Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33392e302f32342d3234203d3e20383334.roa
File: 37372e33372e33392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: vXwyAWUGQkHYhtnzsD0aIzBesHmDcbru0D0wVqISWhM=
Subject key identifier: B2:7F:4B:E7:31:D5:39:B6:12:32:C2:6B:B5:A9:86:F7:CA:4A:7C:8F
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 11D84CBFF303C8C2AA60EA646BDB393FAF14FC0A
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33392e302f32342d3234203d3e20383334.roa
Signing time: Mon 23 Oct 2023 00:00:04 +0000
ROA not before: Sun 22 Oct 2023 23:55:04 +0000
ROA not after: Mon 21 Oct 2024 00:00:04 +0000
asID: 834
IP address blocks: 77.37.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d8:4c:bf:f3:03:c8:c2:aa:60:ea:64:6b:db:39:3f:af:14:fc:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Oct 22 23:55:04 2023 GMT
Not After : Oct 21 00:00:04 2024 GMT
Subject: CN=B27F4BE731D539B61232C26BB5A986F7CA4A7C8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:c4:1c:5b:03:ea:26:7e:57:71:cd:50:2f:
95:44:9a:2e:6e:20:bb:9d:af:36:3d:fe:66:64:a0:
a9:02:16:e3:de:94:e0:b6:db:8b:b7:7f:2f:e2:d8:
00:e7:70:64:e5:2d:fe:c8:3f:10:3b:8d:ab:6a:2f:
43:44:5d:26:56:14:5f:30:86:b8:55:9a:29:fb:90:
e6:26:13:81:d9:6a:82:fe:1e:c6:cb:80:95:07:94:
ec:bd:9d:ca:20:b5:74:26:0c:e3:6b:fd:88:d3:ff:
37:b9:97:a9:ac:fe:9b:1e:ad:39:85:16:7b:ea:0f:
20:be:5e:8d:63:41:f4:b5:d0:2f:8a:ba:63:76:5a:
c9:6a:4b:e7:00:09:52:c7:3d:6f:bd:75:91:68:36:
02:ce:85:d0:62:11:4d:d2:97:ae:00:43:76:97:4b:
32:b3:75:45:91:94:6d:0d:9e:d4:93:e7:1a:2c:57:
ea:b7:16:74:72:95:5a:9a:93:4b:d7:42:39:30:2d:
8a:e4:0d:ba:9f:fa:3c:cc:21:be:bc:52:ed:21:5e:
c3:13:4b:cb:09:f5:98:9e:ca:00:11:64:92:8a:29:
91:0c:61:a6:9f:8d:27:14:ce:ec:89:e0:51:4b:a4:
fb:78:2b:65:36:1b:b5:82:5e:cf:4c:5b:db:fe:b5:
c2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7F:4B:E7:31:D5:39:B6:12:32:C2:6B:B5:A9:86:F7:CA:4A:7C:8F
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e33392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.39.0/24
Signature Algorithm: sha256WithRSAEncryption
14:3c:f1:1e:78:ac:e5:0b:9e:e2:25:b9:9f:1e:06:26:61:cb:
60:04:1d:66:2c:66:fe:9a:17:b5:68:cc:f8:b8:cb:8b:bf:ad:
04:73:af:af:6c:ae:1d:73:e9:a4:55:9b:d0:8c:e8:09:8b:a5:
0c:1e:5e:a7:cf:0a:9c:40:a5:fa:52:f4:48:d8:fb:6c:14:83:
ca:fa:12:20:29:25:73:6b:34:17:bf:98:a6:7c:63:4d:13:27:
a3:eb:96:92:e3:fb:78:55:c4:77:3a:09:65:94:78:d4:13:8f:
0b:43:93:9c:25:ae:24:f9:b5:4d:ca:5b:ca:4f:54:94:97:d3:
52:c9:71:b5:dd:3f:35:44:66:57:7b:3f:20:29:aa:5b:b3:e5:
fb:dd:19:7a:ed:e1:37:b5:9f:5f:82:fb:8f:80:26:d0:fa:4e:
36:bb:44:39:ad:2d:a1:42:67:73:6a:10:dd:40:ce:99:2d:ce:
15:c8:72:5c:10:5a:dd:92:22:97:8c:3f:7a:a0:bb:49:2f:96:
4f:be:e9:04:b5:e7:87:d8:fd:8c:39:8e:2a:b5:8c:3c:08:b7:
86:bd:86:db:fd:31:d6:4c:7d:ca:ea:40:99:71:08:dd:e6:03:
87:26:ea:f6:e2:d1:83:b6:10:45:b6:5e:88:2f:88:19:d4:0a:
40:d3:0d:26
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUEdhMv/MDyMKqYOpka9s5P68U/AowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzEwMjIyMzU1MDRaFw0yNDEwMjEwMDAwMDRaMDMxMTAvBgNV
BAMTKEIyN0Y0QkU3MzFENTM5QjYxMjMyQzI2QkI1QTk4NkY3Q0E0QTdDOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCow8QcWwPqJn5Xcc1QL5VEmi5u
ILudrzY9/mZkoKkCFuPelOC224u3fy/i2ADncGTlLf7IPxA7jatqL0NEXSZWFF8w
hrhVmin7kOYmE4HZaoL+HsbLgJUHlOy9ncogtXQmDONr/YjT/ze5l6ms/pserTmF
FnvqDyC+Xo1jQfS10C+KumN2WslqS+cACVLHPW+9dZFoNgLOhdBiEU3Sl64AQ3aX
SzKzdUWRlG0NntST5xosV+q3FnRylVqak0vXQjkwLYrkDbqf+jzMIb68Uu0hXsMT
S8sJ9ZieygARZJKKKZEMYaafjScUzuyJ4FFLpPt4K2U2G7WCXs9MW9v+tcJrAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUsn9L5zHVObYSMsJrtamG98pKfI8wHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzczNzJlMzMzNzJlMzMzOTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE0lJzANBgkq
hkiG9w0BAQsFAAOCAQEAFDzxHnis5Que4iW5nx4GJmHLYAQdZixm/poXtWjM+LjL
i7+tBHOvr2yuHXPppFWb0IzoCYulDB5ep88KnECl+lL0SNj7bBSDyvoSICklc2s0
F7+YpnxjTRMno+uWkuP7eFXEdzoJZZR41BOPC0OTnCWuJPm1Tcpbyk9UlJfTUslx
td0/NURmV3s/ICmqW7Pl+90Zeu3hN7WfX4L7j4Am0PpONrtEOa0toUJnc2oQ3UDO
mS3OFchyXBBa3ZIil4w/eqC7SS+WT77pBLXnh9j9jDmOKrWMPAi3hr2G2/0x1kx9
yupAmXEI3eYDhybq9uLRg7YQRbZeiC+IGdQKQNMNJg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:00 2024 by rpki-client on console-ams.rpki-client.org