Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130302e302f32322d3232203d3e203632333336.roa
File: 37372e33372e3130302e302f32322d3232203d3e203632333336.roa (raw, json)
Hash identifier: tvh5AuyLN2vpNlnDnAEs5UxEZE3zlvVLDjVTBJxylFY=
Subject key identifier: 4F:0E:1D:F6:56:F4:74:88:88:63:C6:BD:29:17:34:A9:A4:A0:B6:D8
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 57F4A54260AB46AC3F8ED2BF7C3192875747D817
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130302e302f32322d3232203d3e203632333336.roa
Signing time: Fri 20 Jan 2023 06:26:10 +0000
ROA not before: Fri 20 Jan 2023 06:21:10 +0000
ROA not after: Fri 19 Jan 2024 06:26:10 +0000
asID: 62336
IP address blocks: 77.37.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f4:a5:42:60:ab:46:ac:3f:8e:d2:bf:7c:31:92:87:57:47:d8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:10 2023 GMT
Not After : Jan 19 06:26:10 2024 GMT
Subject: CN=4F0E1DF656F474888863C6BD291734A9A4A0B6D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:1f:6d:e9:26:99:f4:08:2f:a6:cf:59:37:
fa:92:e3:9f:05:fa:64:72:c3:07:36:37:27:c9:3f:
91:b9:0c:7e:a0:70:9d:65:03:c1:6f:8a:ec:5c:97:
b9:a8:23:5e:37:6d:5c:58:10:20:27:f7:57:9d:26:
65:56:9c:4b:af:10:41:6e:a7:22:9c:f4:5d:16:a3:
aa:cc:b6:7d:76:8d:4a:da:1a:a5:15:2b:b1:46:34:
15:c0:94:04:35:87:59:87:dd:b1:3b:b1:6b:42:43:
f3:2f:f7:73:3b:e8:ae:76:c1:8d:18:62:85:21:4a:
ce:39:5e:ba:1b:13:18:f3:d3:38:06:a3:de:9f:ac:
80:5f:b1:54:cd:ca:5a:5e:69:ba:e7:ff:06:4e:68:
2e:9f:0a:ac:9d:14:77:87:73:81:75:cd:4b:3e:f3:
ee:a2:fb:78:d7:cf:bb:59:45:5c:3f:81:7d:81:75:
b3:92:fb:de:07:2d:4d:4e:fe:33:d7:be:54:51:4b:
d4:80:d5:28:c4:42:3c:31:48:9a:34:16:f8:ee:86:
8e:76:69:58:65:5e:fc:82:fe:61:b4:2a:79:17:45:
18:fa:af:59:16:59:da:24:4e:b2:69:35:d7:61:2b:
b5:78:aa:b8:3c:0e:f6:fa:49:79:c3:6e:16:93:99:
82:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0E:1D:F6:56:F4:74:88:88:63:C6:BD:29:17:34:A9:A4:A0:B6:D8
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130302e302f32322d3232203d3e203632333336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.100.0/22
Signature Algorithm: sha256WithRSAEncryption
77:1a:4a:67:a5:d9:29:00:e5:67:90:1b:46:72:08:a1:ef:c7:
f6:57:ce:92:f1:89:c2:48:21:b7:b7:24:e3:10:96:bb:a6:a9:
0c:76:00:4f:c2:03:51:24:36:60:6f:a1:5a:44:85:44:6c:5b:
78:b4:bd:3e:7c:2a:02:a3:90:2d:7c:e8:84:3b:4a:ae:c4:5a:
ee:95:d9:53:be:82:e7:8e:7b:0b:6a:85:7d:32:82:9a:51:93:
72:ff:af:82:3f:da:1a:e2:a8:26:f9:25:08:37:62:e7:de:c6:
99:20:48:99:42:78:7a:89:3f:14:16:68:54:ab:68:7b:66:a1:
a7:54:7e:73:de:ea:f6:c0:18:d3:ee:a0:7a:6f:9e:70:bd:ac:
bf:e7:23:1b:df:5a:3e:b6:65:6c:cf:46:ac:76:e3:07:32:28:
3f:a8:ff:62:ff:99:0e:9e:de:8d:96:23:79:b8:d3:c7:d4:38:
cb:36:26:ac:4b:2e:00:b3:4c:5a:de:7a:a6:1c:c9:f6:52:18:
88:14:0b:64:5b:1a:49:8c:c6:d6:71:66:20:45:d5:dc:26:97:
ba:2d:6e:32:0e:8e:55:ca:9f:01:7d:aa:f3:ac:e6:af:39:19:
b4:07:da:e0:ff:8b:86:e7:d2:2f:93:b5:dc:cd:01:00:ee:a2:
9b:dd:8c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:17 2025 by rpki-client