Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34382e302f32322d3234203d3e203439393939.roa
File: 37372e33372e34382e302f32322d3234203d3e203439393939.roa (raw, json)
Hash identifier: 2Fhyb8q24/iuU8Qfp2YrgYyEDzGarFZXuBzl/JUrxw4=
Subject key identifier: 54:D3:70:1C:AA:F7:BB:1C:78:AD:CA:C0:30:94:82:C7:62:16:35:6D
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 35FFD6671E0BEF109C0241D6E07788EC57EA7DEF
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34382e302f32322d3234203d3e203439393939.roa
Signing time: Fri 20 Jan 2023 06:26:08 +0000
ROA not before: Fri 20 Jan 2023 06:21:08 +0000
ROA not after: Fri 19 Jan 2024 06:26:08 +0000
asID: 49999
IP address blocks: 77.37.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ff:d6:67:1e:0b:ef:10:9c:02:41:d6:e0:77:88:ec:57:ea:7d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:08 2023 GMT
Not After : Jan 19 06:26:08 2024 GMT
Subject: CN=54D3701CAAF7BB1C78ADCAC0309482C76216356D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:17:cb:fb:94:56:db:12:8e:9b:bb:01:7a:0a:
92:81:c6:8d:fe:65:06:69:e7:db:c5:d7:85:e1:29:
de:9b:7e:2c:04:ce:e5:cb:2d:d1:03:c8:64:db:f1:
13:be:05:82:db:96:51:6d:1b:73:29:16:dd:d3:8d:
97:56:bb:c3:12:8e:1b:54:b6:67:58:f1:58:7d:1b:
70:83:24:69:0c:5c:e6:bd:d5:70:ab:f3:1d:8d:c4:
37:09:76:d4:54:b6:53:3a:a3:cf:69:0e:99:6a:88:
6c:d0:5a:7a:38:e3:1d:b7:d3:d3:29:e6:e7:f8:05:
4d:a1:1c:58:88:22:bf:01:fd:18:d4:2b:b8:ba:23:
6e:5f:77:9d:78:9d:2c:bd:d5:4d:d2:2e:23:53:18:
c6:c8:c2:8e:4f:c3:0f:68:fe:fb:b4:c5:6b:e9:99:
e3:f3:ab:55:9d:a1:0c:9a:8a:c0:ef:b3:1b:ce:1c:
55:b0:2a:1c:96:37:94:96:d7:de:94:6f:19:b4:44:
5b:68:b6:21:9d:cf:49:67:42:15:e2:57:3f:23:c7:
20:ec:42:35:e4:78:4e:be:fa:17:cf:4d:65:7f:4b:
0b:66:61:bb:bc:ff:ba:da:64:27:73:32:fb:6a:eb:
51:bf:3c:0c:3b:6d:7f:47:70:0a:ed:1d:cd:64:1e:
be:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D3:70:1C:AA:F7:BB:1C:78:AD:CA:C0:30:94:82:C7:62:16:35:6D
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34382e302f32322d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.48.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:f7:f4:b9:3b:a5:4a:56:ab:1a:a1:4f:25:d0:5b:7d:7e:51:
e5:6a:e4:14:cb:0c:22:72:8c:ac:9f:e8:9c:a4:cd:32:32:6b:
1d:5b:d1:65:42:7d:d8:f1:3a:99:b3:50:39:e5:15:14:3f:c6:
b0:f1:a3:f4:0c:f7:50:22:9a:a5:26:3b:c3:5b:80:79:5c:95:
b9:6e:a4:6a:a0:b0:7e:2b:5e:af:43:5f:c6:07:0c:15:7f:fb:
a5:9f:b8:2a:44:f1:ae:91:9d:04:ee:d7:d8:b8:7d:ee:ed:04:
8b:03:9a:34:c7:54:0b:70:61:be:eb:ff:da:b7:27:d4:97:f4:
06:77:de:6d:bf:8e:6c:bb:aa:37:40:f7:bc:c2:d2:1e:fa:6b:
ac:c5:16:1d:1d:6a:cb:3e:76:32:72:98:4a:f1:03:bd:b3:8c:
5b:49:56:9e:a5:e1:53:ec:2e:69:20:ff:bb:ea:53:11:46:47:
75:4b:87:fe:08:d6:75:d0:91:5c:a4:d9:49:d0:d9:b8:e1:ee:
6a:44:12:8d:e2:3e:f9:f1:e3:7c:02:de:ad:e3:18:29:11:96:
b5:94:70:b8:f0:91:03:1f:01:cc:16:07:74:01:86:a5:26:ab:
95:cd:83:a0:b7:1e:41:99:29:8c:d1:5c:58:2c:15:f6:7e:8f:
3f:20:44:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org