Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35332e302f32342d3234203d3e20383334.roa
File: 37372e33372e35332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: dr/S2eJ8IONt5HB+KKIF7UrfjDDWEClxwK5AlCOyh48=
Subject key identifier: 82:15:A6:20:D3:12:8D:4D:C0:DB:9D:8D:97:4A:D6:E0:78:A3:4D:7D
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 5457C1B3C471AD46CAA4261349BDAE78C64283F0
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35332e302f32342d3234203d3e20383334.roa
Signing time: Tue 06 Jun 2023 10:30:03 +0000
ROA not before: Tue 06 Jun 2023 10:25:03 +0000
ROA not after: Tue 04 Jun 2024 10:30:03 +0000
asID: 834
IP address blocks: 77.37.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:57:c1:b3:c4:71:ad:46:ca:a4:26:13:49:bd:ae:78:c6:42:83:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jun 6 10:25:03 2023 GMT
Not After : Jun 4 10:30:03 2024 GMT
Subject: CN=8215A620D3128D4DC0DB9D8D974AD6E078A34D7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:54:ac:8c:b7:de:de:84:9a:39:42:cb:6a:
07:0a:53:3e:64:68:58:6c:ec:89:51:c3:e4:a9:a1:
0a:d3:1f:21:da:01:3c:37:70:a5:82:f7:4c:c7:20:
64:66:6d:4c:88:4b:36:b1:bd:5b:df:54:b6:fc:b6:
9a:c9:f2:60:db:27:f8:74:eb:bd:23:33:e6:4c:45:
b6:f5:6d:36:b3:32:c7:2c:b8:58:d4:32:f6:de:3e:
9e:69:32:74:d3:d8:c3:7c:dc:26:30:d3:88:5b:70:
63:be:37:91:21:f2:2b:6e:67:f7:fe:fd:79:3e:5f:
46:b7:14:1c:33:c5:e2:da:86:16:40:df:8e:ad:e2:
c3:4f:34:41:b3:4c:d2:c2:3c:4b:c7:fc:25:b0:d0:
d3:b2:77:23:e0:ba:05:ed:5f:8c:02:6b:da:5d:25:
47:73:30:8e:43:52:6f:8b:72:ce:42:3e:3b:25:34:
eb:31:2c:a7:94:58:25:ca:e1:75:44:3d:ed:d5:0b:
d0:53:f5:7d:7f:56:e2:fb:e4:39:88:70:c5:82:b6:
a0:a0:0c:e8:4e:ea:b7:d5:3b:dd:65:42:3b:33:fa:
9a:11:bb:35:fd:f4:9b:25:ed:c9:ea:71:f9:ae:69:
e2:a8:f2:34:6d:eb:9b:f0:4b:f8:40:38:03:e3:51:
66:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:15:A6:20:D3:12:8D:4D:C0:DB:9D:8D:97:4A:D6:E0:78:A3:4D:7D
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.53.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:82:22:56:53:43:09:9c:ea:23:63:a1:b7:1d:8e:8f:e8:99:
d3:79:79:1f:8a:e2:2e:02:f4:aa:1b:3d:9d:63:47:e9:21:56:
bd:02:3a:e8:51:42:e9:02:48:fd:bc:af:78:39:9e:2d:01:f9:
1c:bf:53:82:b3:85:9c:62:d4:a0:61:f7:0f:b0:c0:f0:b1:20:
ee:5e:9f:7c:19:02:d9:77:7a:93:bf:51:53:d5:3f:81:77:28:
0b:1d:89:a9:04:e4:74:5c:67:e0:c7:5e:a3:1c:1f:2d:17:bb:
f4:b7:60:43:14:4d:38:88:f0:19:c1:53:8b:2d:6d:1b:05:48:
9a:a4:11:2c:b0:fc:97:42:00:03:ad:ea:56:80:6d:25:01:39:
61:45:d7:f7:36:40:b6:68:8b:53:4a:d5:cc:1e:c1:77:8c:68:
cc:34:72:a3:3c:af:16:f2:59:b6:96:48:69:8d:c3:2c:11:36:
b0:9a:85:27:a8:6d:00:c1:d4:ac:20:d9:68:a7:5f:f6:3b:7a:
88:39:88:48:34:55:5e:00:bf:95:89:a7:99:b9:f2:93:4a:bd:
6b:c2:e1:63:81:e8:bd:c6:45:ad:83:30:e7:ff:60:35:1f:bb:
b1:db:eb:05:5b:58:5e:26:31:ac:da:0e:2c:79:12:29:87:92:
e0:3f:07:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org