Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37342e302f32342d3234203d3e20383334.roa
File: 37372e33372e37342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: sxnVYLWEBD5zV2Hqdk+YKC+doF9LU4WghMWUmUuupp4=
Subject key identifier: C4:18:59:7F:1B:34:3A:8B:F2:C2:1B:AD:AB:EB:25:41:F4:8F:41:F4
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 614CD83389A66B6BC2F756916AEE3D24B38E4B3B
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37342e302f32342d3234203d3e20383334.roa
Signing time: Tue 01 Aug 2023 00:00:07 +0000
ROA not before: Mon 31 Jul 2023 23:55:07 +0000
ROA not after: Tue 30 Jul 2024 00:00:07 +0000
asID: 834
IP address blocks: 77.37.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:4c:d8:33:89:a6:6b:6b:c2:f7:56:91:6a:ee:3d:24:b3:8e:4b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jul 31 23:55:07 2023 GMT
Not After : Jul 30 00:00:07 2024 GMT
Subject: CN=C418597F1B343A8BF2C21BADABEB2541F48F41F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2f:fd:26:e3:de:4e:bc:9d:fa:72:98:df:b8:
73:80:7a:45:ce:8f:c3:25:79:5c:c0:1b:ce:60:da:
84:8d:83:c8:cd:66:e7:da:9c:ab:59:fb:55:aa:e9:
fd:06:5b:48:fb:a1:0c:d0:39:aa:15:ba:99:03:fb:
7f:88:4b:60:aa:3c:ae:6c:18:4d:4a:ef:eb:0a:9d:
40:7d:c5:35:01:04:2c:c5:70:5e:09:cd:bf:ab:83:
de:43:3f:f4:39:85:69:92:0b:de:13:8f:ba:67:3a:
62:b3:db:8a:e1:2e:75:d3:b0:71:5e:e7:6b:8e:a1:
b0:b6:ec:4e:dc:03:ee:5e:05:a2:6c:b4:82:6b:4d:
7d:53:a4:8b:50:3d:62:d8:c3:92:78:17:10:fe:cb:
6c:8c:f7:60:1b:8d:38:38:cd:cb:a2:54:73:92:55:
f5:07:27:71:66:c7:bc:26:de:77:e7:b6:8c:a2:3f:
13:87:b5:7a:ea:dc:a4:a5:0f:51:80:b9:21:e4:4d:
7b:49:6b:00:9b:9d:4f:45:7b:bd:37:1d:7f:75:ec:
45:19:b4:96:68:30:f6:3e:6d:29:97:a9:9a:1b:5e:
af:52:77:97:b4:d2:a5:ec:4c:33:2a:51:e2:cf:13:
72:e9:d3:4a:63:8f:be:9f:a9:92:6d:75:bb:d8:ea:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:18:59:7F:1B:34:3A:8B:F2:C2:1B:AD:AB:EB:25:41:F4:8F:41:F4
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.74.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e7:a0:44:7b:aa:b0:11:d8:23:e9:58:6d:3b:d6:78:d4:bd:
a1:bb:20:74:1b:cb:72:1e:ba:15:5c:0c:41:48:b5:a8:f8:c8:
46:97:d3:f3:9d:a4:e4:49:a8:cd:81:ce:c9:a5:b5:31:cc:60:
ca:4a:7a:55:b3:ff:39:43:52:63:30:30:a1:e0:d8:e8:2a:56:
54:77:c1:74:8c:bc:3d:4a:41:ca:21:95:2e:65:88:e7:2a:74:
08:59:2e:a1:5a:61:48:52:15:77:57:c7:87:04:16:03:3a:8c:
d5:a1:92:f0:c5:5d:58:b0:b6:b4:70:b5:37:b8:ae:de:d7:ed:
4d:ba:db:dc:ff:76:e5:cb:28:c4:e2:7d:69:10:37:c6:ec:17:
98:9a:d1:22:3a:88:8a:1c:86:d7:85:da:93:ad:56:3a:4d:79:
6a:c4:1d:85:c5:4d:2a:4c:fa:93:aa:dc:4e:08:9c:8a:68:83:
0f:9b:27:b4:49:19:9a:a4:ad:5c:d5:4c:a4:d8:ce:1a:7e:b6:
cc:96:8e:8f:f1:13:66:5b:6a:d8:bd:7b:0c:06:2e:12:49:d9:
32:1d:87:59:30:65:aa:ea:2b:53:9c:ab:97:3c:20:aa:d4:90:
ba:ae:ce:e1:1d:c6:cb:f4:d9:8a:66:f0:3d:b5:75:0a:9e:20:
53:69:16:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org