Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39362e302f32332d3233203d3e20323133323032.roa
File: 37372e33372e39362e302f32332d3233203d3e20323133323032.roa (raw, json)
Hash identifier: iB/Vw0rD6iZC5NcWeFnM+vCeVwHOb9pA5FLthDQ4RJQ=
Subject key identifier: E4:F3:7B:8E:C0:32:77:0E:53:5B:B5:0F:B3:7C:42:4F:91:A8:C7:5F
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 453CD50EBC35787B59615323AA6C5FB4719C1BE0
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39362e302f32332d3233203d3e20323133323032.roa
Signing time: Fri 20 Jan 2023 06:26:10 +0000
ROA not before: Fri 20 Jan 2023 06:21:10 +0000
ROA not after: Fri 19 Jan 2024 06:26:10 +0000
asID: 213202
IP address blocks: 77.37.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:3c:d5:0e:bc:35:78:7b:59:61:53:23:aa:6c:5f:b4:71:9c:1b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:10 2023 GMT
Not After : Jan 19 06:26:10 2024 GMT
Subject: CN=E4F37B8EC032770E535BB50FB37C424F91A8C75F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:79:af:5e:05:9f:3a:f1:25:aa:a0:a1:bc:
f5:4b:ef:68:84:90:9e:11:6f:51:c1:9b:75:c1:b8:
09:e4:92:cc:28:8a:1b:82:ca:99:5e:50:5a:dd:83:
1c:27:29:2d:5b:da:75:c9:3a:df:11:79:7b:ea:f5:
1b:95:c6:bf:a6:9f:c0:4a:4d:d0:c7:f0:37:9c:a5:
60:f2:53:80:ae:55:ee:9e:93:07:f5:60:d9:51:5d:
0a:42:c9:03:3e:37:d0:66:51:0a:da:47:e6:1e:6f:
ac:fe:8f:72:05:84:11:bf:7b:35:6e:46:bf:0a:c1:
64:a5:33:90:ef:b3:5b:9d:aa:67:2d:08:6c:1c:c4:
96:20:71:c1:d6:6d:e7:b2:11:18:2d:70:7f:18:74:
4d:59:37:01:a6:94:da:10:6c:3b:40:13:59:28:bf:
df:4e:3b:c4:a6:a6:f4:24:bb:91:53:06:4d:4d:9a:
b0:97:e8:6b:7e:50:17:b1:96:7f:1a:33:b4:37:47:
ea:8b:81:9d:5b:a8:5b:2f:30:0f:10:a9:d0:fe:77:
2f:05:95:8b:40:26:97:b8:02:88:29:4a:75:45:ea:
20:1e:33:e2:36:e0:71:41:56:55:6b:66:82:76:50:
2d:55:61:2c:fa:bf:13:ff:e0:8d:08:47:69:e5:ab:
8f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F3:7B:8E:C0:32:77:0E:53:5B:B5:0F:B3:7C:42:4F:91:A8:C7:5F
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39362e302f32332d3233203d3e20323133323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.96.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:13:69:c1:7a:39:a6:be:19:9c:9b:fa:36:4b:72:a9:63:9f:
13:ea:2a:66:48:bb:05:96:ec:7c:7b:cf:22:11:0a:2e:a5:26:
7a:8d:d4:a0:ab:0f:25:32:86:40:b8:68:5e:06:b4:10:68:16:
28:db:1c:2c:f4:3f:58:bd:97:6a:ea:df:ad:1c:e3:f7:e7:4e:
d1:62:bc:25:9a:e5:00:be:98:86:53:5b:93:83:e8:bd:97:c1:
ab:0b:d7:df:4f:af:08:86:b6:02:f7:d5:b1:ee:5b:0e:60:87:
f7:82:04:6c:21:11:3c:40:e2:2b:17:81:b8:60:e1:5c:56:e9:
0c:e8:c8:b5:e8:34:d6:2b:95:18:35:79:a1:67:2b:03:1e:1c:
73:c4:d7:53:97:a1:55:41:82:20:b9:8c:fe:ca:72:6a:e2:91:
16:68:f2:a1:70:8a:3c:67:78:d4:27:36:39:24:de:b4:95:da:
41:a0:e8:4d:2d:27:48:05:2f:66:6a:6b:65:17:8f:d0:44:26:
ad:d0:30:34:62:5f:ae:40:ff:44:bb:ca:2c:29:fa:dd:34:91:
49:a2:3d:7f:ad:2b:ab:2a:76:1e:9b:61:c4:05:7a:82:a2:e8:
10:ab:a9:6c:72:57:58:58:39:b0:f8:e6:9f:27:df:51:32:4c:
71:8a:31:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:54 2025 by rpki-client