Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36382e302f32342d3234203d3e20383334.roa
File: 37372e33372e36382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: QgAsogLi9aCFqM2doPuoMA2PhAAzqqV2Ln3TkamYJEg=
Subject key identifier: 6C:01:6F:26:EC:3A:63:83:CC:05:59:02:27:BE:C1:EB:7C:DF:18:B7
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 5BAB239450EB306583984ED4144E121C7236B114
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36382e302f32342d3234203d3e20383334.roa
Signing time: Thu 13 Apr 2023 10:00:14 +0000
ROA not before: Thu 13 Apr 2023 09:55:14 +0000
ROA not after: Thu 11 Apr 2024 10:00:14 +0000
asID: 834
IP address blocks: 77.37.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:ab:23:94:50:eb:30:65:83:98:4e:d4:14:4e:12:1c:72:36:b1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Apr 13 09:55:14 2023 GMT
Not After : Apr 11 10:00:14 2024 GMT
Subject: CN=6C016F26EC3A6383CC05590227BEC1EB7CDF18B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f3:89:b7:36:c4:98:df:e6:86:d6:2a:53:e6:
3e:29:ec:a5:6b:b9:7b:d2:94:21:dd:49:82:c4:e9:
ca:17:cc:f6:90:eb:0e:56:92:6d:19:0e:27:c3:55:
08:c8:a7:0f:12:87:8f:7c:e5:89:e8:43:3a:f5:d4:
91:57:b7:4f:88:14:86:d4:37:20:4a:0f:72:e1:76:
b8:ec:6e:8a:84:12:25:6a:f8:e5:ae:d0:a5:52:80:
e1:e7:b9:ef:a9:05:38:2a:1a:49:48:58:89:a1:a0:
49:28:10:f0:43:7d:0c:cd:e0:9f:ba:9d:44:e2:84:
05:51:1e:14:87:f6:41:aa:f8:8a:3a:4f:8f:ff:13:
03:8c:9d:54:db:7c:f4:5c:a0:5b:aa:a5:85:bf:dd:
0e:1a:d3:ea:3a:02:e8:2d:fc:0c:5c:df:d8:26:40:
52:4d:c7:bf:e6:07:f4:ae:42:a5:9e:8e:0f:d5:89:
13:92:3a:ff:87:7c:9a:79:71:e5:c3:68:cd:7d:74:
80:ff:38:26:3b:5e:fa:01:c7:42:16:0b:2d:c4:ce:
8b:c2:fe:c3:d7:91:f1:bd:80:5c:2e:79:3b:3c:c5:
ca:19:ba:52:b9:6e:92:40:56:69:c8:cd:29:ce:ef:
10:50:e8:87:c4:4b:cf:4d:f7:55:ac:71:10:59:73:
49:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:01:6F:26:EC:3A:63:83:CC:05:59:02:27:BE:C1:EB:7C:DF:18:B7
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.68.0/24
Signature Algorithm: sha256WithRSAEncryption
37:92:f1:f7:f6:8a:86:47:90:6d:a4:fe:1b:b4:03:e0:56:ae:
e5:2b:3a:1f:fb:93:7e:42:e8:49:b7:13:71:a9:9a:8a:d2:51:
34:54:2d:20:ba:f3:5a:98:07:ea:58:7f:61:f8:42:67:e9:53:
3d:fa:4e:cf:5d:57:24:66:a5:7b:f0:6f:b2:14:4a:f9:1e:64:
d1:10:af:8f:ed:c4:98:82:8d:d7:67:0c:0c:cd:b0:bd:c6:ef:
21:c0:89:3a:c6:85:d6:7a:ff:97:4f:93:ff:58:aa:8d:95:7a:
21:20:af:cf:3c:4b:b4:5b:03:8c:f0:54:fb:76:f0:b2:55:01:
fc:15:19:14:6e:f1:5a:ac:8d:56:e1:84:00:fa:b4:a4:48:41:
68:25:80:4c:2c:3e:59:1e:34:2d:28:ed:f9:37:c0:3e:76:20:
9a:f2:2c:6a:a7:1a:96:91:5c:57:f1:b8:1f:62:aa:4c:9c:1a:
23:65:b7:64:10:f1:42:20:90:30:31:5b:fc:a8:47:4b:4c:d2:
f2:a4:8d:7c:67:29:2a:f0:04:fe:e1:93:f1:26:6f:be:82:15:
0b:d7:11:11:ba:c0:70:06:29:7f:a7:1e:57:58:06:b7:98:c6:
dd:e5:24:67:c9:46:93:a2:67:31:52:44:b2:46:e5:e8:e2:f1:
8d:02:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org