Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36362e302f32342d3234203d3e203630373231.roa
File: 37372e33372e36362e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: Nx4NKFHsgRJ2YcvvdGxqIRc+uPdQi4mRfoFjzKCzOQ8=
Subject key identifier: 88:53:D0:E4:70:10:5E:2B:4E:85:CD:27:DF:F2:26:D8:6D:35:7E:38
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 77705F067B30BF447A3DD852E903743ACCE30BAB
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36362e302f32342d3234203d3e203630373231.roa
Signing time: Fri 20 Jan 2023 06:26:08 +0000
ROA not before: Fri 20 Jan 2023 06:21:08 +0000
ROA not after: Fri 19 Jan 2024 06:26:08 +0000
asID: 60721
IP address blocks: 77.37.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:70:5f:06:7b:30:bf:44:7a:3d:d8:52:e9:03:74:3a:cc:e3:0b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:08 2023 GMT
Not After : Jan 19 06:26:08 2024 GMT
Subject: CN=8853D0E470105E2B4E85CD27DFF226D86D357E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:70:dd:e9:83:99:df:4a:eb:1d:41:43:2c:
72:c0:2e:3c:2d:82:5d:21:c9:32:fd:74:2a:96:ff:
8b:63:84:d4:d7:95:52:94:05:d2:a4:15:15:00:26:
b7:a5:df:be:f3:a1:0c:3c:29:56:72:c5:9b:d2:02:
fe:90:f5:c7:d4:3c:80:c0:26:80:69:85:d5:e5:77:
28:62:e1:1c:23:1d:ce:f5:dd:7e:76:d4:30:17:a2:
57:d5:ef:6e:2b:ba:7e:77:6a:7a:ec:f2:3f:8c:ca:
c6:77:5b:d9:9e:c4:e4:e9:2f:ee:46:76:b5:26:86:
e9:a0:88:a1:fd:df:ee:4f:6f:47:be:84:1f:de:18:
a7:4f:3f:c0:77:d2:c4:a9:13:6b:58:3b:f9:fd:d0:
be:f1:90:46:e8:2f:ad:8d:3c:0e:09:c4:42:7b:ab:
96:6c:a0:dc:ed:07:3a:a4:1e:f7:d7:d8:9c:b8:7d:
34:1b:15:db:56:f4:c3:24:4a:c3:6d:71:e0:e5:da:
d1:cb:f6:a6:f3:47:01:92:85:1b:73:a1:49:73:69:
5d:9f:4c:00:cc:de:91:62:05:59:ee:34:1c:31:3f:
40:e0:de:9f:5d:b0:84:a0:7b:f5:8f:73:d9:3d:44:
42:11:8d:e1:bc:05:9a:99:26:37:82:52:c3:84:7e:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:53:D0:E4:70:10:5E:2B:4E:85:CD:27:DF:F2:26:D8:6D:35:7E:38
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36362e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.66.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c4:2a:e4:1f:be:40:d4:5c:32:a3:63:d6:e4:3e:6f:40:17:
d8:af:4a:b0:8b:94:14:cb:c2:e3:d3:fe:48:5d:64:2d:41:56:
13:3c:50:c9:b2:d9:44:23:0d:40:f6:62:1f:c7:2f:da:3c:b5:
3b:2e:7c:54:6b:91:6f:c8:38:19:64:99:ba:ee:d1:17:fe:53:
46:45:8b:f9:b7:51:da:08:3f:73:53:bf:2d:4c:ab:68:8c:28:
1f:93:c7:a3:4b:74:c6:9d:71:5c:5a:aa:f9:64:6c:1c:85:05:
a8:a9:75:dc:6f:bc:26:f2:d7:70:74:52:16:80:8c:50:7f:48:
04:8e:bf:50:f1:80:f6:43:47:c0:d3:f5:ec:08:93:89:36:b5:
c3:83:64:74:62:57:1f:93:2e:80:d8:59:69:65:94:16:02:00:
36:f9:9a:25:f5:09:0c:c0:1a:1d:6c:14:a6:87:ad:84:ec:d0:
29:6f:45:ae:2b:46:9b:cb:74:da:06:28:4e:05:0a:00:5d:cf:
63:85:df:21:74:41:a7:0a:e3:63:f6:2a:79:f7:ad:f8:8e:52:
ac:e9:a5:98:38:0a:dd:bc:cb:05:40:58:fb:92:37:db:d4:e0:
02:30:6b:98:a8:c3:52:6d:39:c1:53:95:b6:18:e7:0e:b8:c0:
48:55:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org