Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38342e302f32342d3234203d3e203335373538.roa
File: 37372e33372e38342e302f32342d3234203d3e203335373538.roa (raw, json)
Hash identifier: ACYUXbtV431EXuT8q9ud4bxjyoL5O12yQ7kFtI2UzxM=
Subject key identifier: DF:58:1F:34:F8:FB:95:1B:5B:32:1D:0F:F3:DF:4B:31:9C:7C:1F:0A
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 39E4FC7D8038CDBCF2F1AC0540428A988769A8AE
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38342e302f32342d3234203d3e203335373538.roa
Signing time: Fri 26 May 2023 11:36:21 +0000
ROA not before: Fri 26 May 2023 11:31:21 +0000
ROA not after: Fri 24 May 2024 11:36:21 +0000
asID: 35758
IP address blocks: 77.37.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:e4:fc:7d:80:38:cd:bc:f2:f1:ac:05:40:42:8a:98:87:69:a8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: May 26 11:31:21 2023 GMT
Not After : May 24 11:36:21 2024 GMT
Subject: CN=DF581F34F8FB951B5B321D0FF3DF4B319C7C1F0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a1:e0:62:4d:84:03:97:64:70:7e:6b:3c:3d:
31:13:74:cd:49:64:64:4c:97:9b:c7:8d:4b:4d:62:
b1:0c:22:d4:34:a9:e4:32:39:e3:a7:23:db:6d:ce:
f4:bf:87:aa:6b:64:e1:ba:0a:6f:33:0f:8b:15:4e:
8f:79:68:59:24:64:a4:87:e8:a6:61:2e:4a:92:7c:
ec:a8:a3:1a:83:7e:7b:15:5d:35:40:fe:c2:a3:72:
eb:96:9b:18:ec:dc:6e:fc:50:76:48:ac:ba:41:73:
e1:b6:4b:0e:45:86:39:31:03:f4:85:fe:1a:ca:55:
e1:7d:5f:88:7b:e3:42:63:cc:b7:88:3f:bb:e2:f1:
ed:23:9f:10:6c:cb:85:0c:42:15:a0:90:fa:dd:81:
e5:b4:10:9f:19:a5:47:bf:7f:71:45:55:09:0b:31:
2b:ea:93:ea:98:07:89:f9:62:73:b5:64:ce:d9:de:
b1:a2:20:e8:a9:bf:a3:48:cc:04:91:15:be:93:38:
a9:4b:c4:c2:b4:83:7c:4b:8c:5b:9b:00:fd:f9:12:
fb:be:ed:4e:ae:19:85:b7:de:d7:73:58:b0:51:92:
13:9d:b8:f4:bc:6e:3e:4f:4b:3f:71:5a:85:bd:db:
b3:96:ac:41:a1:de:6f:9f:58:ec:53:80:ec:47:8c:
07:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:58:1F:34:F8:FB:95:1B:5B:32:1D:0F:F3:DF:4B:31:9C:7C:1F:0A
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38342e302f32342d3234203d3e203335373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.84.0/24
Signature Algorithm: sha256WithRSAEncryption
67:e2:2b:af:9b:39:61:ee:83:9f:86:00:40:0a:aa:5f:5b:2c:
4d:30:ad:fe:8b:ff:4f:51:b9:f1:c6:24:77:bc:be:24:f5:14:
2f:23:fd:fd:86:0e:77:45:27:0d:84:11:ec:81:15:e9:8e:a7:
6b:12:fd:3d:25:f9:fe:3e:40:23:85:39:d3:a8:55:93:cb:29:
bd:b8:bd:04:23:34:7a:2b:00:85:fd:cf:77:e1:40:d7:ed:de:
a6:4d:5c:18:a4:d4:e9:43:6b:6e:ff:3c:a7:7b:20:63:92:24:
12:6b:a0:da:84:4b:8a:5e:8b:2d:4f:68:ef:33:2d:1f:25:5f:
b4:9c:42:5a:b7:97:ef:4a:31:a9:6e:d3:7c:8b:fc:33:1f:d8:
86:92:d1:75:84:6e:fa:53:88:17:90:78:84:0b:a2:f2:5c:ae:
8a:2d:e4:b9:62:64:7e:31:d4:0d:a7:ea:8a:22:6d:f2:68:2e:
d7:ba:41:d9:48:24:f4:05:80:40:bd:8a:a6:5d:fc:ea:a7:f6:
a1:a7:43:2e:37:33:0b:f9:25:41:5f:bf:7d:67:64:56:57:63:
5b:be:8a:0a:ae:bc:1d:78:cd:74:6e:2a:3b:80:20:4a:2d:17:
8d:91:2b:a6:66:af:30:9a:89:1f:c1:60:df:db:d6:8d:c2:9c:
69:dc:0e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org