Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38302e302f32342d3234203d3e203630373231.roa
File: 37372e33372e38302e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: dGDOa34611QMw+cyXV51Lu8mllsSKT9Q4eLRfRiaif0=
Subject key identifier: 9C:D5:92:A1:B5:9D:CF:58:E1:41:05:11:AF:2C:89:A0:B5:5D:0B:DB
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 4663F7BF0C02535B25F7EB58DB2805CB0E5713B3
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38302e302f32342d3234203d3e203630373231.roa
Signing time: Fri 20 Jan 2023 06:26:09 +0000
ROA not before: Fri 20 Jan 2023 06:21:09 +0000
ROA not after: Fri 19 Jan 2024 06:26:09 +0000
asID: 60721
IP address blocks: 77.37.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:63:f7:bf:0c:02:53:5b:25:f7:eb:58:db:28:05:cb:0e:57:13:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:09 2023 GMT
Not After : Jan 19 06:26:09 2024 GMT
Subject: CN=9CD592A1B59DCF58E1410511AF2C89A0B55D0BDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:4a:11:d8:0f:4a:65:3d:cc:b0:80:08:70:
fa:b8:bf:7e:0d:3a:53:b8:5e:ae:7e:ab:68:09:13:
0c:36:dc:13:53:5e:eb:4c:c7:d0:71:54:4a:9d:d5:
99:01:4c:10:f8:15:ce:a8:e4:5b:f9:22:25:29:f6:
90:da:02:6d:95:c7:d6:55:04:e2:c6:e7:65:cc:3d:
64:ab:10:d9:be:3f:1e:9d:b0:7a:bb:e6:04:2b:ea:
50:3a:0a:6e:47:a3:99:61:03:6c:7f:73:ee:13:ca:
6f:96:a7:75:f7:69:64:81:df:6b:7f:97:b8:14:bb:
9c:80:89:e8:01:f4:97:af:a8:e0:b2:67:d8:5c:84:
d8:6b:fc:5a:28:7a:fb:02:8a:e8:a8:85:f1:38:c2:
ad:4c:e4:9e:c3:d9:1e:5b:7c:14:24:07:2b:04:0a:
d3:59:f8:41:98:ad:ce:f5:e9:47:0b:4e:a4:01:3d:
59:d5:3e:e6:e1:14:aa:f2:20:b3:0e:a8:66:f1:70:
86:cb:95:3b:a2:7e:ca:4c:48:7e:27:2a:59:cb:19:
39:0c:9a:cc:df:34:b9:34:40:18:3c:1b:b2:9e:75:
69:de:aa:40:ec:4f:1a:0e:24:1f:bd:0f:81:b4:80:
71:b4:e0:61:eb:19:0c:45:95:73:ea:de:27:fe:87:
19:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D5:92:A1:B5:9D:CF:58:E1:41:05:11:AF:2C:89:A0:B5:5D:0B:DB
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38302e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:7a:a4:4f:86:96:ea:70:ef:3a:8e:c2:e4:68:d3:9b:15:ff:
7a:99:bd:3e:be:06:75:08:c8:07:f6:ac:5a:f7:27:7b:e1:24:
53:9a:21:2e:72:0d:73:8f:f2:2f:b8:e5:68:0d:b8:01:f3:2c:
63:bf:7f:92:b7:3e:65:95:e0:35:9b:11:a0:cd:60:a1:bf:3f:
66:34:42:1d:7d:35:37:c5:d3:aa:aa:35:a4:07:38:2f:43:ce:
89:de:94:0b:4d:9e:5b:3d:59:cb:9a:a7:de:d3:54:fc:5d:9a:
ba:0a:56:54:f2:67:f9:51:f0:d6:7f:7f:40:4c:a0:bf:7a:54:
c8:6e:da:86:6d:65:7a:9c:91:05:3a:27:6d:7e:37:d8:d8:da:
e1:10:ea:fc:71:02:d9:e4:10:c6:ad:59:e2:a5:80:52:0c:63:
2a:69:fd:1f:90:d9:d8:8d:18:52:15:1f:91:be:87:a4:fe:11:
2a:86:5a:3b:45:f4:51:71:fa:29:d2:74:de:fc:11:11:01:40:
46:3c:33:17:43:f4:21:61:67:82:c3:d0:61:99:61:ed:f5:a1:
e5:58:83:45:df:db:14:0a:c4:3a:3f:6f:e7:56:e4:9b:f2:91:
9c:11:99:dd:de:12:4d:99:ef:16:e0:89:1a:60:7a:bb:bd:26:
53:5a:15:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org