Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33322e302f32342d3234203d3e203439393939.roa
File: 37372e33372e33322e302f32342d3234203d3e203439393939.roa (raw, json)
Hash identifier: 2NkFK0bW9Vyd+NUj/4isSfhLSXSk5DiQv7+ehFVEvsM=
Subject key identifier: 9F:E3:4D:12:E6:9D:D4:1A:EF:11:B3:4B:B7:20:DA:C2:61:64:01:8B
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 5B0CA5EA58E9E4F64280080AA1B644F447887D0A
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33322e302f32342d3234203d3e203439393939.roa
Signing time: Tue 31 Jan 2023 10:24:48 +0000
ROA not before: Tue 31 Jan 2023 10:19:48 +0000
ROA not after: Tue 30 Jan 2024 10:24:48 +0000
asID: 49999
IP address blocks: 77.37.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:0c:a5:ea:58:e9:e4:f6:42:80:08:0a:a1:b6:44:f4:47:88:7d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 31 10:19:48 2023 GMT
Not After : Jan 30 10:24:48 2024 GMT
Subject: CN=9FE34D12E69DD41AEF11B34BB720DAC26164018B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:0d:8a:0e:8b:f7:66:73:ca:04:9a:04:94:
03:f4:0f:86:87:58:dc:a3:c9:0b:98:83:ad:ab:64:
73:c5:be:04:de:d7:08:78:df:8e:44:b8:35:69:7c:
33:ff:8d:49:85:8a:f6:fc:b0:0f:7f:81:27:dc:94:
9a:ac:c8:ba:28:41:12:84:b1:92:f1:a6:6e:d1:11:
ff:58:8a:ed:f2:35:af:29:3e:05:c1:22:6c:02:37:
ce:9d:8e:d8:cd:9b:fe:a7:5f:01:76:60:e0:d1:ee:
81:90:24:b8:bd:ca:8c:9d:37:c3:20:b6:6b:98:99:
9c:8a:72:a6:7d:0c:f8:14:1c:99:3d:f5:74:ff:99:
9c:17:0e:21:43:1e:db:1c:b2:45:9a:c7:3b:ea:5b:
1e:75:53:07:14:30:97:5e:be:f3:fb:41:4e:dd:4b:
83:30:a4:2e:1c:7a:86:df:79:05:54:b6:f5:41:fb:
14:d3:52:b9:fc:80:e5:7b:3e:4f:97:fc:71:9c:c6:
73:bf:2a:8e:81:6a:85:68:85:b1:5a:66:88:c4:d0:
3f:80:62:5d:19:02:21:8a:ac:d0:bb:33:1a:03:31:
6b:fa:68:f2:22:a3:b4:ff:2f:f1:8a:53:e5:3d:e3:
83:8b:08:95:0d:a7:8c:14:f6:41:b8:67:fe:f7:aa:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E3:4D:12:E6:9D:D4:1A:EF:11:B3:4B:B7:20:DA:C2:61:64:01:8B
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33322e302f32342d3234203d3e203439393939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.32.0/24
Signature Algorithm: sha256WithRSAEncryption
29:3d:13:f9:5c:48:96:a9:e9:f6:32:c5:12:f3:c8:8b:2b:10:
f6:cf:2d:4f:96:59:aa:ac:ab:0e:36:c6:fb:8d:9d:1d:ba:68:
64:de:71:a6:2b:14:ed:28:e0:ff:ca:c3:d2:7c:a8:fb:a3:f7:
4c:6b:b7:01:2b:34:b7:a0:68:f9:ee:57:40:f9:c4:06:96:a8:
34:88:2f:63:86:f3:12:a7:2e:0f:2b:9d:4b:07:72:1e:8c:5e:
9f:15:09:ae:fd:3e:6c:e8:37:f4:bb:7d:96:f9:89:b9:94:c9:
e3:d4:c3:4a:af:0d:0f:6e:f9:b4:79:24:c1:5c:86:4e:17:12:
55:d9:b9:ef:a3:fc:42:c3:c4:cc:15:84:c5:56:bb:71:45:19:
e0:e6:82:d2:ca:32:c0:f7:29:71:09:32:db:54:42:a0:39:a5:
d8:14:62:2c:0e:e9:b2:f4:19:da:5f:25:ec:7c:03:3d:d0:68:
41:17:19:fa:0b:66:dc:e5:7e:6f:d9:86:e4:7b:d6:af:38:4b:
a4:76:78:f8:d8:5d:80:d8:9e:9b:b4:02:e0:80:d4:8f:af:1c:
6a:aa:98:1b:0f:8a:e7:01:9c:95:16:23:02:0b:7e:70:30:e0:
1c:5c:04:7e:f6:9b:20:77:d9:c1:9b:1f:9e:fa:b6:bf:06:35:
cc:02:70:91
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUWwyl6ljp5PZCgAgKobZE9EeIfQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzAxMzExMDE5NDhaFw0yNDAxMzAxMDI0NDhaMDMxMTAvBgNV
BAMTKDlGRTM0RDEyRTY5REQ0MUFFRjExQjM0QkI3MjBEQUMyNjE2NDAxOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTag2KDov3ZnPKBJoElAP0D4aH
WNyjyQuYg62rZHPFvgTe1wh4345EuDVpfDP/jUmFivb8sA9/gSfclJqsyLooQRKE
sZLxpm7REf9Yiu3yNa8pPgXBImwCN86djtjNm/6nXwF2YODR7oGQJLi9yoydN8Mg
tmuYmZyKcqZ9DPgUHJk99XT/mZwXDiFDHtscskWaxzvqWx51UwcUMJdevvP7QU7d
S4MwpC4ceobfeQVUtvVB+xTTUrn8gOV7Pk+X/HGcxnO/Ko6BaoVohbFaZojE0D+A
Yl0ZAiGKrNC7MxoDMWv6aPIio7T/L/GKU+U944OLCJUNp4wU9kG4Z/73qtO/AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUn+NNEuad1BrvEbNLtyDawmFkAYswHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzczNzJlMzMzNzJlMzMzMjJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzkzOTM5Mzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABNJSAw
DQYJKoZIhvcNAQELBQADggEBACk9E/lcSJap6fYyxRLzyIsrEPbPLU+WWaqsqw42
xvuNnR26aGTecaYrFO0o4P/Kw9J8qPuj90xrtwErNLegaPnuV0D5xAaWqDSIL2OG
8xKnLg8rnUsHch6MXp8VCa79PmzoN/S7fZb5ibmUyePUw0qvDQ9u+bR5JMFchk4X
ElXZue+j/ELDxMwVhMVWu3FFGeDmgtLKMsD3KXEJMttUQqA5pdgUYiwO6bL0Gdpf
Jex8Az3QaEEXGfoLZtzlfm/ZhuR71q84S6R2ePjYXYDYnpu0AuCA1I+vHGqqmBsP
iucBnJUWIwILfnAw4BxcBH72myB32cGbH576tr8GNcwCcJE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:39 2025 by rpki-client