Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34382e302f32342d3234203d3e20323034383433.roa
File: 37372e33372e34382e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: +rmV3AjX3ZUj3FoWfYhZ7Mly9ZbmEWqVbOic8N51cTU=
Subject key identifier: 8D:13:BD:A1:8B:B2:71:D6:6E:11:8A:C2:0A:84:EC:CB:43:F3:5E:DD
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 75C4E5D6C9BDD2936B2C80D43C851BEC916BC7E0
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34382e302f32342d3234203d3e20323034383433.roa
Signing time: Thu 01 Jun 2023 15:07:37 +0000
ROA not before: Thu 01 Jun 2023 15:02:37 +0000
ROA not after: Thu 30 May 2024 15:07:37 +0000
asID: 204843
IP address blocks: 77.37.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:c4:e5:d6:c9:bd:d2:93:6b:2c:80:d4:3c:85:1b:ec:91:6b:c7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jun 1 15:02:37 2023 GMT
Not After : May 30 15:07:37 2024 GMT
Subject: CN=8D13BDA18BB271D66E118AC20A84ECCB43F35EDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:41:0e:14:c3:64:c8:0c:17:8b:8d:41:8f:64:
1d:3d:6b:87:3b:ff:f8:3b:1f:22:19:ec:ae:59:8c:
cd:d5:5b:66:b9:e3:05:ac:e4:5a:e7:e4:a1:ef:f6:
2f:aa:3b:dd:eb:f7:37:d6:3f:d2:36:43:22:40:3d:
9a:52:99:e8:d3:30:c2:3b:d5:41:7d:6d:b4:ce:58:
74:ea:d3:6c:f8:95:b7:15:e7:03:57:12:06:89:cd:
18:ec:a4:3b:d6:59:9c:da:61:5e:da:bf:b8:51:68:
2d:d2:f9:12:30:52:fc:54:22:65:72:7f:92:d0:35:
98:c9:e7:c0:c9:a2:c2:1c:62:d1:e0:79:7e:e0:43:
94:1e:47:ce:99:ff:20:89:4a:ff:e4:29:a2:bf:fb:
6b:1c:6b:01:18:99:ce:6a:14:68:20:0a:ee:ff:c2:
0c:b2:85:5f:07:d2:28:dc:55:8f:ef:23:da:67:90:
98:83:5e:56:c2:cb:ec:76:50:b2:06:84:4f:df:36:
4e:97:a3:fd:96:0d:28:40:d6:2f:1f:85:5d:3e:b9:
c9:22:31:d2:fa:af:b2:d7:0f:69:c8:f4:58:14:18:
4c:1c:a9:ff:3b:81:56:db:e7:0b:70:a1:3a:a9:39:
90:d6:69:0a:c1:38:24:57:8f:1a:a0:0b:91:38:28:
a6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:13:BD:A1:8B:B2:71:D6:6E:11:8A:C2:0A:84:EC:CB:43:F3:5E:DD
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34382e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.48.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e6:e8:51:63:cf:ef:86:f9:c7:43:6b:0d:10:01:f4:e4:8a:
f4:8c:17:71:10:99:d6:12:4d:ec:e6:a7:11:d8:ba:a2:35:3f:
c6:81:11:76:2a:95:2f:dc:cd:0a:f7:53:75:ca:e3:7a:1b:42:
ba:07:43:b5:e1:99:f8:9c:74:82:96:64:d7:6a:27:8a:25:82:
4c:ea:8b:37:80:61:6a:bd:d1:a6:32:21:e0:f1:23:9d:d7:36:
e4:f2:c1:59:95:56:b0:d4:07:f4:f8:1b:57:75:3e:3d:7d:f4:
57:e6:22:71:1c:39:9a:b5:0e:bc:e4:19:ba:16:d0:8b:b1:40:
b4:73:a8:ad:9a:a2:69:d6:97:92:72:e0:21:11:dd:dc:f1:3e:
39:30:56:83:c7:c3:4e:49:b1:66:51:1f:41:ad:fa:79:97:98:
1f:ba:9b:0f:cd:7d:00:ec:30:db:95:57:d2:3a:05:91:fe:79:
f7:a8:fb:06:cd:15:97:37:7f:5e:73:07:3e:94:d5:ce:47:81:
3e:9a:e4:0f:08:5d:1f:ac:79:64:1b:07:74:e8:7c:40:b1:44:
e5:ba:a2:4e:c3:e8:64:b7:42:c6:94:57:5b:5f:ed:37:e4:53:
61:f8:a0:64:3f:a7:3f:ee:f1:9c:e1:1f:c5:16:8a:fd:40:c8:
5d:a8:e2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org