![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130362e302f32332d3233203d3e203632333336.roa
File: 37372e33372e3130362e302f32332d3233203d3e203632333336.roa (raw, json)
Hash identifier: 52gyQPoL71LB+FtM8koRhzWqDgIBPC4c5rNAOqTRRYs=
Subject key identifier: E7:BE:59:31:B6:74:BC:F5:3A:DA:39:02:D3:BA:2B:A5:91:DF:A5:E6
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 46300545433954661954F4462A24565CF7E254FC
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130362e302f32332d3233203d3e203632333336.roa
Signing time: Fri 20 Jan 2023 06:26:10 +0000
ROA not before: Fri 20 Jan 2023 06:21:10 +0000
ROA not after: Fri 19 Jan 2024 06:26:10 +0000
asID: 62336
IP address blocks: 77.37.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:30:05:45:43:39:54:66:19:54:f4:46:2a:24:56:5c:f7:e2:54:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:10 2023 GMT
Not After : Jan 19 06:26:10 2024 GMT
Subject: CN=E7BE5931B674BCF53ADA3902D3BA2BA591DFA5E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:d4:68:68:64:69:b9:1e:98:b5:87:fa:19:
f0:50:a8:be:e9:68:91:60:3b:36:25:b6:68:8b:03:
90:87:7d:4a:18:15:cc:de:f6:8a:65:12:38:02:13:
97:af:2b:50:e6:ec:f4:e2:5a:24:89:b5:bf:dd:35:
8d:a2:f7:97:f9:5f:dd:88:1e:7f:a5:fd:4d:42:25:
23:65:9d:62:6f:40:dd:e1:a9:f9:1b:a6:42:4f:41:
82:87:3d:c5:50:94:9a:22:d0:ac:0e:0e:6e:9c:f3:
4c:ae:9b:39:ac:9f:49:ce:8c:4a:e1:2d:fd:5f:bc:
70:93:cb:4d:80:4f:29:32:20:a4:77:5c:52:5c:d7:
ce:cf:8a:f3:af:c5:dd:2f:45:40:62:87:c7:2d:ae:
f6:54:3a:f7:12:bf:72:5e:3d:e0:dd:af:a9:e4:2e:
b3:b6:a3:7e:dc:35:5b:82:ec:aa:95:99:7b:11:34:
87:c9:46:d8:a4:aa:08:cf:66:ff:b6:1d:05:bc:d8:
3a:fb:47:96:49:cf:5a:03:3d:50:0d:03:df:20:3f:
3b:69:e7:a5:cd:b8:63:dd:ad:81:6d:ee:f7:7c:7e:
c7:5b:d2:51:1e:33:f2:f7:c9:12:70:f9:e1:c3:79:
e9:a5:7d:fb:d3:00:b4:a6:58:4a:25:50:5a:90:cc:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:BE:59:31:B6:74:BC:F5:3A:DA:39:02:D3:BA:2B:A5:91:DF:A5:E6
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130362e302f32332d3233203d3e203632333336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.106.0/23
Signature Algorithm: sha256WithRSAEncryption
69:ad:ff:0f:32:b2:95:e3:1e:83:ad:be:f5:5c:f8:83:6f:2c:
40:13:7b:e5:51:02:92:83:18:66:f5:8a:fd:d3:74:cc:ec:eb:
e8:e2:2d:fa:1c:80:60:64:95:91:d6:56:b4:b7:d5:de:b1:2d:
02:be:46:3d:55:8b:8e:31:7a:ae:78:05:77:54:0a:05:dc:14:
62:09:7c:7a:a2:45:11:79:1b:da:bb:44:da:d6:a9:59:88:9d:
a3:6c:f7:de:6a:60:b5:bb:2f:59:fe:56:04:3a:e5:9c:b3:d5:
1e:d5:be:ab:17:e6:98:b9:d1:2c:9d:eb:8b:c3:17:4e:17:64:
5c:65:7d:9a:9e:41:38:a5:13:fd:63:f7:69:99:ff:ea:ef:14:
f6:77:23:1b:ec:62:42:20:81:41:83:09:d5:dc:54:3b:a1:9d:
fc:bf:b1:fa:1d:74:6b:61:21:a6:e0:1b:d7:cb:5b:55:c1:fa:
5e:43:85:b2:fd:a7:44:06:04:df:dc:f1:10:19:35:4b:2c:15:
98:67:10:6d:67:33:b5:9a:1e:86:0c:66:5b:e0:89:0a:f4:09:
c4:94:b9:75:d5:2a:6d:4d:0d:3b:3c:0d:1c:ab:cf:73:a6:86:
1f:fd:78:03:de:15:e6:41:58:9c:44:9f:82:69:38:2d:de:97:
8c:e4:4c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:25 2025 by rpki-client