Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36392e302f32342d3234203d3e203439393939.roa
File: 37372e33372e36392e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: GemnuuKIunX1LlTeu0TAVPJgUAUrscad2lNmcbXO/Fk=
Subject key identifier: A0:D2:9F:0F:85:8E:E3:0F:2D:F6:2B:06:39:4F:F4:28:1F:CC:78:7A
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 639280E2925684447D54357DF32EE5D2BE926D20
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36392e302f32342d3234203d3e203439393939.roa
Signing time: Tue 07 Feb 2023 19:18:24 +0000
ROA not before: Tue 07 Feb 2023 19:13:24 +0000
ROA not after: Tue 06 Feb 2024 19:18:24 +0000
asID: 49999
IP address blocks: 77.37.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:92:80:e2:92:56:84:44:7d:54:35:7d:f3:2e:e5:d2:be:92:6d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Feb 7 19:13:24 2023 GMT
Not After : Feb 6 19:18:24 2024 GMT
Subject: CN=A0D29F0F858EE30F2DF62B06394FF4281FCC787A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:99:c2:e8:fd:46:d4:f9:4f:51:65:80:f5:
5a:1a:b6:04:2d:f6:04:06:e3:00:97:2f:3c:3e:5c:
b1:12:dc:f3:7b:dd:29:14:91:f1:20:0c:8a:5d:18:
82:99:93:23:fb:f5:a7:33:90:e7:a6:64:03:62:26:
de:da:d4:bb:bc:52:79:32:67:20:c3:63:8d:39:8d:
22:7f:76:3b:8d:61:73:c0:a8:46:54:09:ea:bf:a2:
49:ac:4d:8c:c4:a3:80:64:9e:df:fd:b5:7a:53:7f:
71:36:6b:19:ca:a4:37:c5:4c:8a:92:13:91:e4:96:
52:c9:66:46:73:69:dc:34:bd:00:b8:27:5e:f8:e7:
50:42:81:93:df:4d:3b:0a:fd:95:45:c5:54:54:29:
02:07:fe:e1:d1:00:21:18:8a:a1:64:2f:36:52:03:
c3:03:fb:99:a1:56:05:18:db:02:19:ba:2f:d6:bc:
ba:ff:1f:3b:b3:29:eb:a2:6b:c5:56:73:16:ce:2e:
78:17:40:c4:e4:9a:72:07:0b:92:f9:df:d6:35:d5:
e8:41:50:07:c7:9a:81:93:c5:34:f7:4a:e7:a1:f7:
9d:99:b3:95:f2:90:43:0b:38:c6:e7:a2:00:00:6c:
1b:0b:30:39:04:3b:7a:b2:77:79:69:4f:40:75:f1:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D2:9F:0F:85:8E:E3:0F:2D:F6:2B:06:39:4F:F4:28:1F:CC:78:7A
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36392e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:06:e5:ff:a7:e9:25:19:64:56:fb:c1:70:50:16:80:31:b4:
e6:6c:b9:ce:4a:8f:3d:d1:3d:c0:a9:09:ff:8e:e4:a3:37:4c:
b5:8e:77:73:5c:02:05:09:7f:0a:9e:40:37:9c:ae:bf:47:d3:
0f:b3:0d:bd:e2:b3:73:de:f4:0d:06:e7:8f:83:c7:8a:11:25:
32:86:68:22:ef:0d:02:77:2a:b4:98:eb:51:7e:ed:c2:40:7a:
ce:45:53:d4:69:dd:6e:e2:3a:5f:cb:98:c6:95:2d:5b:0b:46:
c3:60:96:a9:b1:1c:eb:6d:98:ec:f0:1a:12:43:44:da:b3:f3:
74:61:60:55:b5:ad:ae:90:ea:8b:a3:cb:55:ee:48:85:70:04:
b0:ac:16:25:45:f0:81:18:2d:ab:5d:b2:49:9a:77:7b:40:fd:
01:2f:18:fd:15:0e:63:99:57:03:90:f0:74:54:97:d6:9d:2d:
0c:2c:fa:20:85:7c:ea:e5:bf:07:a9:5c:92:85:bc:75:31:b8:
0a:eb:a3:ee:e9:52:e3:fd:df:b3:e7:da:17:62:0f:6e:84:0b:
96:c3:2f:06:1e:c6:21:39:1e:71:20:95:d0:bb:a4:34:7b:8c:
16:cd:a1:dc:43:87:e7:73:e3:f1:31:32:44:e3:e4:69:8d:5d:
e6:1c:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org