Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36382e302f32342d3234203d3e203531353539.roa
File: 37372e33372e36382e302f32342d3234203d3e203531353539.roa (raw, json)
Hash identifier: 8k2IaeF8G0uOXt9Arto4rJuaQQkShfmfJfqxPDhapeg=
Subject key identifier: 00:D5:81:39:20:2D:40:27:C5:4E:66:98:F6:A4:58:C7:CD:2B:DB:4A
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 1979D1C3F0086D78C19C046D26330EE38B8CEFB3
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36382e302f32342d3234203d3e203531353539.roa
Signing time: Thu 06 Apr 2023 23:04:05 +0000
ROA not before: Thu 06 Apr 2023 22:59:05 +0000
ROA not after: Thu 04 Apr 2024 23:04:05 +0000
asID: 51559
IP address blocks: 77.37.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:79:d1:c3:f0:08:6d:78:c1:9c:04:6d:26:33:0e:e3:8b:8c:ef:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Apr 6 22:59:05 2023 GMT
Not After : Apr 4 23:04:05 2024 GMT
Subject: CN=00D58139202D4027C54E6698F6A458C7CD2BDB4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:56:78:42:01:7e:ce:bd:86:d5:b2:40:e9:
47:d8:ea:8f:62:a9:4c:8f:b1:ee:ee:58:e4:f5:98:
bb:4e:5e:90:28:6d:bf:c3:ab:7a:30:21:e6:63:c5:
dc:9d:ad:94:c5:31:00:49:a5:6e:d9:b0:45:1b:1a:
fb:ae:ac:6d:9e:8f:e1:14:ca:b0:4a:f5:8a:e8:58:
a6:88:5d:85:a6:52:a5:99:20:34:8b:de:90:78:e7:
5b:ed:95:62:12:05:b6:3d:66:55:c5:64:b7:80:3e:
f7:22:b1:23:50:b0:4f:05:58:2a:98:d5:21:b6:9f:
44:3f:34:41:74:41:0a:e1:ad:1a:c0:26:7d:14:71:
bd:a7:fd:fd:73:f2:de:63:10:2c:26:49:60:0f:e1:
7c:16:98:9a:5f:88:d0:b5:a8:bb:c1:ce:2c:69:b5:
e4:b2:d7:99:6d:a3:ab:67:6c:49:64:76:9a:7c:0a:
3d:6a:ba:7d:6f:58:c6:66:e0:a6:7f:71:73:93:8d:
00:b0:c7:57:a4:23:c7:ed:92:22:bd:17:ee:ac:2b:
83:f1:cf:46:42:10:0c:97:47:b7:b2:fe:d2:e2:6e:
f1:5a:06:bc:4a:4d:5b:cd:16:57:3b:18:ac:8f:d4:
4e:fe:cd:93:10:f3:22:1c:5b:e9:24:3a:4f:4f:4a:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D5:81:39:20:2D:40:27:C5:4E:66:98:F6:A4:58:C7:CD:2B:DB:4A
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36382e302f32342d3234203d3e203531353539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.68.0/24
Signature Algorithm: sha256WithRSAEncryption
67:74:49:45:19:f0:1d:bd:87:24:5b:e4:9e:dd:fa:52:32:31:
40:b3:2d:b0:c1:a0:6a:f7:c6:ce:f2:3d:14:8c:df:d2:4c:90:
21:ce:e8:61:81:47:09:5d:78:72:03:38:bf:93:f0:1b:03:df:
64:2b:a4:45:c0:ba:d1:81:5f:cd:f2:65:bf:15:80:60:a1:ff:
e9:29:3c:c2:2b:dd:f4:ab:08:e6:b0:54:ce:0f:1a:c4:5d:bb:
22:9a:93:5e:d8:1e:c0:39:eb:09:5a:a8:ba:45:46:b7:aa:22:
3d:8b:4c:58:95:aa:90:89:04:1c:41:ac:46:c0:2d:92:96:a6:
17:37:25:35:f0:46:ee:bb:97:ed:32:ba:53:5d:4c:44:1c:e0:
c2:9c:9c:95:88:6d:2e:81:89:9e:b2:95:c1:f2:d4:24:16:59:
c6:11:a5:be:cf:bf:65:46:94:8f:ba:6e:b4:9b:a8:40:09:21:
0f:75:77:fc:1d:4e:0c:37:c9:85:bd:f1:42:8c:66:ae:9c:a3:
75:de:9b:32:c1:45:96:50:f0:53:ef:df:2c:30:68:1f:be:97:
39:00:4d:79:ee:2e:3e:31:0e:35:10:8c:17:db:93:04:13:3c:
f5:21:f0:05:44:1d:d1:46:a0:06:4b:d0:79:fe:1a:1c:80:09:
46:2d:75:83
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUGXnRw/AIbXjBnARtJjMO44uM77MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzA0MDYyMjU5MDVaFw0yNDA0MDQyMzA0MDVaMDMxMTAvBgNV
BAMTKDAwRDU4MTM5MjAyRDQwMjdDNTRFNjY5OEY2QTQ1OEM3Q0QyQkRCNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpt1Z4QgF+zr2G1bJA6UfY6o9i
qUyPse7uWOT1mLtOXpAobb/Dq3owIeZjxdydrZTFMQBJpW7ZsEUbGvuurG2ej+EU
yrBK9YroWKaIXYWmUqWZIDSL3pB451vtlWISBbY9ZlXFZLeAPvcisSNQsE8FWCqY
1SG2n0Q/NEF0QQrhrRrAJn0Ucb2n/f1z8t5jECwmSWAP4XwWmJpfiNC1qLvBzixp
teSy15lto6tnbElkdpp8Cj1qun1vWMZm4KZ/cXOTjQCwx1ekI8ftkiK9F+6sK4Px
z0ZCEAyXR7ey/tLibvFaBrxKTVvNFlc7GKyP1E7+zZMQ8yIcW+kkOk9PSuI/AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUANWBOSAtQCfFTmaY9qRYx80r20owHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzczNzJlMzMzNzJlMzYzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzEzNTM1Mzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABNJUQw
DQYJKoZIhvcNAQELBQADggEBAGd0SUUZ8B29hyRb5J7d+lIyMUCzLbDBoGr3xs7y
PRSM39JMkCHO6GGBRwldeHIDOL+T8BsD32QrpEXAutGBX83yZb8VgGCh/+kpPMIr
3fSrCOawVM4PGsRduyKak17YHsA56wlaqLpFRreqIj2LTFiVqpCJBBxBrEbALZKW
phc3JTXwRu67l+0yulNdTEQc4MKcnJWIbS6BiZ6ylcHy1CQWWcYRpb7Pv2VGlI+6
brSbqEAJIQ91d/wdTgw3yYW98UKMZq6co3XemzLBRZZQ8FPv3ywwaB++lzkATXnu
Lj4xDjUQjBfbkwQTPPUh8AVEHdFGoAZL0Hn+GhyACUYtdYM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org