Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39342e302f32342d3234203d3e203630373231.roa
File: 37372e33372e39342e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: X9+UPv9NFgXxKBbfvJvAeO45QSn8xzIEdGTR6ktgums=
Subject key identifier: CD:66:9E:27:28:CD:D0:40:B6:E0:CC:38:51:56:8D:6F:11:83:63:8A
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 610B3045FA5DD4555A8448A7826240E28F79F601
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39342e302f32342d3234203d3e203630373231.roa
Signing time: Fri 20 Jan 2023 06:26:10 +0000
ROA not before: Fri 20 Jan 2023 06:21:10 +0000
ROA not after: Fri 19 Jan 2024 06:26:10 +0000
asID: 60721
IP address blocks: 77.37.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:0b:30:45:fa:5d:d4:55:5a:84:48:a7:82:62:40:e2:8f:79:f6:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:10 2023 GMT
Not After : Jan 19 06:26:10 2024 GMT
Subject: CN=CD669E2728CDD040B6E0CC3851568D6F1183638A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:f4:ce:6a:71:1b:1c:b1:ce:c1:df:f0:7e:
88:db:79:10:23:09:67:05:93:82:7a:6f:97:9c:e1:
f2:e5:65:29:2d:c4:6e:a6:e9:8d:84:22:3c:42:6d:
98:52:6e:d3:3c:b7:2b:f1:32:f2:79:90:1a:6d:6b:
61:2e:f9:fd:d7:3a:36:3a:43:dc:de:12:ee:d1:65:
66:5a:02:11:45:82:41:c2:1b:4e:fe:0c:26:13:87:
af:40:33:b3:c6:4d:f6:ac:a3:2f:e6:62:6a:ec:c1:
f1:55:c5:12:15:4d:d3:ca:0c:fe:ff:8f:52:05:ba:
51:09:73:77:e7:9b:bb:6a:ce:38:90:65:64:68:4e:
ad:14:7d:ed:62:d1:09:29:96:c2:30:89:e7:24:7b:
b1:b5:e9:07:46:49:fe:53:fb:25:7b:6f:ac:1f:cc:
fa:c0:a9:6b:5b:f9:7d:b3:72:c9:be:2c:61:40:e1:
12:30:51:c9:09:46:c3:16:6a:77:9e:f2:f1:d0:2d:
80:32:07:72:c2:25:37:56:cb:e4:4f:4e:b6:36:f7:
ae:90:99:91:53:81:97:04:42:f4:b2:27:8a:98:6f:
00:87:7a:ee:71:19:52:3b:17:10:a9:29:cf:26:7b:
df:72:6e:02:6f:f2:52:68:3a:d2:1d:b0:a3:ae:5c:
43:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:66:9E:27:28:CD:D0:40:B6:E0:CC:38:51:56:8D:6F:11:83:63:8A
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39342e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.94.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:78:87:ce:36:4e:c3:04:dd:5b:06:29:6a:73:b5:17:ff:c6:
b8:13:2b:47:04:95:77:80:c7:d4:13:d1:8f:ea:2a:16:6e:a0:
69:6d:46:de:5d:47:64:6c:88:0b:95:24:d2:6e:92:9e:06:7d:
6b:f7:8a:b7:69:29:d5:69:63:8f:b5:fe:29:50:40:5c:21:11:
22:37:c9:98:37:dd:15:15:5d:0b:b2:0b:f6:e5:4a:10:c2:b6:
0d:3b:9a:f8:a3:1c:a7:fb:00:47:e8:ed:81:5d:af:d1:8f:a1:
b6:d2:23:42:dc:e0:2f:16:23:f7:82:43:3c:6c:bb:d3:b6:44:
6c:02:b5:2a:86:c2:d9:81:6c:d5:01:3d:b0:c7:e5:f0:2d:6a:
e4:d9:20:f9:d3:d8:a0:7e:09:d6:3c:7f:f1:ae:42:d3:c4:c8:
52:0c:fe:ba:57:4b:8d:8e:e6:af:2a:a6:fe:46:22:6d:18:fd:
8c:55:18:ac:6d:4c:62:9d:e3:a2:db:02:4c:17:e4:3f:e3:85:
8d:20:81:52:74:4e:bf:91:99:1a:f1:72:49:dd:e4:24:ab:2f:
51:ea:94:3a:1f:c2:b2:81:ec:61:ff:6c:a9:ff:5a:db:f8:1f:
3b:46:9f:76:47:d1:b5:2d:83:98:55:35:db:61:24:bc:c6:74:
b2:9b:28:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:12 2024 by rpki-client on console-fra.rpki-client.org