Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36332e302f32342d3234203d3e20383334.roa
File: 37372e33372e36332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 4EVsqHdvkygBe+/5jXyesD2t4NKzQFjx7bk5UeWXlRw=
Subject key identifier: 73:F4:E5:4C:7A:A1:5C:33:3E:3B:9D:B0:85:90:75:F7:AC:CE:66:A8
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 4F02DC208AF3190108F8D879320CD242EC7D5D79
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36332e302f32342d3234203d3e20383334.roa
Signing time: Tue 04 Apr 2023 15:00:12 +0000
ROA not before: Tue 04 Apr 2023 14:55:12 +0000
ROA not after: Tue 02 Apr 2024 15:00:12 +0000
asID: 834
IP address blocks: 77.37.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:02:dc:20:8a:f3:19:01:08:f8:d8:79:32:0c:d2:42:ec:7d:5d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Apr 4 14:55:12 2023 GMT
Not After : Apr 2 15:00:12 2024 GMT
Subject: CN=73F4E54C7AA15C333E3B9DB0859075F7ACCE66A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:a0:4f:8f:9b:a6:3e:c8:1d:a7:f8:7f:28:
15:c3:82:80:f6:f0:5a:aa:49:17:4c:cb:b9:44:51:
8e:84:b5:8d:a4:ea:e6:f4:47:d0:56:95:8f:d4:35:
dc:24:f5:80:3e:a3:7f:46:46:0b:90:bf:d8:7f:e1:
90:1a:fd:98:b8:84:ab:62:43:66:ec:ca:22:b2:d5:
75:b9:63:6d:59:11:30:9f:9a:34:b4:19:01:dc:1c:
44:f9:18:8a:b7:cc:73:3b:6a:c0:7a:c2:8b:8a:57:
f3:57:65:cf:ae:cc:98:6e:fa:7a:a4:dd:df:58:b7:
9e:8f:95:e6:19:b8:f5:e5:e1:61:fa:79:fb:b9:ac:
b4:a5:c2:83:88:d1:8c:b0:47:2c:06:88:d4:b6:37:
7f:cd:65:d1:c9:79:b8:5e:38:6d:98:69:89:41:d7:
c1:05:27:2e:25:ef:68:73:3c:0c:ca:7a:1d:a9:9e:
9d:dd:98:fe:b6:e5:97:18:1c:8d:68:8b:d0:99:c9:
35:93:20:f6:4d:eb:f0:3b:dc:19:c0:4d:63:b3:e5:
59:18:60:1e:d2:95:3e:ed:6d:c0:5a:6d:36:94:12:
11:09:d6:fd:00:9a:4e:03:db:80:07:d7:77:95:66:
9f:69:52:46:b4:d9:ce:81:66:06:8b:d2:99:e8:15:
70:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F4:E5:4C:7A:A1:5C:33:3E:3B:9D:B0:85:90:75:F7:AC:CE:66:A8
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e36332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:11:db:62:cd:91:33:bf:b0:51:34:ca:41:56:63:4d:22:c1:
a1:2c:de:ac:9c:37:f7:cc:6e:70:d7:61:e4:20:5f:fe:23:9e:
d8:72:f4:c7:80:e4:d8:a8:54:02:46:84:3b:3c:94:d3:3e:f8:
a1:5c:5a:db:af:0a:79:37:1b:77:93:61:17:a8:67:5c:fa:4a:
99:7f:17:ad:85:55:50:6c:e0:03:e9:b0:bc:8e:3f:45:24:26:
a4:07:86:2e:cd:8e:08:1d:09:40:7e:6d:00:19:50:8c:2a:92:
fe:87:e5:3e:d1:21:13:d5:7e:75:ca:ff:0e:e4:17:59:c7:74:
04:f6:22:0d:e3:a1:e4:de:a6:8f:a5:cb:37:4c:b2:51:1a:20:
84:07:0a:5a:e5:6a:7b:eb:ce:6e:67:16:5b:f4:45:f0:93:fa:
c5:9d:a7:21:34:a0:8e:a6:23:7b:3a:56:b7:fe:b4:98:5a:43:
77:86:9a:3d:e4:9d:a8:17:e2:9a:68:dc:b8:0a:4d:a6:64:be:
78:d3:f1:be:89:52:df:49:06:ff:4a:a2:24:f8:37:97:60:fe:
36:8d:c8:c8:a6:46:ff:10:cc:3c:b3:43:f8:0d:34:ae:50:71:
9f:5f:aa:13:59:db:4f:fe:66:27:2d:33:81:7d:f1:f5:11:f2:
61:1e:e9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:24 2025 by rpki-client