Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130362e302f32332d3233203d3e203632333336.roa
File:                     37372e33372e3130362e302f32332d3233203d3e203632333336.roa (raw, json)
Hash identifier:          52gyQPoL71LB+FtM8koRhzWqDgIBPC4c5rNAOqTRRYs=
Subject key identifier:   E7:BE:59:31:B6:74:BC:F5:3A:DA:39:02:D3:BA:2B:A5:91:DF:A5:E6
Certificate issuer:       /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial:       46300545433954661954F4462A24565CF7E254FC
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130362e302f32332d3233203d3e203632333336.roa
Signing time:             Fri 20 Jan 2023 06:26:10 +0000
ROA not before:           Fri 20 Jan 2023 06:21:10 +0000
ROA not after:            Fri 19 Jan 2024 06:26:10 +0000
asID:                     62336
IP address blocks:        77.37.106.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:30:05:45:43:39:54:66:19:54:f4:46:2a:24:56:5c:f7:e2:54:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
        Validity
            Not Before: Jan 20 06:21:10 2023 GMT
            Not After : Jan 19 06:26:10 2024 GMT
        Subject: CN=E7BE5931B674BCF53ADA3902D3BA2BA591DFA5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:d4:68:68:64:69:b9:1e:98:b5:87:fa:19:
                    f0:50:a8:be:e9:68:91:60:3b:36:25:b6:68:8b:03:
                    90:87:7d:4a:18:15:cc:de:f6:8a:65:12:38:02:13:
                    97:af:2b:50:e6:ec:f4:e2:5a:24:89:b5:bf:dd:35:
                    8d:a2:f7:97:f9:5f:dd:88:1e:7f:a5:fd:4d:42:25:
                    23:65:9d:62:6f:40:dd:e1:a9:f9:1b:a6:42:4f:41:
                    82:87:3d:c5:50:94:9a:22:d0:ac:0e:0e:6e:9c:f3:
                    4c:ae:9b:39:ac:9f:49:ce:8c:4a:e1:2d:fd:5f:bc:
                    70:93:cb:4d:80:4f:29:32:20:a4:77:5c:52:5c:d7:
                    ce:cf:8a:f3:af:c5:dd:2f:45:40:62:87:c7:2d:ae:
                    f6:54:3a:f7:12:bf:72:5e:3d:e0:dd:af:a9:e4:2e:
                    b3:b6:a3:7e:dc:35:5b:82:ec:aa:95:99:7b:11:34:
                    87:c9:46:d8:a4:aa:08:cf:66:ff:b6:1d:05:bc:d8:
                    3a:fb:47:96:49:cf:5a:03:3d:50:0d:03:df:20:3f:
                    3b:69:e7:a5:cd:b8:63:dd:ad:81:6d:ee:f7:7c:7e:
                    c7:5b:d2:51:1e:33:f2:f7:c9:12:70:f9:e1:c3:79:
                    e9:a5:7d:fb:d3:00:b4:a6:58:4a:25:50:5a:90:cc:
                    4a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BE:59:31:B6:74:BC:F5:3A:DA:39:02:D3:BA:2B:A5:91:DF:A5:E6
            X509v3 Authority Key Identifier:
                keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3130362e302f32332d3233203d3e203632333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.37.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:ad:ff:0f:32:b2:95:e3:1e:83:ad:be:f5:5c:f8:83:6f:2c:
         40:13:7b:e5:51:02:92:83:18:66:f5:8a:fd:d3:74:cc:ec:eb:
         e8:e2:2d:fa:1c:80:60:64:95:91:d6:56:b4:b7:d5:de:b1:2d:
         02:be:46:3d:55:8b:8e:31:7a:ae:78:05:77:54:0a:05:dc:14:
         62:09:7c:7a:a2:45:11:79:1b:da:bb:44:da:d6:a9:59:88:9d:
         a3:6c:f7:de:6a:60:b5:bb:2f:59:fe:56:04:3a:e5:9c:b3:d5:
         1e:d5:be:ab:17:e6:98:b9:d1:2c:9d:eb:8b:c3:17:4e:17:64:
         5c:65:7d:9a:9e:41:38:a5:13:fd:63:f7:69:99:ff:ea:ef:14:
         f6:77:23:1b:ec:62:42:20:81:41:83:09:d5:dc:54:3b:a1:9d:
         fc:bf:b1:fa:1d:74:6b:61:21:a6:e0:1b:d7:cb:5b:55:c1:fa:
         5e:43:85:b2:fd:a7:44:06:04:df:dc:f1:10:19:35:4b:2c:15:
         98:67:10:6d:67:33:b5:9a:1e:86:0c:66:5b:e0:89:0a:f4:09:
         c4:94:b9:75:d5:2a:6d:4d:0d:3b:3c:0d:1c:ab:cf:73:a6:86:
         1f:fd:78:03:de:15:e6:41:58:9c:44:9f:82:69:38:2d:de:97:
         8c:e4:4c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:25 2025 by rpki-client