Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39332e302f32342d3234203d3e203538323132.roa
File: 37372e33372e39332e302f32342d3234203d3e203538323132.roa (raw, json)
Hash identifier: HkWg1HsntOZGmKv1aZfFgd3DWmcKlKBCEn9vGeKoH4U=
Subject key identifier: D5:39:1F:9E:2D:8E:B3:49:0F:C9:E6:4C:F0:F2:E0:8F:C4:AF:61:9B
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 6DD49A4C3E015FCDCBDFE999CBA669A5A08A9F0A
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39332e302f32342d3234203d3e203538323132.roa
Signing time: Fri 20 Jan 2023 06:26:09 +0000
ROA not before: Fri 20 Jan 2023 06:21:09 +0000
ROA not after: Fri 19 Jan 2024 06:26:09 +0000
asID: 58212
IP address blocks: 77.37.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:d4:9a:4c:3e:01:5f:cd:cb:df:e9:99:cb:a6:69:a5:a0:8a:9f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:09 2023 GMT
Not After : Jan 19 06:26:09 2024 GMT
Subject: CN=D5391F9E2D8EB3490FC9E64CF0F2E08FC4AF619B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:a2:93:79:8a:9f:5c:d8:db:01:b4:d4:6e:
ba:26:0c:20:b7:f5:f8:75:6e:32:e1:d8:a0:d6:ad:
09:e9:80:43:4b:fc:b9:46:e6:6e:9a:18:72:59:37:
79:40:62:45:9b:db:16:f1:95:b7:97:df:f8:2c:e1:
ef:c6:8d:31:ec:b5:f4:f9:de:1c:32:09:e7:b8:d3:
e2:06:c7:d6:86:ae:2b:cf:fa:a7:e9:86:89:76:38:
cb:25:3d:73:09:c2:38:ad:f5:31:b1:44:73:cb:72:
58:63:aa:f6:1d:cf:f3:36:23:49:f7:34:de:41:fc:
7a:29:c6:fc:22:c1:09:17:a5:c9:c7:4f:d5:ed:0d:
aa:cc:a2:b3:4d:e5:93:9e:92:60:cf:d2:1c:4a:9b:
36:34:75:44:5e:d0:06:ce:a1:ad:01:1c:fe:7d:24:
f6:bb:90:02:d7:67:68:45:63:a7:bd:04:2f:8c:eb:
51:35:86:2f:cc:0e:12:a7:90:14:d1:f5:9c:d6:f8:
d0:48:ad:3e:f7:2b:4a:08:98:26:40:e4:ef:7f:04:
e9:6c:07:20:d3:77:9d:79:77:84:ca:3c:99:74:ac:
73:3f:c0:7c:dc:74:e7:78:32:86:94:75:1f:8a:d5:
7a:5c:5a:fe:4d:ab:3b:d6:ea:b1:2c:78:0e:f8:dc:
a6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:39:1F:9E:2D:8E:B3:49:0F:C9:E6:4C:F0:F2:E0:8F:C4:AF:61:9B
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39332e302f32342d3234203d3e203538323132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.93.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ad:04:a9:9c:14:8d:36:0e:22:1a:01:a4:2b:37:78:cc:5e:
a5:05:ab:e6:e3:8e:71:7d:db:1a:85:53:3d:3a:7b:4e:49:3e:
d1:5b:61:e7:f8:e1:77:42:67:33:39:9a:14:10:2f:e3:93:95:
6b:83:4c:2a:3d:56:60:aa:53:f6:8a:7f:1c:d7:d2:3d:c5:77:
56:90:47:61:19:e6:05:0e:9b:03:1b:cb:4f:af:40:8d:09:38:
df:74:c4:81:77:72:fa:5d:81:af:74:35:45:a0:d9:68:43:e1:
0d:0b:4e:f0:66:50:09:0d:bc:09:f8:74:14:30:fe:33:08:9d:
dc:ae:1a:fc:61:2b:27:40:6e:be:49:ae:18:16:bb:9e:aa:07:
24:db:97:4b:07:17:aa:a1:cb:16:85:3c:62:b4:f3:b2:ce:09:
84:dd:09:ca:63:19:f8:73:55:61:b1:94:29:ed:bf:38:1d:8a:
35:92:55:eb:7d:25:bb:76:fc:3f:79:45:7d:e5:d7:3e:a2:f3:
9c:a2:6b:e3:6b:86:b1:ac:3d:d3:8f:fb:c8:43:39:3a:01:35:
da:f0:76:cc:16:6c:6a:7d:99:f8:c1:aa:58:1e:42:7f:77:97:
2f:9b:5d:33:10:6f:ad:bd:57:3a:fe:df:14:81:6c:5d:12:31:
84:1c:08:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org