Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37302e302f32342d3234203d3e2037303138.roa
File: 37372e33372e37302e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: 4maMT9bOTijgRgM74N7/Ch4eWx4fpIuDu6tPjZujb98=
Subject key identifier: 4F:65:56:67:E8:87:32:FA:21:28:B9:9E:7A:4B:CD:20:BE:A0:B7:69
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 6D1B841248CB447D4FD7B48002401FD5BCA69C6C
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37302e302f32342d3234203d3e2037303138.roa
Signing time: Fri 16 Jun 2023 08:02:33 +0000
ROA not before: Fri 16 Jun 2023 07:57:33 +0000
ROA not after: Fri 14 Jun 2024 08:02:33 +0000
asID: 7018
IP address blocks: 77.37.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:1b:84:12:48:cb:44:7d:4f:d7:b4:80:02:40:1f:d5:bc:a6:9c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jun 16 07:57:33 2023 GMT
Not After : Jun 14 08:02:33 2024 GMT
Subject: CN=4F655667E88732FA2128B99E7A4BCD20BEA0B769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:68:5b:c3:34:d1:08:a0:40:4a:60:ca:4d:1f:
fa:b2:4d:21:ef:f0:82:a3:21:3f:db:1b:04:a3:45:
39:32:16:a2:5c:55:cb:c6:f0:f6:6f:02:d3:f8:20:
7d:b4:1f:2f:88:e7:22:48:4f:08:88:ce:c0:27:e3:
03:33:2a:2a:2f:68:dd:93:23:b0:e0:2d:89:e9:2f:
88:3e:f4:e5:66:74:20:7e:ba:b3:a1:a6:f2:a6:1c:
2d:4f:9b:77:7a:36:8b:fd:da:ea:7a:0b:fa:77:61:
dc:be:e3:ea:3c:3f:62:72:ed:16:8a:f3:1e:e3:2b:
54:d0:ee:d2:20:f6:5a:50:ce:bf:70:21:d2:4b:54:
fa:64:ca:f5:10:62:8f:5f:6b:6e:9d:2b:b1:52:81:
2f:b3:b0:31:84:eb:74:bb:7f:91:bd:8f:5d:f0:a4:
4e:28:42:eb:c7:5c:84:0c:d2:d9:19:1f:88:0c:7f:
41:81:f6:85:60:78:03:bb:ea:0e:0a:cb:cb:93:02:
44:98:37:08:53:83:61:85:a6:0b:dd:e9:67:36:2a:
e5:3d:b0:99:38:42:1c:1d:7d:68:91:17:ba:1a:56:
59:f9:b5:50:a8:e3:f2:9a:8d:72:4e:53:c6:88:1a:
d1:46:6c:a4:f1:f1:00:21:6a:56:35:25:61:6d:47:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:65:56:67:E8:87:32:FA:21:28:B9:9E:7A:4B:CD:20:BE:A0:B7:69
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37302e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.70.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:8c:18:44:a9:5d:0b:72:e3:73:1d:06:0a:d1:6c:02:7e:43:
13:5f:b0:71:5d:d6:91:b8:8f:81:ce:1d:2b:37:2f:60:c9:ae:
94:ac:68:1a:27:42:90:1c:6b:d5:5c:99:57:3f:32:eb:f6:4d:
e3:30:9b:07:75:98:e3:49:1f:f3:dc:0e:43:55:a8:86:cd:62:
80:16:ee:9f:c3:51:ef:0a:c0:c8:da:b7:c2:ce:11:56:c6:ac:
e5:21:1d:a6:2a:55:ea:e8:3b:c5:55:e8:a4:f3:11:90:9a:43:
85:f7:75:20:80:81:b7:8e:65:ca:19:18:bf:11:33:4e:dc:ac:
12:d0:4b:89:b1:aa:80:3a:54:01:3a:72:10:27:6d:57:48:5d:
58:d9:f1:76:5e:d9:66:e7:b5:53:52:6e:15:10:b3:ee:f9:50:
d2:6d:36:59:0b:7e:23:e1:af:b6:89:06:29:9d:a3:6d:0e:7e:
47:35:f2:e1:a0:38:30:53:19:d2:99:cf:15:6a:df:26:7b:aa:
ac:aa:6d:c5:5e:be:72:ae:ca:fa:59:a6:e0:80:e2:7d:a7:23:
29:a1:42:7c:43:bb:fc:9d:9b:a9:6b:24:a8:4f:7a:06:c9:6e:
57:1a:97:9f:fb:b9:b5:f8:c8:03:32:9e:c0:60:2f:ae:1a:df:
7c:35:9c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org