Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35332e302f32342d3234203d3e20323034383433.roa
File: 37372e33372e35332e302f32342d3234203d3e20323034383433.roa (raw, json)
Hash identifier: koZN2yMflRUuMxBa0X5DpWGcMeuePR01GEmZAeiHIS0=
Subject key identifier: E2:64:0B:C9:CC:CE:D0:88:2A:EF:C0:74:93:89:96:E2:1E:5F:E6:18
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 708F3E55DEB0101C71E0CCC02C8ED062CDF00D7D
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35332e302f32342d3234203d3e20323034383433.roa
Signing time: Sun 05 Mar 2023 12:33:34 +0000
ROA not before: Sun 05 Mar 2023 12:28:34 +0000
ROA not after: Sun 03 Mar 2024 12:33:34 +0000
asID: 204843
IP address blocks: 77.37.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:8f:3e:55:de:b0:10:1c:71:e0:cc:c0:2c:8e:d0:62:cd:f0:0d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Mar 5 12:28:34 2023 GMT
Not After : Mar 3 12:33:34 2024 GMT
Subject: CN=E2640BC9CCCED0882AEFC074938996E21E5FE618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:1f:99:eb:2c:77:ae:c0:e8:77:62:f9:6a:
51:4e:79:e4:28:1b:df:3e:2a:d4:78:c5:f9:18:7a:
83:e3:68:95:e9:f4:0a:8a:69:10:f7:bd:d6:f7:2e:
7f:62:6c:96:fd:a7:bf:b0:76:d4:fc:6e:d5:e3:3f:
d5:4e:7e:8f:c2:4f:79:7a:81:4d:b9:f2:08:06:a4:
a8:f9:92:a7:31:cc:4d:60:4a:f0:ae:f4:79:27:8d:
eb:eb:8d:63:f9:13:b3:55:84:ec:f4:ec:60:f4:75:
80:b2:d3:46:28:9c:ea:1d:92:d4:49:d3:66:7e:04:
16:f1:00:bc:e6:17:51:c1:cc:e7:a8:77:11:22:8c:
69:57:ca:a5:e2:c3:d3:4a:2e:f8:09:fc:0f:03:b0:
63:5f:fc:98:87:3a:63:4f:86:03:0b:97:34:55:79:
ae:5a:59:dc:6e:8a:9a:e9:b1:5a:b2:3e:3d:11:c8:
02:30:2f:c0:6b:a9:3d:2c:b4:ab:58:86:e7:91:b0:
70:ed:74:dc:d5:14:c9:c4:99:18:a8:2f:07:0d:cb:
67:b7:f8:09:30:6f:82:7d:e5:b3:4a:9a:05:69:99:
54:5e:54:18:72:3f:3f:a9:a9:9b:9b:7b:98:f9:a7:
ba:f8:03:a9:2e:9b:43:9e:e3:34:fe:14:9c:4c:74:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:64:0B:C9:CC:CE:D0:88:2A:EF:C0:74:93:89:96:E2:1E:5F:E6:18
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35332e302f32342d3234203d3e20323034383433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.53.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b9:33:14:41:ee:0a:26:ba:0f:d1:a2:9e:c1:b6:43:d8:e6:
f4:0a:cb:55:fe:87:af:1b:41:b7:64:62:3d:aa:44:da:af:08:
04:72:dc:e1:b8:01:9a:76:2a:c4:4c:3e:aa:8b:93:71:fd:94:
42:27:4e:54:13:64:2d:c2:95:d9:d4:5e:a8:0c:d0:f1:13:88:
fb:d9:e0:65:b9:73:c2:dc:cc:4d:c0:3f:2d:20:81:b9:24:a0:
72:95:e9:7d:b5:99:78:de:93:40:18:e2:4c:11:ff:a0:54:c1:
99:0e:de:70:07:c0:8a:76:6f:84:57:31:e1:0a:f6:da:d5:3a:
44:8a:97:56:32:48:3e:77:22:58:0b:0a:bb:7c:26:37:d7:8d:
18:8e:25:64:69:83:9f:fb:f6:1d:34:4b:3b:c0:1f:f1:52:4b:
46:e3:89:fc:23:ac:b2:da:32:af:01:3c:02:e6:52:b5:b6:95:
47:ef:cb:8a:a0:1e:17:54:f8:6d:00:fa:87:64:78:73:a0:2b:
ab:ae:b1:97:d8:14:b7:dc:37:bf:13:ec:ac:21:78:f7:d4:36:
5f:2c:df:59:e5:3a:8d:1a:5f:6d:28:d1:59:0a:7d:1c:8a:7e:
e5:c9:00:be:65:c1:11:56:c7:01:ff:87:ae:1a:32:d7:8b:88:
ce:2a:c5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org