Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3131362e302f32322d3234203d3e20323133323032.roa
File: 37372e33372e3131362e302f32322d3234203d3e20323133323032.roa (raw, json)
Hash identifier: HbMCxLrt/M8B9ETXb8USFWoxfUUYHzOJOr0w0m4OfaQ=
Subject key identifier: 6E:AB:38:50:6B:38:50:05:AC:14:6A:FC:33:92:69:71:D9:CD:19:16
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 023450BCA45AD90EC85D9A7216373F0EF27D149D
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3131362e302f32322d3234203d3e20323133323032.roa
Signing time: Mon 06 Feb 2023 07:44:57 +0000
ROA not before: Mon 06 Feb 2023 07:39:57 +0000
ROA not after: Mon 05 Feb 2024 07:44:57 +0000
asID: 213202
IP address blocks: 77.37.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:34:50:bc:a4:5a:d9:0e:c8:5d:9a:72:16:37:3f:0e:f2:7d:14:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Feb 6 07:39:57 2023 GMT
Not After : Feb 5 07:44:57 2024 GMT
Subject: CN=6EAB38506B385005AC146AFC33926971D9CD1916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:f5:79:2c:23:29:1d:f2:c5:4a:46:22:d5:
f5:a9:6e:74:02:f1:b3:8d:9f:8a:ef:af:41:c6:42:
fb:ed:0e:57:d8:be:b3:3e:26:cc:98:43:15:e7:8b:
60:28:76:12:6b:30:71:25:69:9f:8a:51:19:6d:ce:
5c:4e:92:39:4b:8a:80:ec:20:ee:58:3f:0c:d1:f9:
8a:23:eb:1d:1c:56:f8:d3:fb:ee:74:54:4a:8b:6d:
fe:f8:56:e4:16:5d:7d:1f:56:24:e3:b7:a8:54:4a:
1c:2f:15:8e:e5:e4:85:2c:f2:5e:f6:e4:1c:29:fe:
1c:46:bf:71:37:09:e2:2b:a9:a6:aa:3e:04:87:69:
b1:1c:80:26:be:af:42:cf:26:de:a8:58:91:b4:e4:
72:6f:d5:ea:df:84:51:c3:3a:da:ec:07:af:01:32:
12:f0:ae:46:e1:32:9f:0d:56:f4:00:3d:31:97:4a:
32:61:81:29:85:f4:a8:73:a1:bc:7e:d0:26:4b:b1:
1a:b9:1a:98:40:bf:26:8f:7f:92:49:d4:c1:90:de:
83:b1:67:44:d1:51:7d:d3:80:ca:84:b9:3c:d6:e7:
cc:1c:be:48:8b:9d:d9:2a:0b:51:13:a8:f6:62:6f:
89:4b:b5:10:ac:eb:31:26:a0:45:cb:d5:41:88:7c:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AB:38:50:6B:38:50:05:AC:14:6A:FC:33:92:69:71:D9:CD:19:16
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e3131362e302f32322d3234203d3e20323133323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.116.0/22
Signature Algorithm: sha256WithRSAEncryption
43:7b:b3:b6:20:b2:2c:db:28:55:62:42:b3:d8:d7:e6:06:0a:
e5:6d:43:7b:01:39:b4:39:14:37:6d:a4:82:9c:60:56:1f:af:
18:07:7a:84:22:4c:40:6c:4c:54:6f:31:7a:47:3e:4d:80:59:
6d:2a:78:e5:47:1c:24:b8:7d:1e:09:5f:d6:eb:c0:14:8b:06:
5f:83:ce:52:5b:a6:02:52:fb:76:05:d6:9a:ae:75:a4:8d:69:
e2:c1:a5:5a:0e:35:e7:d0:66:86:20:e3:5a:21:6f:71:9d:df:
3d:c8:f5:ff:ab:c4:72:25:82:4f:3c:b9:cf:2b:13:70:8b:2d:
33:36:49:a3:00:aa:7e:c8:a7:18:eb:5a:2a:09:06:1b:78:e5:
18:f4:38:d7:ba:b7:8e:cc:68:86:31:7f:0f:2a:21:a2:92:76:
77:04:ce:ba:5d:cd:4f:bb:14:54:7f:88:36:24:a9:0f:ac:06:
0e:cf:f4:75:37:0d:4d:a3:50:cc:bd:66:88:b7:4c:48:71:d6:
5b:af:b6:83:4b:5d:fa:70:f3:33:91:85:c5:99:e5:75:1c:f6:
25:12:aa:cf:ec:cc:21:19:5d:5c:72:b6:8c:d8:27:9a:3a:5c:
38:b7:7b:a9:3d:7b:c2:57:35:22:8b:ae:e0:4a:48:5b:ee:ca:
0e:cf:44:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:22 2025 by rpki-client