Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35352e302f32342d3234203d3e20383334.roa
File: 37372e33372e35352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: X4DjjOeNiYkfeW0OyNtKey/yHNxrvQGXGI4fOSoGAEg=
Subject key identifier: 05:53:95:F8:12:E1:A8:76:01:BF:A9:EC:C5:12:81:17:A8:E0:4B:FD
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 46A03188F21169BDBC9733B56D933DE48A33880E
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35352e302f32342d3234203d3e20383334.roa
Signing time: Thu 13 Apr 2023 10:30:10 +0000
ROA not before: Thu 13 Apr 2023 10:25:10 +0000
ROA not after: Thu 11 Apr 2024 10:30:10 +0000
asID: 834
IP address blocks: 77.37.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a0:31:88:f2:11:69:bd:bc:97:33:b5:6d:93:3d:e4:8a:33:88:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Apr 13 10:25:10 2023 GMT
Not After : Apr 11 10:30:10 2024 GMT
Subject: CN=055395F812E1A87601BFA9ECC5128117A8E04BFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:ca:41:7c:ad:ec:a0:0f:8e:a6:68:1a:8c:
b7:fe:0e:e9:9c:7c:bc:6e:5f:bc:98:39:73:6f:25:
81:6d:34:38:d9:bf:d2:0e:64:94:50:05:52:6a:84:
55:77:4e:12:a2:b9:7c:ba:7f:2f:70:f5:61:16:89:
21:ab:16:65:65:2b:08:f0:a6:1d:56:53:27:db:31:
c9:90:cf:18:bc:17:2f:e0:82:8c:03:ec:4c:64:9f:
63:00:82:21:e5:3e:2a:75:99:ff:2a:32:08:87:51:
bb:f1:8a:9c:7d:16:30:c7:b2:e1:30:b6:d8:e4:01:
2f:8c:61:a5:8d:3f:a5:99:10:66:51:88:c4:8d:8f:
be:39:38:7d:a0:f1:23:9f:fc:fe:52:4f:ab:1d:95:
cf:8f:0b:ff:4b:86:89:bd:ee:8a:a6:0e:2b:26:7f:
e6:fc:31:eb:b0:25:12:11:a8:64:10:64:60:9e:fa:
f8:f0:a4:ae:21:e1:23:ec:65:fd:60:15:a1:d3:35:
4a:44:b4:89:cc:3c:5f:03:14:1c:91:61:f4:e1:de:
7e:05:88:10:bc:32:f4:f9:10:91:05:e8:45:b9:63:
ea:e8:ee:5e:6a:9e:3c:c7:ad:2d:d5:78:df:45:55:
62:6a:c0:6a:a5:b1:5a:1c:2b:37:c3:71:08:09:ec:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:53:95:F8:12:E1:A8:76:01:BF:A9:EC:C5:12:81:17:A8:E0:4B:FD
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e35352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.55.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b3:2b:12:48:f1:a1:67:89:8c:9b:4f:73:43:3c:c7:fe:64:
19:fa:65:99:59:0a:b4:36:3e:49:bb:36:aa:e4:b2:c1:af:75:
f5:e8:5d:5e:75:0a:4c:59:bd:40:64:9a:ff:20:2e:36:2a:d2:
c6:c9:f3:48:75:3d:79:85:13:e0:69:18:1c:0b:62:d5:06:58:
fa:8f:0f:05:fc:72:64:fc:91:1f:13:85:de:cb:32:0e:c0:7f:
f5:6c:6b:6b:09:ed:2f:a6:d2:ea:e4:4a:a6:40:f8:7c:87:ae:
40:89:3a:5e:60:47:3d:20:de:a6:88:9f:01:b7:fc:1a:cd:85:
04:21:86:9a:7a:86:b9:c5:b0:f8:16:f1:d6:45:80:e1:11:35:
da:0a:54:2f:3e:a3:e4:55:89:7d:c2:4d:6f:ae:4c:cd:91:81:
05:c0:9e:07:7b:85:f6:81:4a:b9:80:c6:8d:03:86:c9:6f:c5:
ed:b9:62:58:f8:e6:36:c9:bb:ec:ec:0c:74:a1:f6:0c:9f:f0:
54:49:d6:b1:15:a4:f5:de:45:38:12:79:a5:47:b1:82:26:eb:
e1:f8:46:62:9e:24:53:cc:05:a4:18:14:67:72:1a:04:23:06:
b7:75:08:7d:72:cb:79:ce:ae:b2:61:43:95:a1:5d:8c:52:c3:
b2:dc:8a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org