Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34382e302f32342d3234203d3e20383334.roa
File: 37372e33372e34382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: GkHZJOO+LGeEhSkcS4zX0oRE/NJidncLqTehykmlL5U=
Subject key identifier: F4:F7:F7:77:B6:CA:36:48:93:E3:63:59:5E:4C:29:55:78:0B:A3:B6
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 29458AD9C0193C8612AE705A8663A3125FDB839A
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34382e302f32342d3234203d3e20383334.roa
Signing time: Tue 04 Jul 2023 12:00:05 +0000
ROA not before: Tue 04 Jul 2023 11:55:05 +0000
ROA not after: Tue 02 Jul 2024 12:00:05 +0000
asID: 834
IP address blocks: 77.37.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:45:8a:d9:c0:19:3c:86:12:ae:70:5a:86:63:a3:12:5f:db:83:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jul 4 11:55:05 2023 GMT
Not After : Jul 2 12:00:05 2024 GMT
Subject: CN=F4F7F777B6CA364893E363595E4C2955780BA3B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bd:77:71:21:62:79:f0:ba:63:59:f4:ce:9d:
ec:ce:da:fa:94:8a:a7:79:f5:99:4d:25:b9:e6:f5:
d2:99:8e:c4:ca:1c:0e:21:0f:a5:0f:66:1c:9a:4e:
ce:02:c4:05:42:ef:5a:17:20:ad:07:d7:6c:80:0f:
4e:b7:da:de:a4:65:4e:fd:31:43:ee:cd:e1:ec:bc:
a4:3f:09:be:ae:d5:48:cb:12:70:ee:25:6b:c9:c2:
75:7f:de:b6:c0:71:cc:59:f3:dc:34:bf:1d:86:8b:
26:89:e5:86:47:69:c6:8a:b6:fa:15:7a:db:4a:4b:
f8:77:45:18:8b:b9:32:66:47:41:42:8e:58:c5:d8:
b9:d1:3b:b1:dd:dc:9c:9f:d3:7b:b4:70:67:e6:49:
d7:12:34:ed:d7:de:12:f0:26:62:87:18:ca:ea:5e:
b8:bf:c1:1c:0b:c1:b4:31:8b:d1:8a:56:da:92:4c:
37:15:31:98:95:70:f9:07:39:db:09:1c:be:9c:71:
e2:39:9c:76:d7:21:1f:93:33:1e:4f:8a:ce:3d:58:
6c:96:ac:06:5d:95:1f:64:5d:5e:06:f3:07:66:2c:
42:46:a3:5f:6e:a4:fe:e7:1b:f2:83:a2:3b:b0:b9:
70:c4:ff:ad:85:7c:10:5b:33:c5:a9:27:2c:fa:b2:
7a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F7:F7:77:B6:CA:36:48:93:E3:63:59:5E:4C:29:55:78:0B:A3:B6
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.48.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:2e:7f:d2:41:fe:62:45:d8:66:7c:21:00:be:56:40:38:91:
2a:cd:1b:0c:50:dc:44:af:21:a9:04:13:03:58:10:5c:68:1d:
92:fb:03:e5:8c:78:1f:d1:c0:a2:b6:39:13:f2:7f:e3:e5:db:
93:07:e6:42:91:5a:7d:61:86:9f:f0:d9:2d:2e:d2:40:7b:65:
a1:73:7b:38:98:6a:c8:20:36:6e:d2:89:c1:d4:83:4a:c6:6e:
0d:7c:40:e9:9e:20:d8:55:53:e3:8f:4b:77:d9:bd:60:7a:32:
d6:fc:79:ba:bd:1d:07:29:10:10:ae:31:22:96:ed:25:7f:b7:
7c:d6:2b:54:5d:b3:a5:a4:2c:83:d1:7b:88:2e:c9:25:aa:3a:
fd:47:24:c2:26:8d:ab:18:0c:31:7a:01:e6:0f:c4:8e:13:25:
ed:7d:f4:89:4f:c7:fa:34:0d:48:20:d2:60:31:5f:67:5f:d2:
4e:9a:d1:5d:a0:6d:01:a2:f5:d8:2b:07:ba:cf:f2:aa:81:61:
ba:32:0b:a5:b1:b8:6b:42:8b:a3:5e:df:1e:f8:e2:62:7d:a3:
72:10:d3:57:51:11:f2:4b:a8:28:39:8d:87:95:db:7f:af:fe:
b7:71:ff:48:1e:25:51:4c:fe:3f:43:82:2c:8b:8b:71:2e:ba:
06:b0:88:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org