Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35322e302f32342d3234203d3e203630373231.roa
File: 37372e33372e35322e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: 3LyursRGyYOEpDtYDk/nYUxgIP5+jektlWNu6b/XtOw=
Subject key identifier: 3F:1E:0A:78:F7:97:2C:3E:DA:3E:AA:41:FF:52:E7:15:EC:B8:10:FC
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 2B5B7A83B448E4A688396CE40F7E628895EADE49
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35322e302f32342d3234203d3e203630373231.roa
Signing time: Fri 20 Jan 2023 06:26:08 +0000
ROA not before: Fri 20 Jan 2023 06:21:08 +0000
ROA not after: Fri 19 Jan 2024 06:26:08 +0000
asID: 60721
IP address blocks: 77.37.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5b:7a:83:b4:48:e4:a6:88:39:6c:e4:0f:7e:62:88:95:ea:de:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:08 2023 GMT
Not After : Jan 19 06:26:08 2024 GMT
Subject: CN=3F1E0A78F7972C3EDA3EAA41FF52E715ECB810FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cb:24:4d:9b:fb:e3:eb:40:65:3f:94:26:f7:
05:f2:68:e7:a6:91:cd:0b:30:f5:50:7c:82:7e:74:
d3:19:b7:bc:bc:c8:b1:d3:db:bc:d4:1d:a0:b2:7f:
43:b9:db:ca:0f:c7:87:1b:9c:d5:9a:20:e3:b5:8c:
81:a3:9f:e7:d3:ba:c3:a4:29:3b:ff:8e:bb:96:f2:
e1:c0:b6:c1:da:0c:ac:bb:bf:06:70:87:b2:5b:e9:
33:26:7d:07:42:df:a5:26:18:fc:ab:77:f1:b7:7e:
67:c8:d5:51:29:da:f5:97:4a:64:af:a4:50:2b:c9:
5c:2f:c9:7b:f1:a9:d4:69:04:62:11:24:a7:f0:fd:
f7:65:1e:34:bf:63:11:78:f1:fa:af:1d:0d:79:ef:
ed:32:76:5f:74:8f:ba:75:e7:92:5a:54:59:c1:1b:
b3:ae:63:d7:96:a2:e8:18:ea:87:90:30:f5:ac:b8:
a2:60:d8:9f:3d:1c:1b:4b:8d:28:3c:62:8b:0a:27:
a6:2e:0c:11:ae:6b:19:1d:2a:38:03:83:92:56:b9:
26:8d:06:75:f8:f6:72:26:ff:4e:da:6a:f7:d9:21:
2e:af:13:12:59:8e:b6:b6:8e:0c:14:51:36:7d:de:
13:e0:e5:8b:c7:3b:c6:c9:88:aa:43:98:2d:50:93:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1E:0A:78:F7:97:2C:3E:DA:3E:AA:41:FF:52:E7:15:EC:B8:10:FC
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35322e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.52.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:2c:e0:eb:b7:ef:69:3b:e9:26:e5:de:49:e2:3f:48:7d:3f:
98:9b:ca:10:b9:e7:70:50:04:43:fb:13:9d:fd:07:c2:ba:bb:
eb:21:d7:f4:fe:84:4a:52:5e:15:42:c5:84:79:cc:2f:e8:c3:
2f:f5:d8:4f:4b:df:0a:8d:99:07:80:27:2c:33:b2:4e:d2:95:
b3:68:5f:01:c9:93:37:de:4f:da:d7:6c:ba:83:c9:0c:bd:1d:
b0:ab:e0:ed:21:52:a3:9b:44:dc:ff:d1:83:92:23:82:4a:eb:
02:eb:e0:e6:b9:2d:24:86:a5:02:5d:07:bc:b7:0a:44:aa:c2:
d6:e9:b3:46:36:12:61:19:d0:1c:ca:28:b9:9d:99:ea:6f:48:
0f:2f:42:f2:85:5c:fb:8a:35:e7:0c:d2:a8:05:0b:55:ec:dc:
d2:a5:ba:8d:3b:87:44:e0:c9:fe:b8:2e:fc:05:f3:90:12:6b:
7e:74:1e:00:b7:8e:7a:08:00:c0:15:e0:69:cb:50:2d:2b:83:
0b:9f:bf:bc:20:a0:f3:d5:9b:cd:17:f3:00:7c:72:6f:9b:b9:
7c:3e:67:08:b7:1f:90:0b:ea:73:93:c3:43:a7:db:32:05:7b:
a2:28:18:56:36:62:86:ce:53:e1:8f:e8:dc:7b:ce:d4:fc:5a:
56:fa:70:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org