Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39382e302f32332d3233203d3e203632333336.roa
File: 37372e33372e39382e302f32332d3233203d3e203632333336.roa (raw, json)
Hash identifier: MSzH32z2Ti5HT8qLfPtRlRs6njEHVWfg3F7lkbj4ZEQ=
Subject key identifier: 33:31:70:FF:16:24:0F:15:B0:6E:AE:79:C9:0E:04:AE:3A:AC:0F:70
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 77E94B5BD6D14D15F367EA0981E9F0F389C32195
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39382e302f32332d3233203d3e203632333336.roa
Signing time: Fri 20 Jan 2023 06:26:10 +0000
ROA not before: Fri 20 Jan 2023 06:21:10 +0000
ROA not after: Fri 19 Jan 2024 06:26:10 +0000
asID: 62336
IP address blocks: 77.37.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:e9:4b:5b:d6:d1:4d:15:f3:67:ea:09:81:e9:f0:f3:89:c3:21:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:10 2023 GMT
Not After : Jan 19 06:26:10 2024 GMT
Subject: CN=333170FF16240F15B06EAE79C90E04AE3AAC0F70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fd:00:dd:72:20:90:6d:b1:ca:c4:aa:cf:4f:
f4:0d:b0:f6:a1:8f:d8:05:9f:2c:ca:af:9f:e0:9b:
97:f6:54:e9:4e:be:5b:65:4e:27:18:3b:47:4d:e8:
82:cd:1a:07:a2:7d:24:e4:1b:f8:c6:8a:7b:b0:9e:
64:d1:a3:99:30:ee:2c:5f:4b:0e:92:8a:0b:39:6f:
54:cd:19:9a:d0:4c:47:c9:ec:90:d9:08:02:dd:01:
b2:d6:fe:53:11:5a:0b:bb:31:9a:7a:0d:d2:e2:28:
0c:a9:20:24:10:d6:cb:f1:15:44:b1:fc:d4:3d:19:
ff:a9:a4:a8:70:b6:ca:97:2f:3b:d8:35:63:b6:67:
59:27:06:02:6d:ae:6e:d7:53:d2:bd:87:a9:84:7b:
69:06:ec:94:49:6d:4d:69:d1:a3:c7:77:f9:b3:3f:
b0:71:50:6b:10:bc:be:92:e1:43:4a:a8:0f:67:2d:
92:54:6e:e4:7f:20:a4:1d:26:9a:f9:cc:eb:91:dd:
a0:66:75:ae:56:55:f6:1a:2a:4b:f8:b7:f6:e9:31:
e2:a2:ea:9b:dd:1e:11:21:ba:d2:6f:a2:6e:6e:34:
e3:ae:f4:bf:a1:6e:6f:05:47:70:54:77:1e:44:c1:
61:5a:28:13:47:5e:5d:31:17:71:b2:9a:e2:e0:3f:
c2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:31:70:FF:16:24:0F:15:B0:6E:AE:79:C9:0E:04:AE:3A:AC:0F:70
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39382e302f32332d3233203d3e203632333336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.98.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:12:ac:13:e8:ca:1a:2a:e3:68:44:8c:34:df:91:39:0d:f4:
9a:f2:3d:fc:e1:60:04:f5:f3:77:b3:1c:57:65:b4:75:3d:5a:
16:fd:c4:77:fc:4c:1f:1e:a1:51:8a:56:2d:bc:ea:2f:0b:7c:
42:33:b9:d9:39:e4:6a:09:35:0c:47:29:90:fa:c6:53:4f:05:
8e:68:9e:59:48:69:bc:63:ce:b6:57:1d:44:f6:ea:fb:a3:ca:
aa:46:49:df:96:c5:84:b2:c3:c3:28:e5:f7:5c:29:a4:0b:e4:
5a:92:06:8d:ec:03:0c:8d:25:d2:07:fe:df:d8:43:e7:be:37:
a9:c2:0f:94:81:1e:53:21:d7:6a:52:fb:72:3a:de:e1:53:aa:
14:cf:fa:ed:90:e6:eb:56:c9:c6:af:f7:4a:4c:90:30:16:e8:
25:96:a9:7a:32:00:b0:25:5d:6b:2b:6f:0a:33:d1:1e:81:cd:
3d:75:1d:60:72:ec:20:fc:98:ca:90:22:bb:69:7b:0d:12:b8:
bb:11:e2:da:db:61:5f:13:be:03:4b:d1:9e:1d:86:8d:22:c5:
3c:2c:85:f4:91:70:cb:5b:48:12:e9:b2:56:87:b8:c9:e7:e8:
8a:91:48:9c:5b:88:a6:11:bc:9c:60:15:09:e1:de:45:b4:7c:
92:da:3b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org