Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34342e302f32342d3234203d3e203439393939.roa
File: 37372e33372e34342e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: 47c7zFPkxSXwr/cKnyo1QdEIM4fsOCHOCt/1ufXEg/8=
Subject key identifier: 62:13:38:1A:B9:AC:63:B0:51:30:6C:2F:AA:35:DE:B4:B7:EB:79:E1
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 682A886A86BF26B72F16F733181785F9D2B9D960
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34342e302f32342d3234203d3e203439393939.roa
Signing time: Fri 20 Jan 2023 06:26:07 +0000
ROA not before: Fri 20 Jan 2023 06:21:07 +0000
ROA not after: Fri 19 Jan 2024 06:26:07 +0000
asID: 49999
IP address blocks: 77.37.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:2a:88:6a:86:bf:26:b7:2f:16:f7:33:18:17:85:f9:d2:b9:d9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:07 2023 GMT
Not After : Jan 19 06:26:07 2024 GMT
Subject: CN=6213381AB9AC63B051306C2FAA35DEB4B7EB79E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:74:b0:0e:55:25:42:18:eb:76:89:4c:39:
ca:a5:5e:93:b9:ea:52:49:56:93:cc:26:61:e3:32:
a6:90:83:9c:3f:21:46:74:f7:03:83:d6:3a:ed:73:
41:1d:4b:0e:0e:c2:e3:d6:88:1a:4f:ce:1d:a5:60:
43:05:da:ed:bc:66:43:87:37:55:57:4e:a7:ec:b3:
22:59:ce:f6:f7:bc:1e:c1:d5:db:02:ca:0c:40:cd:
ba:97:14:8a:91:07:44:2f:d1:a3:83:6b:f3:66:73:
42:44:f9:73:a6:0b:28:3a:86:59:93:32:32:58:00:
62:1b:aa:35:60:97:e9:7a:31:cd:79:1a:98:f5:b2:
cc:07:28:ac:69:8e:37:5b:1b:18:10:db:9b:48:88:
d1:d3:7c:d1:83:ac:f4:2f:61:bd:6e:f2:7e:25:37:
71:00:61:cd:54:fa:a5:65:91:12:29:4a:d0:1b:c9:
c4:66:f0:9a:16:bc:a6:98:24:b8:80:9b:8c:6a:be:
2e:61:b0:59:c9:e2:78:ad:9d:a9:0a:98:d4:e7:09:
1a:74:86:71:15:4d:01:ea:77:99:d0:5a:14:9e:d8:
08:f0:c8:07:c8:3e:38:f4:8a:3d:84:0e:f5:08:40:
ea:d3:32:6c:ee:b3:e4:47:c7:32:a1:b6:36:97:9c:
42:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:13:38:1A:B9:AC:63:B0:51:30:6C:2F:AA:35:DE:B4:B7:EB:79:E1
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34342e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.44.0/24
Signature Algorithm: sha256WithRSAEncryption
96:e7:33:21:92:11:6d:a8:21:ef:88:b5:5c:ec:fb:f4:ce:6b:
ad:f3:d2:af:e1:2d:04:d6:49:25:d1:7a:de:be:3f:3a:18:ee:
62:0f:de:6a:aa:7f:da:83:7b:26:46:65:5b:1d:62:52:fe:4d:
7a:fa:61:dd:f7:7e:7b:68:20:3e:60:40:a2:b5:9a:d2:c8:d4:
a5:15:b8:e2:1a:57:a8:0e:d8:35:a1:17:2f:6f:42:1e:c1:ae:
5d:75:4a:be:de:80:f4:cd:d5:fe:73:6d:72:0e:ec:bc:63:81:
e9:1c:19:e6:86:4e:b9:82:f7:34:9f:e6:40:ea:03:33:e1:37:
a4:24:81:28:76:f3:16:48:81:6b:6b:44:78:bd:2a:f8:07:5d:
92:a3:14:e1:ed:44:57:3d:0a:48:0b:3a:6c:f2:28:9f:1c:98:
7e:76:ff:f2:58:b7:52:a2:fe:2d:97:1f:47:0f:0b:58:43:22:
a4:6d:33:98:74:94:bb:c5:a4:ec:1a:af:8c:43:0b:45:d7:73:
41:b8:d3:3b:b3:be:6f:71:97:ee:22:35:bc:1d:09:48:01:45:
31:f7:fe:69:ca:21:61:26:47:63:6a:1a:2e:7e:fe:57:e9:ff:
87:69:f7:e6:fe:74:dd:3f:a4:02:62:5e:48:7c:d4:0b:1d:74:
83:b2:85:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org