Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34362e302f32342d3234203d3e203630373231.roa
File: 37372e33372e34362e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: 90tLMdCaOta4HoavVxNDMW2sNfKCeRu2TMu81oMuAak=
Subject key identifier: 9B:DC:93:13:82:9B:CA:FF:00:6C:75:60:95:A7:81:D1:F0:4A:30:57
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 1A0ED8A3C7DAB3315ECF1F2BF7A6D643DDE4491A
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34362e302f32342d3234203d3e203630373231.roa
Signing time: Fri 20 Jan 2023 06:26:08 +0000
ROA not before: Fri 20 Jan 2023 06:21:08 +0000
ROA not after: Fri 19 Jan 2024 06:26:08 +0000
asID: 60721
IP address blocks: 77.37.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:0e:d8:a3:c7:da:b3:31:5e:cf:1f:2b:f7:a6:d6:43:dd:e4:49:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:08 2023 GMT
Not After : Jan 19 06:26:08 2024 GMT
Subject: CN=9BDC9313829BCAFF006C756095A781D1F04A3057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a9:09:4f:14:21:ac:0e:77:dd:f2:57:47:69:
d9:7d:96:26:fa:43:82:a2:4a:a9:e2:1e:6e:cb:0a:
52:88:54:5e:23:58:c0:ab:9b:6b:81:11:18:3e:d2:
27:c1:a3:46:57:c5:5a:09:47:40:8a:04:96:18:b0:
50:81:29:ee:63:a0:7b:32:9a:bd:d9:e2:4c:94:2f:
ec:c3:a1:b3:e0:7b:c8:45:9a:1b:d1:00:79:89:ac:
ca:a8:28:04:ae:27:1f:f2:63:77:da:1f:30:6e:e6:
67:4c:19:15:44:55:18:6a:b6:86:94:fb:53:08:5b:
00:fd:ad:40:3e:77:af:29:8c:d8:f3:37:9d:d7:81:
be:71:d3:d5:29:52:a4:4d:a4:de:ef:a9:ee:b4:10:
c1:96:a5:59:ae:34:c0:ee:0e:05:d1:86:b6:9f:0c:
dc:68:44:42:a9:56:e5:6b:b2:b7:ca:17:fa:38:00:
ee:b1:60:12:6b:48:a2:60:7d:ea:e0:75:29:1b:56:
36:86:7d:a0:03:2b:8e:c6:5d:e2:44:12:eb:5a:63:
0e:14:5d:d3:f6:0d:1b:51:82:a4:9d:11:21:50:ed:
9a:a1:56:73:a6:6b:f4:07:11:6c:98:a2:f6:dc:91:
03:70:90:68:e4:3e:c6:a4:12:f1:5f:3c:70:15:1d:
bf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DC:93:13:82:9B:CA:FF:00:6C:75:60:95:A7:81:D1:F0:4A:30:57
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34362e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.46.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f3:ca:53:8c:bf:16:a0:8c:ac:aa:9c:c9:ae:0f:0e:44:6d:
b1:4a:36:bc:c9:27:84:0a:db:12:e8:e7:4c:60:7c:9b:02:64:
69:4f:09:a1:23:2e:a2:0f:c9:06:38:76:47:77:18:0c:a5:90:
b9:e3:c6:70:2f:70:61:19:6e:8c:90:34:43:e5:42:eb:36:cd:
fc:5b:08:34:33:a2:27:a7:15:42:00:0f:ed:b9:bf:b3:f5:c8:
41:4c:b8:9c:15:d3:5c:71:85:cf:8a:50:34:e1:e0:99:22:53:
bb:9b:89:86:e3:ed:32:71:d6:a1:e9:90:9a:8e:ab:fd:08:e2:
91:d3:af:6b:1f:08:5e:c5:4f:c4:e0:ed:0e:c8:2b:7d:1e:90:
7f:20:57:c0:4a:87:a9:7e:9d:be:18:8d:06:be:b3:39:45:29:
4b:2b:99:6e:99:50:47:e6:11:25:62:7e:65:27:8d:e9:3a:7d:
5e:4a:27:de:e4:bb:35:7e:03:d5:67:a5:70:df:6b:f1:30:01:
41:c9:d4:27:de:f4:a3:18:f2:6e:28:68:ee:e6:09:6c:2d:75:
6c:8b:fe:5d:6a:51:83:50:4b:9f:d7:92:3f:6e:13:46:ef:c8:
50:1a:e5:00:6a:40:8b:74:f9:25:0c:e5:5c:48:1d:39:2a:10:
7b:4f:35:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:05 2025 by rpki-client