Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34392e302f32342d3234203d3e20383334.roa
File: 37372e33372e34392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 46Wo59l9QGj82ya31/vNfAOj3mGy8wmYSi0HsIVtJi4=
Subject key identifier: EA:85:13:B4:EC:8B:00:72:99:1D:50:87:FD:65:D7:A4:3D:29:64:87
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 301F773893DA19E33AEE2FD26C825731682D9650
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34392e302f32342d3234203d3e20383334.roa
Signing time: Fri 04 Aug 2023 11:00:05 +0000
ROA not before: Fri 04 Aug 2023 10:55:05 +0000
ROA not after: Fri 02 Aug 2024 11:00:05 +0000
asID: 834
IP address blocks: 77.37.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:1f:77:38:93:da:19:e3:3a:ee:2f:d2:6c:82:57:31:68:2d:96:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Aug 4 10:55:05 2023 GMT
Not After : Aug 2 11:00:05 2024 GMT
Subject: CN=EA8513B4EC8B0072991D5087FD65D7A43D296487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:f8:6f:d4:b3:f1:4a:e7:f1:6d:78:2b:e6:
2d:4f:2b:69:4a:37:9f:77:c7:c0:6f:56:c5:6d:29:
ea:e8:d0:b2:d3:ae:00:c6:40:d6:a8:dc:31:f0:1d:
54:3e:14:1b:8c:85:e9:22:f4:e2:07:fa:74:84:37:
ea:48:51:12:4f:81:0c:72:d3:dc:8a:c4:30:2b:e1:
7e:c2:b8:5d:ca:00:11:41:82:37:b1:e5:f8:a9:60:
d6:f9:2f:46:e1:fa:28:0c:27:f8:d8:4f:ec:b3:19:
12:69:23:fa:8d:8c:00:33:0c:94:1f:f0:97:1a:b1:
43:f6:a8:f1:af:9e:ba:7f:bd:f3:25:29:0b:2a:0a:
b2:39:cd:e1:c0:7e:29:ac:15:fe:2d:6d:af:3f:a2:
7f:fc:aa:27:63:51:64:8d:79:f1:59:ff:36:fa:76:
a8:33:75:6e:77:13:47:cf:f1:e3:05:20:83:e4:b9:
76:3f:e9:ab:f2:26:15:c7:93:8e:dd:8f:bf:1e:b6:
a0:fa:42:8b:39:be:6c:b9:b7:69:a3:5c:32:d5:af:
1f:2e:96:51:80:38:82:5a:36:d6:b4:b8:d8:43:72:
c4:f7:8b:5d:ff:6a:85:89:3e:d8:16:10:71:f6:97:
9f:50:9b:31:4b:6e:f2:b0:ea:06:b5:ee:69:57:1b:
f2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:13:B4:EC:8B:00:72:99:1D:50:87:FD:65:D7:A4:3D:29:64:87
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e34392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.49.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:85:0c:67:56:c5:1d:10:13:32:cf:4d:c1:9d:8e:cd:65:57:
7c:cb:b8:04:c5:a6:30:a9:7c:d0:17:3e:77:c5:d7:56:03:9e:
33:8a:29:f1:58:ee:f8:00:14:04:59:83:55:8a:5c:d7:1a:3b:
82:63:c4:8e:b5:6c:e8:c1:ae:6e:6f:43:78:f8:59:82:3e:96:
4a:89:15:9d:ac:2b:24:16:5f:88:12:ed:16:8e:71:14:2b:50:
b8:7f:42:9c:4f:e4:31:62:c2:51:eb:51:00:56:35:81:56:3d:
e7:09:71:dd:4b:14:ad:5c:67:cb:2d:85:a0:a0:b0:c3:26:31:
ec:24:8d:2f:d6:74:b9:10:c9:4a:18:52:36:c0:66:7d:bf:a6:
14:93:f3:53:fb:f7:a8:bb:b2:71:30:a2:cb:de:e0:e3:14:f1:
14:1f:7e:08:78:f0:d8:99:60:cb:1b:b2:a6:a2:35:38:7e:a5:
35:27:9a:ca:09:8f:68:fe:73:19:0a:f4:bc:78:d8:7e:c1:cc:
e9:79:29:4c:a4:7c:a3:1d:33:4c:fc:f0:a5:4e:4d:e8:af:3f:
0b:7a:33:f9:4a:6c:16:88:e2:86:66:a5:05:21:39:29:98:47:
5e:8c:58:a8:78:91:be:97:90:26:ba:16:73:b7:93:09:78:eb:
1d:43:33:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org