Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37302e302f32342d3234203d3e20383334.roa
File: 37372e33372e37302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: TL4PuvOJnX9G9KKir6zjmdxSwgsPiWCOg2mpT04AG3E=
Subject key identifier: 7E:27:49:C2:02:8E:A6:43:D9:33:34:C9:6C:A6:55:5B:F4:55:29:86
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 454FF21CF922A69B56D5D87A46730E8514F5EC91
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37302e302f32342d3234203d3e20383334.roa
Signing time: Mon 31 Jul 2023 14:00:05 +0000
ROA not before: Mon 31 Jul 2023 13:55:05 +0000
ROA not after: Mon 29 Jul 2024 14:00:05 +0000
asID: 834
IP address blocks: 77.37.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:4f:f2:1c:f9:22:a6:9b:56:d5:d8:7a:46:73:0e:85:14:f5:ec:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jul 31 13:55:05 2023 GMT
Not After : Jul 29 14:00:05 2024 GMT
Subject: CN=7E2749C2028EA643D93334C96CA6555BF4552986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:db:58:52:4c:e1:75:b0:ad:0d:91:8b:c9:
8b:2b:14:1e:76:54:fd:94:27:a8:4d:13:76:5d:7f:
6b:c1:9f:1b:f1:85:62:1b:ca:0e:70:c9:9b:49:5d:
7c:11:5f:7a:85:bc:76:8c:df:53:d3:fa:b0:7a:90:
47:f6:c4:2d:fa:d7:94:c4:4d:c3:5d:b0:ad:53:41:
7f:81:7f:67:b3:18:01:2d:69:e5:bb:f0:6f:cf:30:
e8:fe:42:21:9d:d5:8a:a8:7a:af:0b:c6:8c:8b:03:
2c:83:29:85:a2:64:a2:2a:17:fb:b8:13:fd:37:ce:
29:41:ac:ca:76:bf:c9:45:0b:04:c1:cd:85:f3:e6:
49:d5:21:bf:65:0a:b6:9e:ef:f5:25:43:3f:f9:f2:
57:8f:30:60:b5:8e:52:38:89:b2:60:a3:0a:33:ac:
90:57:fc:2c:d5:35:03:1d:8f:f5:8a:b9:45:d9:32:
8d:87:4c:2c:cb:bf:e2:90:f6:e5:78:34:ab:f8:48:
54:b3:d0:b7:18:95:f2:d5:39:67:cd:8e:03:e3:1e:
35:7f:12:de:ff:a3:41:a3:cd:8c:6a:cb:03:c6:d9:
69:58:0c:0c:05:7a:8d:61:1e:c4:82:3b:f9:ec:45:
13:53:d0:1c:54:61:a2:c0:49:00:28:be:18:a0:f8:
d5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:27:49:C2:02:8E:A6:43:D9:33:34:C9:6C:A6:55:5B:F4:55:29:86
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.70.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:fa:e5:7f:f6:b0:f5:d4:70:c7:c4:e3:e1:f4:7a:9f:ab:24:
87:8a:4d:8d:68:50:48:9d:d1:68:6c:41:10:ae:dd:3b:09:db:
9c:23:8e:d7:7f:d5:ac:0e:9a:e2:b6:45:2c:4d:1d:84:d9:43:
d6:e1:3e:d2:d8:67:98:51:06:69:32:f3:a0:cc:7a:fb:d4:e9:
1d:c0:fb:70:8d:89:f7:b2:96:af:f2:a6:4b:e5:33:c4:54:0a:
6b:fa:07:ea:00:f5:1b:b3:e2:cd:d0:3b:64:d7:d1:47:62:25:
b6:56:7b:f7:f0:13:a0:dd:ab:02:eb:08:a1:7c:74:dd:97:9f:
37:21:09:c7:09:6f:93:7a:66:8b:0f:02:ac:f1:02:e9:fd:03:
42:de:6f:16:7c:7a:d8:09:8b:7c:15:e2:ed:19:40:bf:2e:99:
fe:e2:41:ed:f2:8f:11:1d:9b:2b:d3:65:70:93:d5:ca:b0:69:
da:84:2f:ea:1f:16:9f:78:ae:94:f7:df:fd:f3:9f:fa:1b:a3:
68:66:83:a1:69:44:19:d7:7e:f8:3d:33:ba:58:77:b0:15:f3:
64:84:ef:ab:44:cc:19:07:6c:c1:77:d8:ba:85:c3:eb:d3:4f:
c5:12:a4:80:93:d6:11:6a:0c:76:b5:fd:fa:97:cf:fc:99:6a:
91:41:a5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org