Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35342e302f32342d3234203d3e203631333137.roa
File: 37372e33372e35342e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: uU0XtBRYDikP7uNCfXkPet2kEtW+Ze+iv6eBNM6f6R8=
Subject key identifier: 74:78:94:A7:9A:AB:E8:88:28:3B:63:35:9C:B4:8E:EE:FC:18:6A:EA
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 7E803DF8968D16AD93EEFFD72B9F912AB579DBA3
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35342e302f32342d3234203d3e203631333137.roa
Signing time: Mon 20 Feb 2023 07:57:15 +0000
ROA not before: Mon 20 Feb 2023 07:52:15 +0000
ROA not after: Mon 19 Feb 2024 07:57:15 +0000
asID: 61317
IP address blocks: 77.37.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:80:3d:f8:96:8d:16:ad:93:ee:ff:d7:2b:9f:91:2a:b5:79:db:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Feb 20 07:52:15 2023 GMT
Not After : Feb 19 07:57:15 2024 GMT
Subject: CN=747894A79AABE888283B63359CB48EEEFC186AEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:79:9c:8c:1a:08:ef:1f:22:83:32:c6:94:
60:15:b4:8c:f2:c2:96:27:a3:3e:9d:7e:d1:27:c7:
cb:d5:d7:72:4b:5f:c3:e1:79:64:ae:66:9d:3a:63:
ed:9f:79:d2:4c:b0:5f:f2:7e:8d:0c:a0:b6:36:c3:
06:c1:45:43:00:b6:a7:5c:f4:ef:a5:da:c4:c7:af:
67:b7:42:c1:55:e5:29:32:61:44:dd:6f:c2:19:ba:
08:48:76:39:40:1f:c9:66:1e:a5:49:5f:d9:09:22:
10:f2:5e:14:0e:d0:93:00:ab:3d:92:68:02:84:03:
22:a5:38:12:21:8a:40:bd:b8:d1:a7:ea:8f:07:d8:
6e:66:b3:2c:af:95:e1:8d:0f:37:09:3c:f9:9e:49:
f6:09:37:4a:c7:e4:cb:ff:5c:71:fb:b7:1f:13:04:
3d:00:da:9a:42:7c:f5:07:bd:82:11:46:eb:4f:33:
40:83:f6:14:0d:c2:18:af:57:05:76:f3:ec:37:3e:
bb:42:66:bc:63:de:85:74:e2:33:7d:20:cc:06:af:
94:8d:e8:47:fd:53:57:5b:32:f6:6e:d9:e4:2e:a8:
e7:dd:86:a5:c1:13:f7:ba:8d:3e:e2:5a:4c:96:44:
0a:7d:62:a1:40:7a:49:58:ad:e4:dd:e5:b3:f0:92:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:78:94:A7:9A:AB:E8:88:28:3B:63:35:9C:B4:8E:EE:FC:18:6A:EA
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35342e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.54.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:44:eb:0f:9a:ad:72:45:9a:73:06:4c:6f:e2:d8:54:9d:84:
62:56:a4:7c:d0:9a:4b:1f:9a:f5:ad:fd:e9:06:b9:16:71:38:
2c:4d:0c:1e:4b:d2:19:4a:6f:37:c5:d3:f1:c3:f8:18:43:a0:
0e:7f:f5:9a:58:c2:8b:08:3c:26:2f:c1:9b:d4:cd:7f:97:1a:
ba:c4:40:dc:35:4c:1f:68:c6:fc:8d:c1:5d:cb:8b:8c:29:33:
ec:bb:94:e4:50:8f:5c:a4:31:28:1e:06:e8:fe:29:de:1e:36:
18:ad:75:0e:ed:5c:63:ef:f6:f9:b1:ef:a8:49:f2:45:0c:45:
c5:18:39:2f:b4:66:2d:4e:bf:ef:3f:a4:db:6a:14:0f:8d:82:
7b:0a:d2:2b:ba:c7:40:bb:29:15:fa:7f:d1:23:f7:f7:47:10:
58:53:14:fd:5c:11:e5:9b:5c:c7:77:2c:cf:1a:09:87:ea:9f:
30:a4:bf:a5:4f:cf:18:79:7c:cd:98:e2:03:ab:22:2b:7b:88:
1b:0a:ea:6c:17:6f:13:1f:af:21:f5:94:d4:05:32:d4:a3:52:
81:58:d4:79:38:41:95:65:13:d4:aa:f4:0c:df:bc:b9:46:70:
12:ec:a1:a6:cd:9c:7c:3e:15:0e:28:3d:94:24:c7:05:c1:85:
8a:9a:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org