Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e392e302f32342d3234203d3e20323132363039.roa
File: 37372e33372e392e302f32342d3234203d3e20323132363039.roa (raw, json)
Hash identifier: 5dqAA2J1G93QBMrmxmFKg2xMvkfLBeYs/WlUD8wY+hs=
Subject key identifier: 93:62:95:B2:B5:1A:56:1B:B5:FF:4C:71:1E:F9:80:A5:22:D6:DA:A6
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 085BA30A9A9034C512FBF5D67D85CFB9C92AEBF9
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e392e302f32342d3234203d3e20323132363039.roa
Signing time: Fri 20 Jan 2023 06:26:06 +0000
ROA not before: Fri 20 Jan 2023 06:21:06 +0000
ROA not after: Fri 19 Jan 2024 06:26:06 +0000
asID: 212609
IP address blocks: 77.37.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:5b:a3:0a:9a:90:34:c5:12:fb:f5:d6:7d:85:cf:b9:c9:2a:eb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:06 2023 GMT
Not After : Jan 19 06:26:06 2024 GMT
Subject: CN=936295B2B51A561BB5FF4C711EF980A522D6DAA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7b:5d:08:af:9b:e2:25:0b:d1:a3:65:f1:8e:
37:a1:da:d0:a8:24:53:83:29:3b:93:76:d7:f1:31:
05:dd:b6:40:50:e4:be:a2:e5:ed:76:7b:92:74:26:
8d:3e:4b:33:96:0f:3d:18:df:a8:0a:16:90:39:dd:
c0:8a:ed:9c:cd:d8:7e:6d:37:d2:a7:7a:8e:b3:48:
b6:2b:5b:9e:68:ad:59:06:f3:dc:c3:ab:b1:db:32:
41:d9:79:6d:2f:82:88:84:b7:f7:b6:5b:20:a6:66:
29:3b:47:41:1c:02:66:a2:91:d4:dc:d2:02:ba:a6:
b9:ea:3c:fe:68:90:e2:e2:2f:2c:f1:29:91:7a:35:
4b:7e:98:83:b5:86:40:78:ac:a7:5e:17:15:1a:c4:
0a:ae:c2:ad:34:3a:5c:c8:96:96:ca:5d:64:4d:cd:
f2:43:8b:61:3a:b3:51:e8:da:51:22:b7:15:43:c4:
6f:78:39:ef:be:4f:78:d1:4f:4f:58:6c:5f:af:84:
0a:34:af:a4:c3:37:80:55:f0:46:b5:e0:10:0f:7b:
28:e7:b7:17:97:07:91:70:66:0b:e9:e4:43:c1:26:
65:99:5d:ef:4d:cb:1a:61:02:07:a3:74:c8:97:ff:
1a:59:c8:d8:ea:38:2a:e1:b3:48:c0:99:12:8b:8d:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:62:95:B2:B5:1A:56:1B:B5:FF:4C:71:1E:F9:80:A5:22:D6:DA:A6
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e392e302f32342d3234203d3e20323132363039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.9.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4d:fb:3d:f9:59:d4:5c:cc:4f:3e:0f:9f:84:1d:c6:3f:09:
f7:05:a9:31:3f:5b:85:1e:b3:be:82:c5:e9:23:d7:14:4d:19:
02:25:0c:d9:a6:1a:ef:c8:a9:70:c4:5f:44:da:c3:cc:53:22:
32:3e:e0:14:09:d8:e8:38:19:49:e5:7d:1f:2d:4c:0c:bb:9b:
07:0c:01:b9:4b:84:9c:4c:25:c2:dd:df:08:c7:39:04:ae:6f:
22:8c:09:7e:5a:35:72:38:6a:b9:a2:cc:9f:56:0d:f1:c5:e7:
0d:0e:50:34:cb:ab:cb:5e:fe:6e:12:7f:b2:40:8d:fc:44:82:
b9:6f:27:db:fa:52:fc:b9:ac:af:66:a0:2d:15:72:81:33:40:
f8:36:8b:8c:1c:ce:73:af:07:ec:ed:73:cc:8b:ed:88:c1:47:
35:9b:11:2f:45:bf:2d:75:4b:34:29:a9:7c:3a:32:fc:2b:f0:
82:d5:c5:c5:15:9e:fb:28:c7:0c:cf:24:c4:19:20:c1:c3:68:
d2:46:a5:5f:60:32:2f:03:1f:d2:86:8f:aa:00:00:00:74:e6:
4c:c8:37:e2:29:d0:60:26:8b:94:f6:80:11:b2:a6:b1:ec:dc:
67:21:24:5a:1c:1e:50:05:d3:74:84:dd:d5:07:ef:df:9f:18:
0d:4e:50:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org