Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34352e302f32342d3234203d3e203630373231.roa
File: 37372e33372e34352e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: Gx+jdE5MAC9HnOYQC+xbD/dUk6wAAAv5kU6Ur0yguXY=
Subject key identifier: BD:1F:E2:FD:92:E0:8E:B1:FC:80:DA:E6:D4:D4:FD:E1:CB:9E:05:19
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 66A7BE06A1B995A9A95BC8C0D5D5B3EEBCC740D8
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34352e302f32342d3234203d3e203630373231.roa
Signing time: Fri 20 Jan 2023 06:26:08 +0000
ROA not before: Fri 20 Jan 2023 06:21:08 +0000
ROA not after: Fri 19 Jan 2024 06:26:08 +0000
asID: 60721
IP address blocks: 77.37.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a7:be:06:a1:b9:95:a9:a9:5b:c8:c0:d5:d5:b3:ee:bc:c7:40:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:08 2023 GMT
Not After : Jan 19 06:26:08 2024 GMT
Subject: CN=BD1FE2FD92E08EB1FC80DAE6D4D4FDE1CB9E0519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:09:81:8d:71:78:7e:e2:3d:1a:d4:e9:07:
73:d7:0c:c5:c7:8a:8b:c0:bb:49:47:cb:8b:e7:2f:
5d:c3:da:8a:1b:87:6a:9a:27:35:da:64:c7:d2:68:
d9:02:f3:96:67:eb:2f:65:41:d2:2d:2a:29:82:d1:
be:1f:2a:39:7c:22:e0:89:21:d6:85:4b:e5:fb:34:
84:a4:27:02:77:7f:31:3e:fa:c8:ad:53:cf:1a:23:
cb:90:c1:a0:56:06:6a:7f:3f:47:cf:6c:97:7b:f4:
67:be:f4:8c:b9:65:96:1c:f8:c2:3e:5e:b9:f7:fc:
cd:6a:8d:a8:6e:f6:6d:cd:4a:68:ac:f1:e5:e1:d6:
ff:62:7f:fe:64:b0:94:ea:3e:b8:51:77:be:35:00:
04:d4:04:cd:2d:b9:d2:de:37:f5:c9:2e:81:9a:11:
0d:f2:58:58:21:76:3a:25:b0:09:cb:12:0d:4f:f5:
d3:a2:7a:0f:a8:c5:f4:f0:95:2e:3a:fe:67:10:f0:
26:a2:e8:63:0c:93:06:ee:51:81:8e:5b:00:38:78:
de:cb:c0:c8:75:e9:be:f7:d6:37:15:12:6c:ba:44:
29:7c:81:e1:80:93:0f:70:ee:ed:5b:58:ec:d6:e5:
98:d7:64:75:33:3a:64:b2:dc:0d:99:2d:ed:e4:a7:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1F:E2:FD:92:E0:8E:B1:FC:80:DA:E6:D4:D4:FD:E1:CB:9E:05:19
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34352e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.45.0/24
Signature Algorithm: sha256WithRSAEncryption
86:4a:f4:74:83:9a:a5:8d:65:99:68:82:98:a6:4b:b5:ef:79:
67:22:2f:17:dd:ea:9f:4f:f2:bb:95:cf:b6:ed:f3:3b:50:e8:
26:c0:ba:82:e4:34:9b:17:30:ae:32:f0:b4:d5:2f:cf:94:2c:
67:d8:e4:a0:5f:1f:87:c7:fe:ab:50:92:62:82:a9:10:72:92:
e6:89:bc:7d:e4:31:aa:73:fb:0f:7b:46:b6:71:e8:03:01:c1:
52:39:38:e4:1b:5c:d9:f6:e0:52:02:a8:22:f1:06:8b:d8:9b:
fa:72:ce:c0:f4:9d:a8:c1:15:a1:9e:5b:47:67:46:d2:44:f8:
c8:ab:f1:87:89:31:8b:f4:b9:d8:e1:b8:61:7c:73:40:3d:ef:
6b:d3:b3:61:52:10:61:20:a2:c7:85:79:ba:e6:7b:0a:79:ff:
4d:93:95:ad:e5:da:15:9f:be:ab:ee:29:0d:5c:1b:73:5a:1c:
77:17:bf:d5:a6:06:7d:dd:49:ea:cb:3a:67:a9:a3:52:75:b7:
66:45:82:48:24:6b:54:47:5a:f5:ae:fa:9a:b2:e5:f0:2b:6d:
ee:39:47:a8:e7:5e:f8:1f:ff:be:39:ad:14:03:24:4c:93:cd:
b8:2e:00:eb:9a:09:27:79:fa:23:00:b3:c9:28:90:08:4c:2a:
d3:de:f3:5e
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUZqe+BqG5lampW8jA1dWz7rzHQNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzAxMjAwNjIxMDhaFw0yNDAxMTkwNjI2MDhaMDMxMTAvBgNV
BAMTKEJEMUZFMkZEOTJFMDhFQjFGQzgwREFFNkQ0RDRGREUxQ0I5RTA1MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCBgmBjXF4fuI9GtTpB3PXDMXH
iovAu0lHy4vnL13D2oobh2qaJzXaZMfSaNkC85Zn6y9lQdItKimC0b4fKjl8IuCJ
IdaFS+X7NISkJwJ3fzE++sitU88aI8uQwaBWBmp/P0fPbJd79Ge+9Iy5ZZYc+MI+
Xrn3/M1qjahu9m3NSmis8eXh1v9if/5ksJTqPrhRd741AATUBM0tudLeN/XJLoGa
EQ3yWFghdjolsAnLEg1P9dOieg+oxfTwlS46/mcQ8Cai6GMMkwbuUYGOWwA4eN7L
wMh16b731jcVEmy6RCl8geGAkw9w7u1bWOzW5ZjXZHUzOmSy3A2ZLe3kp7tjAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUvR/i/ZLgjrH8gNrm1NT94cueBRkwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzczNzJlMzMzNzJlMzQzNTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzAzNzMyMzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABNJS0w
DQYJKoZIhvcNAQELBQADggEBAIZK9HSDmqWNZZlogpimS7XveWciLxfd6p9P8ruV
z7bt8ztQ6CbAuoLkNJsXMK4y8LTVL8+ULGfY5KBfH4fH/qtQkmKCqRBykuaJvH3k
Mapz+w97RrZx6AMBwVI5OOQbXNn24FICqCLxBovYm/pyzsD0najBFaGeW0dnRtJE
+Mir8YeJMYv0udjhuGF8c0A972vTs2FSEGEgoseFebrmewp5/02Tla3l2hWfvqvu
KQ1cG3NaHHcXv9WmBn3dSerLOmepo1J1t2ZFgkgka1RHWvWu+pqy5fArbe45R6jn
Xvgf/745rRQDJEyTzbguAOuaCSd5+iMAs8kokAhMKtPe814=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org