Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e382e302f32342d3234203d3e203331373336.roa
File: 37372e33372e382e302f32342d3234203d3e203331373336.roa (raw, json)
Hash identifier: +cBlWR+WjEcaNkuiiqJV15BIa7mZOaSP4Zdb4quXSXo=
Subject key identifier: 92:9A:82:DB:A9:13:F9:21:E9:BB:16:B3:14:8F:DA:5A:EF:50:F2:3D
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 5EDCD344AA0ECC9AADD5FE74387135FD0A56C678
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e382e302f32342d3234203d3e203331373336.roa
Signing time: Fri 20 Jan 2023 06:26:05 +0000
ROA not before: Fri 20 Jan 2023 06:21:05 +0000
ROA not after: Fri 19 Jan 2024 06:26:05 +0000
asID: 31736
IP address blocks: 77.37.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:dc:d3:44:aa:0e:cc:9a:ad:d5:fe:74:38:71:35:fd:0a:56:c6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:05 2023 GMT
Not After : Jan 19 06:26:05 2024 GMT
Subject: CN=929A82DBA913F921E9BB16B3148FDA5AEF50F23D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:33:8f:85:0d:5e:52:07:b4:a5:cb:5e:36:
1e:87:f8:bd:f1:41:7c:48:e5:41:ac:11:5c:f5:85:
64:58:d6:34:56:ad:0b:84:82:64:a9:fa:dd:ef:78:
10:6d:a9:ea:7e:1f:c1:58:4a:15:70:3b:db:95:cf:
f1:dc:06:23:f3:e4:cf:08:73:36:34:cc:82:6e:e6:
ba:2b:dd:c3:d4:eb:38:7b:5c:ea:32:97:43:0c:12:
36:19:98:cf:0d:57:fd:ce:07:bf:d4:6b:98:19:a2:
24:16:49:1a:a7:f8:ce:f1:77:dd:73:78:11:3c:99:
6d:c6:87:2f:36:cd:64:02:90:44:b9:53:a1:3b:90:
4b:b4:e7:c5:d6:03:d7:ac:e3:1a:7a:d5:63:a5:31:
93:ed:b5:30:8e:f4:34:1b:c0:c3:91:ad:2e:1b:02:
18:d7:3e:77:88:42:95:e6:c2:f6:bf:79:53:2a:63:
7d:77:a4:4b:99:84:d4:7a:ba:ba:12:07:df:35:f8:
39:31:09:d0:fe:c6:4b:8b:3e:f0:8a:30:d8:36:01:
a4:5f:30:a5:5f:c3:63:86:d7:6f:50:03:ef:88:ab:
5e:f9:8b:97:b6:48:2e:3b:e8:97:c9:e5:5f:bb:b6:
59:39:da:92:4e:58:6f:e2:e0:88:6b:40:01:b6:59:
19:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9A:82:DB:A9:13:F9:21:E9:BB:16:B3:14:8F:DA:5A:EF:50:F2:3D
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e382e302f32342d3234203d3e203331373336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.8.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:33:c8:5d:e7:c3:3f:d2:76:dc:fd:34:c4:fd:50:ee:dc:a9:
0c:41:be:c4:03:11:ba:18:ed:0c:c5:eb:28:bd:15:b1:d2:7c:
10:09:4d:c6:03:b3:14:b3:22:8a:df:6e:6e:c8:d0:02:ce:8d:
74:87:9d:49:20:e6:b7:ab:f2:57:28:29:bc:e2:6c:ac:89:d2:
fd:b8:9e:a8:b0:e7:10:61:6d:8b:10:11:10:e2:16:9e:df:e3:
66:03:61:73:37:ca:47:71:9b:00:40:42:a6:ae:80:59:8e:5a:
82:c1:27:70:71:25:71:cf:a9:df:d2:eb:00:9b:72:c7:69:a8:
d9:16:2c:8a:c8:22:4f:58:57:c2:7d:82:55:ff:bf:c7:97:e5:
3f:08:38:e0:5d:07:0f:a0:0d:82:79:6a:aa:5f:9d:33:79:32:
ec:bd:68:75:11:85:71:f4:5f:15:0c:85:b5:2c:ae:4d:e6:a8:
8f:0d:ef:d7:a8:2c:81:0d:42:b3:ba:1f:8e:0a:34:48:36:98:
ce:9c:67:fb:61:9b:19:9c:62:a6:22:44:58:a2:bf:71:8d:ec:
b5:64:b7:98:f0:7d:10:86:c2:eb:2d:df:00:83:25:f4:22:ad:
87:ba:53:5c:18:14:e4:b6:aa:47:63:30:14:10:b6:c4:69:20:
64:c5:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org