Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38312e302f32342d3234203d3e203439393939.roa
File: 37372e33372e38312e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: TQMBk65/qwzNLQ6n3DfU4Xf9pSnckh1im/gwHVraDrg=
Subject key identifier: 8F:97:80:CB:6D:48:9C:80:75:2D:41:FE:6A:F6:24:1F:AB:22:F7:8B
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 4CE90D0A9B8B5663DA7972CA0857C6CF0E5AC81D
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38312e302f32342d3234203d3e203439393939.roa
Signing time: Sat 28 Jan 2023 22:23:00 +0000
ROA not before: Sat 28 Jan 2023 22:18:00 +0000
ROA not after: Sat 27 Jan 2024 22:23:00 +0000
asID: 49999
IP address blocks: 77.37.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e9:0d:0a:9b:8b:56:63:da:79:72:ca:08:57:c6:cf:0e:5a:c8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 28 22:18:00 2023 GMT
Not After : Jan 27 22:23:00 2024 GMT
Subject: CN=8F9780CB6D489C80752D41FE6AF6241FAB22F78B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:8a:6d:32:3a:f7:ca:ca:96:1a:e0:78:a8:
6c:70:94:27:df:09:36:b9:14:15:6c:fa:b1:4d:30:
b9:d5:c0:fe:9c:23:57:b1:72:5f:b7:88:25:4f:03:
1a:a9:1d:0c:ad:11:a9:01:2b:33:f0:b5:a9:5b:7d:
5e:60:47:b1:b3:83:72:43:31:e5:fa:0d:79:86:59:
a5:2a:7e:72:bb:d8:f4:f2:80:bc:04:d3:fc:c8:59:
89:55:bb:01:4b:cf:c2:1d:20:6b:7d:9c:50:47:bc:
a5:d0:51:f1:65:b2:c9:81:25:12:cd:77:f5:7d:59:
84:1d:84:c9:50:44:2c:d3:21:e9:01:d1:c1:c6:da:
f6:38:5f:e0:0d:02:33:73:da:c6:8a:7c:22:de:54:
ad:fe:29:22:12:78:e5:c1:53:c9:e3:f7:45:af:1b:
32:3a:bb:27:4d:9a:73:a4:11:1c:5d:92:91:0d:f9:
ef:53:96:8e:a2:7c:e8:e0:2c:5e:88:d4:3c:8d:e6:
4e:7f:55:26:8d:88:d6:67:3d:fc:8b:34:cb:cc:2d:
95:b8:70:c4:73:c7:88:3d:dd:03:61:82:c0:01:7e:
72:27:be:a2:b1:c4:67:8d:be:00:d7:dd:ac:40:c5:
dd:62:69:30:3a:7f:86:82:8c:78:fb:61:68:ec:ad:
ca:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:97:80:CB:6D:48:9C:80:75:2D:41:FE:6A:F6:24:1F:AB:22:F7:8B
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38312e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.81.0/24
Signature Algorithm: sha256WithRSAEncryption
00:85:a4:62:cd:16:7e:1c:92:6c:46:d0:49:62:e2:23:88:ab:
cc:a4:85:0f:94:84:e2:1d:29:10:6d:5e:be:8f:14:3c:46:99:
3f:1a:d3:9a:74:96:c7:a9:8a:45:3c:a0:27:a2:64:40:aa:0e:
0e:3b:70:e3:3e:2b:c2:27:61:bd:8a:24:da:c5:bd:88:b3:88:
c7:8b:2b:12:cc:0e:e8:c4:cf:2c:da:37:9d:ee:2a:39:b3:d8:
11:e6:79:f0:91:4b:b7:a3:a2:6a:4f:ae:09:69:69:a7:03:3e:
bf:1d:d4:cd:7d:f2:86:e0:fa:0a:6d:ac:79:44:3d:e7:90:6e:
36:0e:68:30:46:c1:24:3e:b4:23:2a:fc:38:a5:5f:10:ac:58:
0f:5a:c0:17:17:82:33:c6:bc:62:0f:f4:af:1a:db:49:76:9d:
af:97:b5:f2:8b:26:87:4f:31:83:63:ff:60:67:03:92:1d:23:
36:aa:1d:ca:c4:9b:9c:19:9f:5c:60:c9:de:5a:5e:fb:45:09:
c0:0b:d8:64:d9:f6:b7:7d:5e:54:83:c9:22:bb:a9:0e:c0:18:
34:81:09:7a:5b:61:81:4f:81:c7:22:81:28:ad:45:f4:50:c1:
c1:9a:e1:cf:cb:49:a7:71:06:23:af:8d:e9:3c:ec:e5:8c:5b:
2c:71:e8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org