Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38372e302f32342d3234203d3e203630373231.roa
File: 37372e33372e38372e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier: MbAbzILnUVdczf7Q2BEjbF0gjpJ0Pn6UnqaI6tDKKII=
Subject key identifier: E8:65:E6:8F:9C:F8:1C:0A:F5:46:1A:08:89:C3:85:B8:8F:84:1C:1A
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 74F79C5220D06E7D57F66A7DE7E78A4ED775006E
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38372e302f32342d3234203d3e203630373231.roa
Signing time: Fri 20 Jan 2023 06:26:09 +0000
ROA not before: Fri 20 Jan 2023 06:21:09 +0000
ROA not after: Fri 19 Jan 2024 06:26:09 +0000
asID: 60721
IP address blocks: 77.37.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f7:9c:52:20:d0:6e:7d:57:f6:6a:7d:e7:e7:8a:4e:d7:75:00:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Jan 20 06:21:09 2023 GMT
Not After : Jan 19 06:26:09 2024 GMT
Subject: CN=E865E68F9CF81C0AF5461A0889C385B88F841C1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:7d:7e:f1:c6:d4:f6:f7:bb:79:ec:8c:6e:
22:74:f0:43:f8:08:92:0b:96:b3:ba:4d:b5:21:3c:
e8:cb:d1:97:99:c1:e7:07:75:84:6a:44:7d:42:20:
1b:0e:53:72:e4:25:a6:59:71:c2:6f:4b:2d:d6:ae:
0f:e3:0c:68:13:d7:bc:38:9e:3c:68:c4:8b:95:75:
0b:77:b6:d1:1a:44:b2:0a:6f:c3:95:c1:e4:b3:c6:
ac:00:20:3b:a8:e9:38:18:53:37:eb:45:a7:3c:7b:
49:33:54:37:6d:d4:84:f8:e8:8f:f4:98:83:6d:71:
6b:22:de:7f:cc:12:15:11:49:59:f9:63:96:8a:72:
c1:da:c5:99:5f:88:3f:6c:9a:22:5c:97:d2:b4:d7:
15:1d:3a:cf:e1:60:00:43:fe:ed:e7:2b:6c:86:42:
b5:0d:a1:ff:2e:f9:cc:f8:3c:1a:be:9f:a8:3d:84:
ce:e5:8d:3a:e3:54:c2:d6:0b:71:76:c4:a4:65:63:
9a:9d:b1:79:c1:e4:eb:d6:5a:8e:c0:5b:5d:af:99:
11:f8:92:7f:f8:e0:6c:cd:83:b7:db:60:53:45:50:
af:6a:5a:00:51:14:9f:43:2f:35:00:af:4c:8e:c6:
52:12:1c:67:5e:cc:a0:fa:11:74:0a:7f:17:6c:6e:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:65:E6:8F:9C:F8:1C:0A:F5:46:1A:08:89:C3:85:B8:8F:84:1C:1A
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e38372e302f32342d3234203d3e203630373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.87.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0f:8b:f1:18:85:16:6f:3e:f7:2c:df:21:52:58:41:c5:7c:
9e:4e:55:87:81:94:65:1a:e8:68:e2:0e:0f:65:a8:33:f5:2d:
d3:d8:45:35:ab:d2:a4:e9:3d:07:cb:9e:23:56:e6:72:25:f6:
54:7e:60:54:a5:49:15:45:d0:33:6c:1e:33:97:fd:17:0e:c0:
16:17:2b:25:48:e3:cd:d2:59:6c:4f:0e:3a:78:56:f0:23:94:
e5:14:5c:a1:5f:34:11:33:5c:03:1c:b3:8c:42:19:df:6e:3b:
62:3c:ca:a7:1c:6b:18:a8:57:72:6e:f2:77:79:f9:aa:95:ed:
3d:ed:00:ca:de:59:6d:70:86:bd:07:cb:95:52:17:69:3a:23:
89:2a:0f:92:d0:bc:1f:58:19:a0:99:15:1e:be:eb:3d:21:57:
37:78:ae:f1:56:95:7d:90:f2:e8:3a:3c:d5:00:54:ac:81:00:
0e:14:32:c5:51:bd:2a:fe:b8:ae:10:00:66:8d:3d:c6:6f:fe:
27:c7:98:e3:3c:00:f3:77:e8:42:d5:d9:49:ff:0e:ee:61:51:
2b:44:f2:56:3a:5c:f5:4d:e0:b8:19:63:e6:b6:eb:b8:b3:90:
d7:9f:f9:75:a8:a4:ae:af:44:38:5b:03:ab:90:f9:c4:01:e1:
8a:62:44:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:59 2025 by rpki-client