Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36342e302f32322d3232203d3e203439393939.roa
File: 37372e33372e36342e302f32322d3232203d3e203439393939.roa (raw, json)
Hash identifier: K/hYRBV/Wf73ACl0767p+5ctBhZr6VISDDnFWz5EgR8=
Subject key identifier: 16:75:1F:D6:EE:5D:38:53:BE:BD:F4:83:35:3C:44:16:6C:2E:12:19
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 3B1D53264E573DA845163A7F29C156BF5C924774
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36342e302f32322d3232203d3e203439393939.roa
Signing time: Wed 03 May 2023 11:17:16 +0000
ROA not before: Wed 03 May 2023 11:12:16 +0000
ROA not after: Wed 01 May 2024 11:17:16 +0000
asID: 49999
IP address blocks: 77.37.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:1d:53:26:4e:57:3d:a8:45:16:3a:7f:29:c1:56:bf:5c:92:47:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: May 3 11:12:16 2023 GMT
Not After : May 1 11:17:16 2024 GMT
Subject: CN=16751FD6EE5D3853BEBDF483353C44166C2E1219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a6:4c:35:a3:41:c1:56:a6:16:f2:4f:f0:d1:
92:33:87:ef:e3:75:f4:e7:67:21:d3:d4:4b:d7:3d:
39:de:db:20:5f:cd:e8:9b:bc:fc:39:8a:35:94:bf:
83:73:3b:48:ae:c7:59:48:3d:5c:23:49:36:83:44:
20:ac:db:0d:d8:1d:72:af:df:c8:f9:01:3b:cf:bc:
eb:f2:16:a0:6d:3b:da:9b:2f:b2:f1:9b:aa:9c:78:
2e:52:e4:f2:0b:3c:06:c6:68:aa:e2:35:ca:a4:6c:
15:15:31:6e:b7:d5:02:62:93:7b:47:1f:2c:34:bb:
f1:00:0d:c5:84:18:6e:2c:0c:5f:23:cd:51:f8:6f:
e0:df:15:67:60:bc:51:3a:53:d3:d9:44:e4:82:41:
2f:e5:91:14:5c:a3:95:f9:dc:90:8e:0d:18:0b:fb:
92:05:27:b5:90:c1:70:98:1f:da:ff:45:80:61:f8:
1a:3b:b2:49:57:b1:4f:ae:9b:b4:3d:9f:42:30:24:
8a:7b:10:b2:02:cc:93:f7:db:ba:c7:72:ea:8f:7d:
9c:03:9a:9f:bf:1b:e4:b8:fd:9e:d6:1a:29:80:a9:
0f:32:a7:8c:f7:45:10:8c:af:59:f4:76:56:59:b9:
59:f7:53:69:0a:c8:eb:d5:37:f5:3f:34:9f:b6:e1:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:75:1F:D6:EE:5D:38:53:BE:BD:F4:83:35:3C:44:16:6C:2E:12:19
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36342e302f32322d3232203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.64.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:1c:9c:13:81:35:10:35:93:2d:8b:89:5b:a2:8e:f3:f8:37:
37:85:19:b2:bc:c7:7d:19:93:71:7e:ab:b6:f9:47:78:f7:3f:
77:0b:00:6d:77:e1:01:ec:a7:9d:2a:44:5e:00:a5:8a:41:f4:
27:9b:24:8b:9b:1f:da:2d:2d:c7:10:0b:ff:ea:19:22:e4:53:
2c:b9:3d:fb:dd:75:ca:ee:22:cf:fe:40:a9:5f:09:89:0a:f6:
5f:4a:a7:c9:ff:d0:36:7d:5a:7d:77:e4:38:90:c2:a4:03:b7:
ba:cf:df:00:ed:cc:77:b2:ff:ef:81:cc:95:06:45:13:9c:93:
4d:68:67:81:a4:21:36:e1:a3:e3:a0:eb:12:51:5e:b0:74:60:
71:58:24:d5:76:b0:e6:c6:e9:16:71:fa:9d:18:3c:59:b2:c3:
35:e8:e0:79:b8:e4:0f:8c:59:1b:28:ba:09:e0:1f:b9:1e:2b:
3d:49:2f:f3:7f:f8:cb:cb:9b:f2:fd:39:56:f3:e8:b7:5c:98:
79:10:aa:11:d4:af:64:ac:26:40:a6:c1:89:71:4e:c7:89:7f:
87:2a:33:78:38:a7:0f:13:08:6c:e2:3d:5b:55:a7:6b:ba:21:
20:d9:40:b3:73:f1:b0:09:05:bf:a6:6a:5c:07:00:68:d6:db:
62:27:52:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org