Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38342e302f32342d3234203d3e20383334.roa
File: 37372e33372e38342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: k3/vtwHRIYLeBdSiD7K7RA2C9H6cVlUIyUPgxpkSk9M=
Subject key identifier: D4:26:48:AC:C8:62:B9:2D:0F:E3:D1:3B:D4:09:DC:27:E9:DA:36:AB
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 1D9378B8F6494C16569A0C78BDC0604B6028493F
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38342e302f32342d3234203d3e20383334.roa
Signing time: Wed 26 Jul 2023 12:00:04 +0000
ROA not before: Wed 26 Jul 2023 11:55:04 +0000
ROA not after: Wed 24 Jul 2024 12:00:04 +0000
asID: 834
IP address blocks: 77.37.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:93:78:b8:f6:49:4c:16:56:9a:0c:78:bd:c0:60:4b:60:28:49:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jul 26 11:55:04 2023 GMT
Not After : Jul 24 12:00:04 2024 GMT
Subject: CN=D42648ACC862B92D0FE3D13BD409DC27E9DA36AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:5d:b2:d1:a3:96:3b:68:18:a0:8f:06:19:
4e:68:01:8b:93:da:24:ef:2d:9b:73:9b:80:21:11:
fd:63:29:69:ae:9d:48:e2:49:69:42:ca:1e:f9:82:
7f:bf:35:50:97:aa:2f:c4:d3:52:5d:19:df:55:85:
cc:f1:40:06:4a:d0:5f:fe:14:71:28:f3:81:6e:fa:
d6:7f:a0:bc:98:ec:ea:ef:0f:67:eb:d5:a0:5a:01:
d0:60:56:01:be:9d:f7:54:6c:58:94:00:5e:75:f2:
09:b6:52:fe:d3:83:8b:19:9e:8e:bb:6b:9c:90:51:
1b:3d:c0:f8:cf:77:82:2f:68:82:72:e9:24:09:82:
f8:57:ef:9f:b6:b6:ab:6e:47:98:73:a1:00:85:09:
d6:e7:5a:7c:cd:57:dd:74:fe:3f:86:d3:5d:a8:2c:
33:54:24:8c:af:11:58:50:f6:d7:93:c6:93:49:a2:
9a:fd:a6:62:54:af:f5:89:be:cf:d7:58:d0:f7:a9:
2e:f0:99:c7:f9:1f:11:5d:49:88:97:f1:ce:00:12:
27:0d:2c:fb:7e:06:05:db:77:f3:0d:08:73:d1:f1:
93:01:7d:ff:41:0c:2d:47:ff:6e:5f:31:a6:a1:f6:
53:39:07:29:10:bc:dd:81:2a:3b:56:6c:58:ff:1d:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:26:48:AC:C8:62:B9:2D:0F:E3:D1:3B:D4:09:DC:27:E9:DA:36:AB
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.84.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c7:7b:da:8b:e2:fb:e3:b4:70:c7:87:83:ea:60:c8:8a:1a:
a5:b6:1a:08:b3:e0:11:6d:a8:f4:94:ee:43:21:f0:b7:15:98:
1e:ec:77:b5:3a:db:24:bd:32:33:c2:fe:87:dd:e1:08:87:32:
84:3d:0c:bc:55:c7:20:17:0c:39:68:df:1e:04:3d:ef:6a:64:
08:a5:f3:1c:e1:cb:2e:44:92:1a:ee:79:39:49:aa:59:4a:24:
05:01:7c:22:7b:fe:4c:87:a0:bb:cd:5f:c8:1c:bf:c8:4a:28:
5d:0d:d2:2b:1c:8e:37:c4:01:33:27:56:86:db:3a:f1:cc:da:
7a:c8:a9:22:ef:85:7c:61:c1:77:42:03:4b:64:12:b5:2f:32:
f0:7a:fc:01:54:6c:5d:7a:5d:12:4b:af:be:8e:15:08:f2:55:
6b:58:c2:28:11:cb:05:1e:23:dc:43:f8:d8:bd:95:82:d7:55:
17:22:d8:84:4d:e7:c5:c6:81:9f:ad:8a:07:d1:9f:e4:40:43:
0f:f9:5b:99:3b:19:b0:22:e6:20:a0:80:5c:b7:d4:24:1a:82:
1d:42:42:31:3d:6d:d2:5b:47:d5:8e:42:34:93:1d:09:16:ae:
26:ff:19:9e:c7:b3:e6:05:75:fb:3b:67:db:00:87:8b:68:d1:
90:26:47:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:06 2025 by rpki-client