Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37382e302f32342d3234203d3e203630373231.roa
File: 37372e33372e37382e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: osYuXTX6za6fdRVTboeD8UwfvGPOHVcaPAP+KpQZZvE=
Subject key identifier: 1B:5C:9B:85:C1:AB:4A:87:71:AC:81:B7:0D:FF:52:30:99:9D:ED:D6
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 0A22A5828408393E7257DABA9AF525157FB9BEFD
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37382e302f32342d3234203d3e203630373231.roa
Signing time: Thu 26 Jan 2023 19:47:43 +0000
ROA not before: Thu 26 Jan 2023 19:42:43 +0000
ROA not after: Thu 25 Jan 2024 19:47:43 +0000
asID: 60721
IP address blocks: 77.37.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:22:a5:82:84:08:39:3e:72:57:da:ba:9a:f5:25:15:7f:b9:be:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 26 19:42:43 2023 GMT
Not After : Jan 25 19:47:43 2024 GMT
Subject: CN=1B5C9B85C1AB4A8771AC81B70DFF5230999DEDD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:3c:65:b1:1f:14:ba:32:23:d3:64:d5:9c:
ca:2d:70:44:46:42:ff:b3:3f:80:5b:90:d5:17:e9:
66:98:9f:5c:00:8c:68:20:8d:e9:ad:e0:ef:44:b4:
b5:c8:7e:15:a0:bd:bb:7b:c0:25:04:f9:f9:a0:b3:
37:20:eb:8f:21:65:36:49:19:d2:8d:4d:bc:fc:c7:
8b:37:bd:a7:bd:05:34:60:8b:14:d6:72:e4:43:16:
65:97:26:9c:3c:14:5c:dc:68:22:76:8a:94:91:24:
b1:12:86:e9:e3:79:32:0a:0f:2d:f1:ca:eb:51:0f:
7e:9f:f5:f9:c2:42:39:be:17:ba:1a:19:d2:71:98:
83:a3:82:1a:80:0c:9d:e7:dd:94:fa:d5:b0:16:6f:
1e:dc:3f:73:98:6a:0a:ce:67:bc:b9:18:70:8e:b1:
a5:5b:57:a6:63:68:c3:79:43:99:a3:9c:1e:51:5c:
f0:35:5b:7c:b1:59:de:dd:c8:be:b0:28:c0:20:df:
1f:ba:c1:53:09:9b:19:1a:60:0e:ef:3f:d9:29:f9:
51:e7:06:9f:77:83:2a:81:5b:4a:96:68:ce:41:ee:
26:8d:ca:79:e7:70:fe:26:ab:74:42:64:62:c9:84:
bb:af:e6:01:00:33:f1:06:02:c9:72:ce:8b:75:07:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5C:9B:85:C1:AB:4A:87:71:AC:81:B7:0D:FF:52:30:99:9D:ED:D6
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e37382e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.78.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c1:2a:45:6d:fe:71:7d:1a:fa:39:23:55:0c:25:55:e2:82:
f7:aa:f0:da:9d:04:24:6a:9a:94:4c:12:5e:14:02:ab:48:6c:
18:d0:c8:7f:f6:61:c8:19:7d:63:4c:c1:ec:41:d1:65:75:2f:
61:ce:38:7a:21:5b:66:ad:20:df:cc:9f:a6:d4:8d:d3:3a:9c:
6e:67:d0:89:97:ea:c2:c9:95:03:28:24:94:f3:47:94:b2:25:
ee:24:63:dd:a1:35:6e:7c:c9:75:65:42:f6:78:17:9f:74:d9:
40:2f:a6:1b:51:09:4e:c2:b4:f3:35:2e:d4:1a:56:ba:20:04:
30:c9:f6:31:0e:b8:d8:e8:ad:99:27:bb:35:7a:68:f4:cc:65:
98:37:40:7f:74:4b:c9:60:e5:24:52:38:59:f6:ac:69:04:e5:
47:7b:e0:50:db:c9:98:aa:8b:7a:93:35:b3:f1:0a:bd:5b:c6:
d2:77:95:19:00:dd:a2:0c:ad:85:a0:c1:b9:5c:90:49:55:2c:
cb:8a:e4:69:1f:fc:86:b7:12:1d:1b:cb:8e:9c:65:ec:3a:a5:
64:f8:e2:f8:ad:a2:dd:4b:20:4a:30:72:53:45:4d:cc:cc:e4:
5f:9f:54:53:a9:27:e6:22:fe:52:61:7a:3d:0e:e6:db:e7:26:
68:58:9d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org