:78:8c:76:
b1:b8:0d:de:4e:64:92:4e:5c:20:0b:65:d5:d1:c9:
dc:78:be:81:d5:d7:77:89:7d:28:a4:59:ce:d6:60:
0c:d8:ee:ba:b7:69:19:38:d8:02:e2:96:f1:8c:8f:
80:61:cc:8f:39:64:d2:89:4d:8b:0c:94:3f:ad:21:
38:67:07:96:20:ec:de:1f:6a:8f:d4:c0:59:67:8e:
bc:48:a2:17:65:df:a8:ae:8d:91:f9:1b:43:5b:a1:
79:19:32:c0:3b:f0:72:46:5a:94:f9:63:0f:e5:ba:
a1:3b:d4:a0:48:73:2c:c3:a5:19:05:2f:4e:f3:d1:
b2:6e:01:14:a4:9b:ae:94:40:41:d6:49:13:73:c5:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:40:97:DA:E5:B0:B5:76:EF:92:22:21:17:DD:C9:9F:0E:E4:47:75
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.42.0/24
Signature Algorithm: sha256WithRSAEncryption
46:16:7d:4a:ab:d1:f4:84:f0:0f:48:69:a2:5c:83:3f:ba:02:
b0:80:32:fa:6c:4d:7f:07:9f:ad:57:d5:ed:40:06:10:3a:d5:
a7:f0:8f:45:9f:bb:bc:c7:43:d5:6e:30:a0:f4:16:d5:de:bc:
09:70:25:fe:0b:27:82:d5:e2:9f:7d:c7:64:af:b9:86:dc:73:
47:90:cc:61:b9:6d:d7:2e:53:d8:fe:86:a1:ef:a7:8a:6d:56:
bb:1f:eb:37:32:48:92:71:48:9b:03:fa:a4:19:eb:2f:ad:bd:
4a:23:ac:10:7b:a2:a3:6d:7e:aa:ed:ec:81:76:85:7c:2f:5b:
0d:7b:6b:14:d2:1e:6b:fd:33:b3:31:fc:89:65:57:40:a5:c0:
b2:da:8a:4b:8e:6d:e0:3f:43:f0:0d:32:ef:c8:1a:79:92:ff:
fe:60:7e:23:41:09:44:e4:98:c9:8d:f4:0d:32:c0:ff:8f:cb:
9d:c4:cc:24:b8:0b:2a:16:e4:a0:d5:76:54:33:b6:ac:75:8b:
87:5a:79:4a:eb:18:55:00:3f:4c:01:b8:a3:6f:78:46:1f:c0:
71:2f:b1:78:17:93:91:30:8a:d0:e7:60:25:aa:b0:aa:7c:b3:
e4:2d:9f:d3:52:90:a0:6b:28:95:cf:0a:8d:55:8c:18:0e:b9:
f4:39:0c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org