Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35312e302f32342d3234203d3e203631333137.roa
File: 37372e33372e35312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: ouKr3IwrGgzOxPuqCPmG7u9C8sUiuAhYPxJml6acUUM=
Subject key identifier: A1:3C:23:43:7D:FD:80:9F:36:4B:E1:FD:A6:00:61:01:AB:98:83:97
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 653F43EFEAFC68A36102C7C65D84DA2FDB114545
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35312e302f32342d3234203d3e203631333137.roa
Signing time: Fri 07 Apr 2023 23:01:50 +0000
ROA not before: Fri 07 Apr 2023 22:56:50 +0000
ROA not after: Fri 05 Apr 2024 23:01:50 +0000
asID: 61317
IP address blocks: 77.37.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:3f:43:ef:ea:fc:68:a3:61:02:c7:c6:5d:84:da:2f:db:11:45:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Apr 7 22:56:50 2023 GMT
Not After : Apr 5 23:01:50 2024 GMT
Subject: CN=A13C23437DFD809F364BE1FDA6006101AB988397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:0b:21:ba:81:32:cb:7a:24:12:0f:f7:33:
91:8e:ce:a6:e6:5d:05:17:da:57:42:e4:f3:d4:0d:
45:88:61:ca:cb:eb:0b:65:cf:ab:d6:13:51:9a:b9:
bf:3c:03:6f:d3:90:62:de:2c:0b:ee:43:fc:6a:c6:
c6:f0:68:2f:02:2a:eb:14:49:8f:e3:3b:4d:ee:c1:
99:5d:18:e7:82:9b:6b:75:51:b4:06:46:c8:e5:0a:
2f:5e:17:4a:5e:a9:bc:ab:6b:45:10:69:e7:52:2a:
71:11:e5:26:4c:c8:f6:80:1a:c6:58:08:b2:ae:62:
f0:e5:36:50:41:ab:a0:99:56:96:74:3a:f4:f7:6d:
42:66:ea:5e:3c:26:5f:a0:46:25:44:0d:18:7e:70:
c4:79:a9:9b:d1:bc:ac:7e:5a:2e:88:48:04:34:04:
72:38:49:07:6e:7f:18:78:8f:5b:3f:d3:94:04:e2:
c5:0f:fe:c8:01:d9:06:aa:77:7e:5f:6b:e2:53:d3:
49:15:fa:af:d5:aa:57:db:a1:41:ff:81:c1:c4:a0:
c8:b4:3f:3a:a6:cb:ac:4b:07:1c:2b:53:91:c2:cf:
e3:a4:2c:63:13:26:43:57:c9:ff:f3:91:c3:ac:b2:
2d:33:a6:e0:b5:d6:86:95:6d:ca:a3:65:37:67:3b:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3C:23:43:7D:FD:80:9F:36:4B:E1:FD:A6:00:61:01:AB:98:83:97
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35312e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5b:d6:77:15:c7:4e:2d:d8:4a:91:8f:c4:26:46:ef:65:9e:
39:9a:d5:fd:8e:43:37:c6:11:46:c8:35:11:e0:c7:9e:40:91:
0e:0a:5b:a6:ca:15:24:a4:b5:b1:03:7d:4f:b4:3d:fd:43:58:
2c:12:09:7d:de:9c:83:fc:9a:0c:af:46:42:47:cb:f8:16:b8:
e6:b7:42:53:d1:83:27:6c:67:b7:a8:56:25:57:cb:0c:ba:58:
99:12:bc:34:43:6f:4e:4d:06:8c:d9:31:26:ff:f4:f6:ab:61:
6f:d0:a7:d9:07:6f:14:cc:12:6e:b0:f3:0d:bc:93:cb:52:af:
59:3e:d8:23:a5:35:b7:59:78:c7:4d:8e:48:ed:ea:aa:cb:36:
85:8b:ac:d8:96:2f:4c:28:6b:e3:5f:00:52:e4:1e:41:48:ba:
8a:71:87:c7:c1:71:29:99:b7:ec:aa:56:54:4a:03:67:64:22:
2c:a3:0c:81:24:72:44:16:d5:70:d4:3c:f7:45:47:3c:6e:8f:
84:84:09:4d:d7:04:46:0f:57:56:01:85:3e:5a:20:7b:67:fc:
33:a3:67:85:9a:4f:6f:96:ed:ff:bd:ff:a8:5a:32:95:18:90:
10:38:2a:09:01:d1:24:20:e7:9a:3e:75:24:16:ab:69:08:1b:
c5:ad:32:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org