Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37332e302f32342d3234203d3e203630373231.roa
File: 37372e33372e37332e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: 9h9U9uBng2ma0fnENv3BsmD5PdvVc85uvDbP8DpgZxE=
Subject key identifier: D5:80:A8:D3:F8:61:64:63:65:72:7D:2A:C3:3D:93:24:70:59:0C:61
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 30B2529342E32C553323656835FC34B93D57BE3C
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37332e302f32342d3234203d3e203630373231.roa
Signing time: Thu 09 Feb 2023 17:45:44 +0000
ROA not before: Thu 09 Feb 2023 17:40:44 +0000
ROA not after: Thu 08 Feb 2024 17:45:44 +0000
asID: 60721
IP address blocks: 77.37.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b2:52:93:42:e3:2c:55:33:23:65:68:35:fc:34:b9:3d:57:be:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Feb 9 17:40:44 2023 GMT
Not After : Feb 8 17:45:44 2024 GMT
Subject: CN=D580A8D3F861646365727D2AC33D932470590C61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:ed:2c:db:e8:8a:fc:c9:08:b6:fe:f5:10:
c9:92:dc:f3:21:88:dc:66:7f:af:2c:de:bf:d8:c8:
d7:c5:fe:58:ee:00:26:5f:1d:a4:ee:a6:66:5e:06:
7a:ec:20:b0:1a:2e:96:e9:b2:d1:b2:94:6e:59:d2:
8c:79:8a:d9:6d:35:78:50:97:73:89:ef:ef:0e:cf:
69:00:0a:1b:ea:32:5a:f1:28:95:8f:52:42:56:5c:
25:df:33:2a:f2:73:fb:3f:aa:32:80:94:b0:04:c5:
f8:51:5f:78:89:c4:11:60:1a:63:28:ea:ad:18:0d:
a7:b6:19:b8:53:8e:3e:8d:04:62:11:04:d8:b3:86:
44:7d:49:94:1a:f4:4b:a6:f4:c0:c0:44:f3:0c:a8:
2b:76:24:5b:cc:1b:74:7f:61:bb:fc:0b:4a:8b:38:
c6:a6:7b:19:dd:e5:d7:30:a5:e4:d4:82:9e:45:f0:
dc:01:f7:35:65:2b:9f:05:94:90:f4:1a:17:27:83:
f3:00:9b:4f:7c:47:a0:8d:54:c0:4d:1a:01:7a:e6:
fa:5d:d0:10:6c:f0:ec:e1:27:24:2d:1a:d0:d1:ed:
b9:b1:cf:c7:ee:5d:45:3b:72:2e:07:7f:4f:30:f1:
2a:51:6e:88:7a:dd:2d:47:a1:3b:f5:3a:c5:4d:61:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:80:A8:D3:F8:61:64:63:65:72:7D:2A:C3:3D:93:24:70:59:0C:61
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37332e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.73.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1a:4e:16:64:75:05:4a:43:cd:87:63:a7:27:07:11:bf:3d:
da:44:fc:92:2a:02:d8:19:68:15:27:1d:f3:a0:7e:7f:0f:09:
bb:da:d5:8d:22:19:a0:7d:ce:1c:e7:21:a8:47:7b:b3:ea:e9:
e5:5f:da:78:42:18:ce:bb:00:1c:02:ac:ca:68:69:eb:4a:ec:
37:09:09:cb:29:c2:1f:5d:54:2f:c3:fd:ba:12:18:97:5a:6b:
45:d7:3d:47:ce:a3:ee:ef:8c:29:e7:e2:23:36:1b:3b:1e:d0:
0f:d3:a8:72:7a:57:17:c0:35:fb:d0:f2:89:33:85:4e:04:da:
b9:57:a1:95:09:80:49:b9:e8:8b:cb:7f:c3:c8:2c:2f:00:ef:
97:d8:1d:0e:44:b2:78:93:6b:e5:a3:c3:3f:44:c1:64:7d:45:
4d:5a:13:42:d8:cf:c9:ba:6e:e9:8f:83:4d:b9:5b:f0:ad:44:
08:3c:67:67:8f:45:cd:96:7f:2a:ea:f1:6e:79:18:54:7e:e0:
c8:4f:db:d6:86:be:c2:8a:81:0c:0e:19:96:f8:75:85:3a:31:
25:a3:5c:09:16:00:a6:56:60:63:09:24:58:d2:83:c4:a0:e7:
fc:74:ae:a4:2e:68:9c:89:ac:23:7f:17:1c:38:ba:14:5c:06:
6c:ca:f1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org