Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38382e302f32342d3234203d3e203134343435.roa
File: 37372e33372e38382e302f32342d3234203d3e203134343435.roa (raw, json)
Hash identifier: FahevbG4FFW16xWAF2VShTTztgEi2ApJ/oo5QLPbPRQ=
Subject key identifier: 21:D7:32:49:DB:D7:C7:B1:B1:87:CF:8D:72:D0:4E:14:D3:32:02:94
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 4032B0530226ACACE03965C3D483F475C7BC49ED
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38382e302f32342d3234203d3e203134343435.roa
Signing time: Thu 16 Mar 2023 17:53:33 +0000
ROA not before: Thu 16 Mar 2023 17:48:33 +0000
ROA not after: Thu 14 Mar 2024 17:53:33 +0000
asID: 14445
IP address blocks: 77.37.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:32:b0:53:02:26:ac:ac:e0:39:65:c3:d4:83:f4:75:c7:bc:49:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Mar 16 17:48:33 2023 GMT
Not After : Mar 14 17:53:33 2024 GMT
Subject: CN=21D73249DBD7C7B1B187CF8D72D04E14D3320294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:6f:db:3b:8d:3c:b3:2a:15:f8:1f:ae:6e:
43:da:f4:c6:2f:6b:28:9b:d0:88:a8:8a:fa:21:55:
6a:e3:f9:06:c0:4d:ee:ed:6c:29:63:14:52:cb:28:
24:fb:1e:72:f0:11:e0:17:5b:d7:b5:2d:26:c9:a3:
25:c7:33:37:e9:f8:3f:95:50:f2:95:9f:c1:bc:01:
46:2a:83:28:9c:e5:ca:e4:e4:6e:d9:7a:8f:47:cd:
a7:7e:7e:61:31:45:14:5c:3a:23:a0:73:53:16:d9:
21:24:77:1f:3c:d9:8f:b5:3e:e8:c5:37:e6:79:a6:
a9:a9:53:57:b5:ab:e4:15:ea:28:e1:20:fd:ed:e6:
45:f7:65:fd:b9:7a:82:7d:a9:1f:0a:5b:13:85:91:
de:e6:99:c6:59:0e:09:c2:7a:5b:a6:c4:16:51:f4:
02:e2:5f:09:a9:89:40:16:76:20:8d:4d:47:85:5b:
44:f0:de:07:a7:6c:8c:5d:13:2e:3e:94:bd:97:98:
75:1b:f4:7a:a1:97:18:b4:12:ed:e8:66:78:f9:4f:
96:56:fb:02:7f:23:12:f2:df:cc:ea:1e:96:2e:73:
4e:ce:a2:7e:e9:9b:e9:d0:46:b3:1c:a4:55:fe:5a:
d2:43:84:fc:32:57:e2:94:7b:e0:7c:74:d6:5a:25:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D7:32:49:DB:D7:C7:B1:B1:87:CF:8D:72:D0:4E:14:D3:32:02:94
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38382e302f32342d3234203d3e203134343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.88.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e3:12:80:0d:a3:c4:6a:4a:3b:d6:e8:7a:31:3a:8f:1b:fb:
6a:c9:31:48:0b:6e:49:49:98:42:5f:94:d7:98:51:fe:5b:e8:
fb:7a:71:98:61:66:28:eb:09:68:20:10:8b:fa:80:6c:82:d9:
18:d2:5b:ec:06:05:19:f8:0c:d8:d8:9e:c7:54:1f:36:8b:3b:
bd:32:0a:e7:fa:ab:15:f5:75:99:f1:13:eb:31:5e:dd:94:4d:
2a:fe:db:69:49:57:fe:7d:a5:e7:31:ed:39:16:b7:72:3c:a2:
37:8f:be:4e:c6:0a:ef:a6:7b:74:d9:2e:fb:d4:96:58:82:55:
57:8d:04:9e:cc:4a:7d:4f:26:07:8d:08:a4:65:fe:e6:b5:71:
06:5f:a7:8e:83:d2:b6:af:29:2f:e7:fe:4f:35:7f:54:96:93:
20:b0:66:d2:29:96:2d:16:43:67:03:46:79:b8:18:4d:dd:7b:
6d:d4:20:5a:b6:53:90:be:45:03:02:f4:70:db:b4:3c:f8:90:
3b:33:e8:c6:40:30:7b:09:8e:83:ac:03:70:2a:be:06:d7:19:
ae:73:03:78:ef:2a:6c:2f:d2:4f:33:bc:dd:2e:fc:34:89:13:
b8:79:ff:b8:4c:ab:12:96:ee:7a:81:0e:1d:97:97:7e:24:8f:
5d:a5:29:61
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUQDKwUwImrKzgOWXD1IP0dce8Se0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzAzMTYxNzQ4MzNaFw0yNDAzMTQxNzUzMzNaMDMxMTAvBgNV
BAMTKDIxRDczMjQ5REJEN0M3QjFCMTg3Q0Y4RDcyRDA0RTE0RDMzMjAyOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL32/bO408syoV+B+ubkPa9MYv
ayib0IioivohVWrj+QbATe7tbCljFFLLKCT7HnLwEeAXW9e1LSbJoyXHMzfp+D+V
UPKVn8G8AUYqgyic5crk5G7Zeo9Hzad+fmExRRRcOiOgc1MW2SEkdx882Y+1PujF
N+Z5pqmpU1e1q+QV6ijhIP3t5kX3Zf25eoJ9qR8KWxOFkd7mmcZZDgnCelumxBZR
9ALiXwmpiUAWdiCNTUeFW0Tw3genbIxdEy4+lL2XmHUb9Hqhlxi0Eu3oZnj5T5ZW
+wJ/IxLy38zqHpYuc07Oon7pm+nQRrMcpFX+WtJDhPwyV+KUe+B8dNZaJdNPAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUIdcySdvXx7Gxh8+NctBOFNMyApQwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzczNzJlMzMzNzJlMzgzODJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNDM0MzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABNJVgw
DQYJKoZIhvcNAQELBQADggEBAGbjEoANo8RqSjvW6HoxOo8b+2rJMUgLbklJmEJf
lNeYUf5b6Pt6cZhhZijrCWggEIv6gGyC2RjSW+wGBRn4DNjYnsdUHzaLO70yCuf6
qxX1dZnxE+sxXt2UTSr+22lJV/59pecx7TkWt3I8ojePvk7GCu+me3TZLvvUlliC
VVeNBJ7MSn1PJgeNCKRl/ua1cQZfp46D0ravKS/n/k81f1SWkyCwZtIpli0WQ2cD
Rnm4GE3de23UIFq2U5C+RQMC9HDbtDz4kDsz6MZAMHsJjoOsA3AqvgbXGa5zA3jv
Kmwv0k8zvN0u/DSJE7h5/7hMqxKW7nqBDh2Xl34kj12lKWE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org