Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34372e302f32342d3234203d3e20323131323337.roa
File: 37372e33372e34372e302f32342d3234203d3e20323131323337.roa (raw, json)
Hash identifier: yCYagHvmz2MR3VsGBrI1a43B2sCgFPfXpMX+hQ52A8k=
Subject key identifier: DB:61:EA:F3:00:41:9A:2C:26:45:6E:52:14:92:86:6D:76:50:CA:0D
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 693DB0B95629D6369FF2FB618099C76E4ED7580C
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34372e302f32342d3234203d3e20323131323337.roa
Signing time: Mon 06 Feb 2023 15:29:24 +0000
ROA not before: Mon 06 Feb 2023 15:24:24 +0000
ROA not after: Mon 05 Feb 2024 15:29:24 +0000
asID: 211237
IP address blocks: 77.37.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:3d:b0:b9:56:29:d6:36:9f:f2:fb:61:80:99:c7:6e:4e:d7:58:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Feb 6 15:24:24 2023 GMT
Not After : Feb 5 15:29:24 2024 GMT
Subject: CN=DB61EAF300419A2C26456E521492866D7650CA0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2d:b6:e1:7d:fe:7b:bf:d5:ff:2b:ad:ac:d1:
a1:c7:42:fe:99:bb:49:97:32:fd:aa:5f:e0:c2:e7:
9c:7a:a0:2e:d3:cc:7e:40:f4:ab:4f:73:99:fa:53:
24:d2:dd:3d:ee:3d:d8:6d:04:5b:d5:9b:83:b0:26:
75:57:76:9b:89:c9:8a:09:ef:c3:b5:ee:f5:4c:0f:
7b:52:18:bc:86:54:b4:12:95:28:42:5a:ef:b1:aa:
ae:6a:6f:13:71:32:76:95:cd:4c:fc:0a:32:9e:d0:
db:fb:3c:b2:ef:a5:11:1f:df:d5:a0:ff:2b:36:55:
5c:66:4c:f4:1c:63:ff:e4:22:5c:59:ac:b0:2c:5a:
aa:68:ea:f2:5b:2f:1a:8c:88:14:5d:8f:a8:80:10:
f6:98:a3:7d:65:67:a1:cc:ec:ba:dc:98:eb:92:75:
55:8e:58:3c:1c:2f:f5:f1:38:af:ab:7a:1d:67:f0:
34:74:89:35:8a:16:b2:49:66:8f:bb:ca:a1:79:ca:
c8:d4:16:17:29:52:98:6c:ec:0a:c3:fc:fa:7f:97:
ca:57:0b:23:db:8c:a5:30:5c:c4:1b:b5:d1:ec:7a:
73:f9:60:b4:01:ba:c7:b8:4e:cd:5e:84:a5:be:17:
7e:c6:40:4c:47:a5:6d:b9:82:d3:8b:8f:aa:f5:65:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:61:EA:F3:00:41:9A:2C:26:45:6E:52:14:92:86:6D:76:50:CA:0D
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34372e302f32342d3234203d3e20323131323337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:6f:85:48:06:09:1e:6e:52:a9:4e:75:a2:da:61:f4:8d:f8:
75:7b:58:d8:48:7d:f7:95:c7:89:e9:aa:6e:0a:b4:cc:f9:5f:
8d:c7:d2:90:ee:53:b1:3c:2c:99:0f:47:f3:03:36:53:a4:74:
0a:23:c9:93:40:c0:f8:96:45:80:56:d1:f0:fc:0e:c6:00:c0:
f7:ab:fe:a7:d8:76:83:61:40:63:e9:15:ca:cf:db:ca:ff:36:
f0:b2:db:0f:42:d6:01:89:bf:32:5a:29:96:01:9a:0c:33:a9:
44:9a:a1:c1:b5:22:0b:02:bb:ea:75:2e:ce:de:2d:40:e4:5d:
d4:6c:52:31:8b:f1:03:5b:32:72:75:c2:59:c4:61:45:5d:9f:
a4:eb:61:c9:45:d2:bc:39:3b:9c:c3:a3:16:90:e7:e0:02:6d:
96:71:4b:2b:d6:b2:ad:e1:11:b1:a5:ef:6e:a3:4e:09:63:a3:
b4:7e:fc:ac:57:f8:49:75:df:28:35:54:68:07:85:35:2f:a7:
c1:29:0d:13:69:53:7c:ef:40:84:c4:35:c0:fc:34:6f:37:f9:
56:9a:32:5a:25:0b:8e:d7:4e:c7:58:ff:3c:43:cf:65:1d:47:
5a:76:41:c1:66:63:dc:7d:af:88:bf:6d:06:0d:e0:31:33:c9:
2b:71:2f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org