Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e392e302f32342d3234203d3e20383334.roa
File: 37372e33372e392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: AeQcp2HtDeHNI5AhDEzqg35z5NJFHWbrelUuKqzvUWs=
Subject key identifier: D9:BB:1F:38:7F:90:5A:16:AD:A7:41:98:F5:16:57:FB:E6:7A:CA:6B
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 278F28A7CD4EACC62AD411EE5492191D757B31B9
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e392e302f32342d3234203d3e20383334.roa
Signing time: Thu 08 Jun 2023 14:00:06 +0000
ROA not before: Thu 08 Jun 2023 13:55:06 +0000
ROA not after: Thu 06 Jun 2024 14:00:06 +0000
asID: 834
IP address blocks: 77.37.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:8f:28:a7:cd:4e:ac:c6:2a:d4:11:ee:54:92:19:1d:75:7b:31:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jun 8 13:55:06 2023 GMT
Not After : Jun 6 14:00:06 2024 GMT
Subject: CN=D9BB1F387F905A16ADA74198F51657FBE67ACA6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:49:41:a1:f4:f6:49:8b:dc:b0:9e:13:7e:5a:
b3:47:95:4d:65:53:24:e7:31:1e:d8:6f:cf:1b:49:
4d:e2:18:be:f0:f8:28:d7:83:6c:8f:2d:3f:11:26:
18:7d:9e:2b:31:8a:ce:28:bd:91:38:85:26:6b:06:
22:7c:aa:d6:7c:3a:e9:a2:0f:df:c6:e1:dd:86:ac:
3b:13:5c:b8:d1:6f:db:aa:4e:72:aa:c1:77:9f:b7:
fc:f0:69:b3:cf:c7:0c:23:ca:d9:6a:ab:68:6b:42:
2b:20:1f:f2:5b:5d:e6:80:78:4b:d5:2c:60:36:70:
d0:d7:50:da:d7:dd:79:a7:9a:72:f0:b2:e4:03:78:
5c:a8:f7:71:3c:86:a8:9e:64:c5:93:8f:1b:77:db:
9c:a1:f9:de:c1:9a:3c:0a:d2:a4:c5:17:5b:15:d2:
3a:e9:1b:54:a5:50:a1:6f:e9:f5:63:95:7a:c5:95:
d7:c3:f1:81:e7:27:4a:f2:9a:fc:d4:f4:e1:63:72:
ee:1b:72:3f:81:33:72:16:fc:c3:aa:19:cc:41:9d:
b8:78:f9:45:22:a9:b8:8f:e1:05:0a:ba:35:5f:44:
60:ac:b1:c1:d2:80:87:27:4b:ca:e1:d4:50:e2:27:
93:28:db:05:b0:d3:c9:7a:13:c6:aa:d7:b5:76:d5:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BB:1F:38:7F:90:5A:16:AD:A7:41:98:F5:16:57:FB:E6:7A:CA:6B
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.9.0/24
Signature Algorithm: sha256WithRSAEncryption
16:2c:6a:04:4e:0b:b8:9e:7b:2c:ea:18:76:59:9a:6d:b1:a7:
61:90:99:05:98:d5:b8:ab:91:7b:0d:b8:6b:7e:e3:63:ba:be:
47:86:fc:29:7d:6c:24:f0:a8:b3:fe:90:e3:57:2d:34:d3:e9:
1d:97:cf:56:e5:ff:fe:1a:60:90:3d:80:19:b3:a4:b4:c6:cd:
55:df:45:67:ac:67:54:02:d9:42:83:f3:04:67:a8:31:36:28:
c0:0e:52:f8:2d:f2:11:7c:04:bd:bc:b0:3f:3c:25:d0:57:f7:
1e:d6:0f:0e:ee:69:ff:5b:c9:29:7e:9a:3a:1f:ae:5e:f0:ce:
1e:d5:1b:a5:59:23:43:ad:f9:31:b6:17:27:28:06:9b:fd:5b:
93:c1:b1:19:2a:ae:21:87:b8:4a:03:4a:62:29:ed:91:4a:4f:
fe:a2:a5:cb:85:33:b9:aa:52:36:ae:89:2a:04:9f:28:49:c2:
52:33:00:11:9e:0a:80:75:0a:7b:0b:47:a9:5f:57:dd:88:05:
8b:64:01:0f:b0:a3:99:63:6e:f5:ee:a3:97:f4:73:e1:95:ea:
d1:f3:db:f6:36:52:96:9c:0e:41:41:b6:0c:e5:ee:77:65:e5:
b4:94:c6:68:db:53:92:66:fb:e8:ac:7d:fa:b1:0f:80:50:6d:
10:5b:c3:48
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgIUJ48op81OrMYq1BHuVJIZHXV7MbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzA2MDgxMzU1MDZaFw0yNDA2MDYxNDAwMDZaMDMxMTAvBgNV
BAMTKEQ5QkIxRjM4N0Y5MDVBMTZBREE3NDE5OEY1MTY1N0ZCRTY3QUNBNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeSUGh9PZJi9ywnhN+WrNHlU1l
UyTnMR7Yb88bSU3iGL7w+CjXg2yPLT8RJhh9nisxis4ovZE4hSZrBiJ8qtZ8Oumi
D9/G4d2GrDsTXLjRb9uqTnKqwXeft/zwabPPxwwjytlqq2hrQisgH/JbXeaAeEvV
LGA2cNDXUNrX3XmnmnLwsuQDeFyo93E8hqieZMWTjxt325yh+d7BmjwK0qTFF1sV
0jrpG1SlUKFv6fVjlXrFldfD8YHnJ0rymvzU9OFjcu4bcj+BM3IW/MOqGcxBnbh4
+UUiqbiP4QUKujVfRGCsscHSgIcnS8rh1FDiJ5Mo2wWw08l6E8aq17V21WCJAgMB
AAGjggIzMIICLzAdBgNVHQ4EFgQU2bsfOH+QWhatp0GY9RZX++Z6ymswHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzczNzJlMzMzNzJlMzkyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABNJQkwDQYJKoZI
hvcNAQELBQADggEBABYsagROC7ieeyzqGHZZmm2xp2GQmQWY1birkXsNuGt+42O6
vkeG/Cl9bCTwqLP+kONXLTTT6R2Xz1bl//4aYJA9gBmzpLTGzVXfRWesZ1QC2UKD
8wRnqDE2KMAOUvgt8hF8BL28sD88JdBX9x7WDw7uaf9bySl+mjofrl7wzh7VG6VZ
I0Ot+TG2FycoBpv9W5PBsRkqriGHuEoDSmIp7ZFKT/6ipcuFM7mqUjauiSoEnyhJ
wlIzABGeCoB1CnsLR6lfV92IBYtkAQ+wo5ljbvXuo5f0c+GV6tHz2/Y2UpacDkFB
tgzl7ndl5bSUxmjbU5Jm++isffqxD4BQbRBbw0g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org