Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39342e302f32342d3234203d3e20383334.roa
File: 37372e33372e39342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: UfkwojhIDxdkB4w8wMd+jzU8hUFHvkFPie6LDgPitzo=
Subject key identifier: B7:F9:15:37:62:33:2B:A4:A1:6B:14:33:FB:51:E7:E8:88:BC:26:C8
Certificate issuer: /CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Certificate serial: 0EC931AB117131FCFA08B019FECAAB5460689444
Authority key identifier: 58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39342e302f32342d3234203d3e20383334.roa
Signing time: Fri 31 Mar 2023 00:00:13 +0000
ROA not before: Thu 30 Mar 2023 23:55:13 +0000
ROA not after: Fri 29 Mar 2024 00:00:13 +0000
asID: 834
IP address blocks: 77.37.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:c9:31:ab:11:71:31:fc:fa:08:b0:19:fe:ca:ab:54:60:68:94:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5804d1e2b126006bfe5079636a6a8dde5b7fd9a6
Validity
Not Before: Mar 30 23:55:13 2023 GMT
Not After : Mar 29 00:00:13 2024 GMT
Subject: CN=B7F9153762332BA4A16B1433FB51E7E888BC26C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:cb:8b:c0:20:c0:59:3b:7c:a3:fa:aa:ba:
ac:b1:dd:e6:51:0d:74:d6:6b:9c:ce:31:4d:df:2f:
48:c4:1d:4a:bc:77:64:a6:c4:11:c2:d5:be:a7:c3:
b7:f3:e2:d2:a5:55:8a:7e:46:e4:22:e1:d8:d6:cf:
5d:74:e4:59:02:64:be:37:de:7f:28:89:28:d4:f4:
0e:2f:fb:29:45:2f:16:f1:0a:8a:38:50:47:b3:c5:
75:9f:30:90:6a:df:69:11:6b:66:b3:fb:9b:26:c8:
a3:6f:0d:40:88:45:db:cc:44:c2:f4:8b:ba:36:e3:
ef:9f:f8:32:8e:d5:9b:f3:21:5b:08:b4:6a:27:4f:
a9:f6:73:74:92:55:24:90:e6:1a:6d:a0:44:d7:ba:
aa:7b:5f:f0:34:a8:13:f4:58:e7:c0:ee:b3:65:a2:
ba:92:ad:34:d8:28:e1:f8:8a:5c:d5:e8:df:63:bd:
6c:19:9a:9f:48:47:bc:68:a1:5e:4a:bd:0b:62:8e:
1b:91:b0:c2:86:e0:75:ee:a2:7e:12:44:6b:c4:e5:
82:21:aa:d3:6d:d7:3d:c8:5c:c0:e7:2a:1b:e4:1f:
cb:e7:7e:22:0b:d0:be:bc:74:43:72:47:4b:5a:7e:
1b:af:d5:77:a6:36:96:65:7b:0f:31:4b:e3:e0:1e:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F9:15:37:62:33:2B:A4:A1:6B:14:33:FB:51:E7:E8:88:BC:26:C8
X509v3 Authority Key Identifier:
keyid:58:04:D1:E2:B1:26:00:6B:FE:50:79:63:6A:6A:8D:DE:5B:7F:D9:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/5804D1E2B126006BFE5079636A6A8DDE5B7FD9A6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WATR4rEmAGv-UHljamqN3lt_2aY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/403a542c-5737-4bef-9c35-3d113c6eee37/0/37372e33372e39342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.94.0/24
Signature Algorithm: sha256WithRSAEncryption
83:4f:41:98:bf:c6:89:05:ab:6f:49:a0:24:6f:a8:4f:c7:f8:
4b:8d:9f:e8:04:14:ec:49:22:8e:71:8f:24:e5:ee:5c:49:99:
aa:c6:7c:69:08:43:8f:c7:c3:d3:33:8e:58:ae:c1:4a:ad:e7:
2f:ad:5c:6e:5d:fd:4f:ca:d2:fe:d6:ca:f4:81:5e:df:af:6e:
03:a5:a1:bf:d3:b0:b5:e4:83:d1:a1:12:12:60:0f:f4:25:d4:
56:d0:8e:3b:1d:11:4d:f0:95:59:54:f5:ed:c9:5b:88:a8:ce:
cb:65:d1:60:07:6d:81:02:c7:72:39:00:b7:f5:dc:cb:eb:19:
46:24:f8:0d:21:d8:53:71:92:15:be:4d:1b:0c:4a:83:4a:ff:
e2:95:2c:39:80:ca:e2:2e:b5:0b:e8:7e:87:b9:7d:0d:7b:62:
b1:48:60:a5:b3:ef:3e:2e:df:d4:fa:84:b5:65:4d:a3:fa:4a:
ad:4d:fb:9b:d4:b0:d9:df:1c:d0:7c:be:49:ab:c2:ef:bb:15:
12:8b:c6:49:46:e3:81:e5:e5:33:3b:e5:d5:17:93:dd:29:0a:
9d:f3:9c:25:b4:71:fc:2e:17:5c:6d:ce:24:be:a6:2a:3c:f7:
4a:ad:3c:a6:79:8e:08:2e:fc:90:46:5b:40:28:52:ca:6e:ea:
52:22:bf:14
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIUDskxqxFxMfz6CLAZ/sqrVGBolEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgwNGQxZTJiMTI2MDA2YmZlNTA3OTYzNmE2YThkZGU1
YjdmZDlhNjAeFw0yMzAzMzAyMzU1MTNaFw0yNDAzMjkwMDAwMTNaMDMxMTAvBgNV
BAMTKEI3RjkxNTM3NjIzMzJCQTRBMTZCMTQzM0ZCNTFFN0U4ODhCQzI2QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnJsuLwCDAWTt8o/qquqyx3eZR
DXTWa5zOMU3fL0jEHUq8d2SmxBHC1b6nw7fz4tKlVYp+RuQi4djWz1105FkCZL43
3n8oiSjU9A4v+ylFLxbxCoo4UEezxXWfMJBq32kRa2az+5smyKNvDUCIRdvMRML0
i7o24++f+DKO1ZvzIVsItGonT6n2c3SSVSSQ5hptoETXuqp7X/A0qBP0WOfA7rNl
orqSrTTYKOH4ilzV6N9jvWwZmp9IR7xooV5KvQtijhuRsMKG4HXuon4SRGvE5YIh
qtNt1z3IXMDnKhvkH8vnfiIL0L68dENyR0tafhuv1XemNpZlew8xS+PgHs7ZAgMB
AAGjggI1MIICMTAdBgNVHQ4EFgQUt/kVN2IzK6ShaxQz+1Hn6Ii8JsgwHwYDVR0j
BBgwFoAUWATR4rEmAGv+UHljamqN3lt/2aYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMtNTczNy00YmVmLTljMzUtM2QxMTNjNmVl
ZTM3LzAvNTgwNEQxRTJCMTI2MDA2QkZFNTA3OTYzNkE2QThEREU1QjdGRDlBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dBVFI0ckVtQUd2LVVIbGphbXFOM2x0
XzJhWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDAzYTU0MmMt
NTczNy00YmVmLTljMzUtM2QxMTNjNmVlZTM3LzAvMzczNzJlMzMzNzJlMzkzNDJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE0lXjANBgkq
hkiG9w0BAQsFAAOCAQEAg09BmL/GiQWrb0mgJG+oT8f4S42f6AQU7EkijnGPJOXu
XEmZqsZ8aQhDj8fD0zOOWK7BSq3nL61cbl39T8rS/tbK9IFe369uA6Whv9OwteSD
0aESEmAP9CXUVtCOOx0RTfCVWVT17clbiKjOy2XRYAdtgQLHcjkAt/Xcy+sZRiT4
DSHYU3GSFb5NGwxKg0r/4pUsOYDK4i61C+h+h7l9DXtisUhgpbPvPi7f1PqEtWVN
o/pKrU37m9Sw2d8c0Hy+SavC77sVEovGSUbjgeXlMzvl1ReT3SkKnfOcJbRx/C4X
XG3OJL6mKjz3Sq08pnmOCC78kEZbQChSym7qUiK/FA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:54 2025 by rpki-client