Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235342e302f32342d3234203d3e20333936303733.roa
File: 37372e38332e3235342e302f32342d3234203d3e20333936303733.roa (raw, json)
Hash identifier: 1MWe05/lbd5r4txcdetULyW0MdduqlknrcyQ1+uUsgs=
Subject key identifier: 9B:0C:AC:2E:BF:11:40:CF:1C:4D:24:6A:94:8A:77:6B:9B:96:40:D3
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 7ED58F2345D03AD10352EEB0EC0EFD84B805741B
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235342e302f32342d3234203d3e20333936303733.roa
Signing time: Thu 23 Jan 2025 17:53:52 +0000
ROA not before: Thu 23 Jan 2025 17:48:52 +0000
ROA not after: Thu 22 Jan 2026 17:53:52 +0000
asID: 396073
IP address blocks: 77.83.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d5:8f:23:45:d0:3a:d1:03:52:ee:b0:ec:0e:fd:84:b8:05:74:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Jan 23 17:48:52 2025 GMT
Not After : Jan 22 17:53:52 2026 GMT
Subject: CN=9B0CAC2EBF1140CF1C4D246A948A776B9B9640D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:29:4f:4c:34:e5:c1:20:fd:b7:06:a2:7e:50:
1d:6e:8e:ac:cb:97:81:fd:29:19:ca:3a:f8:6a:40:
e1:3f:b7:2f:14:10:b8:80:ef:55:12:f2:89:0b:54:
a4:d9:30:c4:4a:f3:94:99:2b:42:60:2e:9b:7f:8d:
18:32:58:70:62:b2:85:ac:06:ef:df:ed:5c:52:dd:
d0:d7:65:6a:a5:62:60:2f:3f:e2:b6:80:bd:82:55:
7b:e6:d6:f6:38:22:a2:33:df:b7:53:22:ff:26:d4:
b2:8c:c3:08:5a:ab:15:28:b6:46:a4:9d:d9:17:d8:
c1:e5:6e:39:f8:36:96:b1:94:bd:aa:dc:65:7a:cd:
08:49:9b:d9:1f:c1:bf:8e:2a:3b:a1:fe:c4:8d:92:
f1:0a:cb:72:71:76:80:28:27:c4:78:b6:a3:04:76:
82:45:b8:3a:24:67:42:9b:cf:10:a1:6e:aa:f9:d6:
3d:92:c2:e8:3b:cb:4b:28:a8:bb:91:60:e5:65:79:
6e:c2:b0:08:a3:b0:bc:d0:5a:a0:44:ee:96:aa:e2:
49:d2:a1:52:a0:70:90:62:4d:59:a6:a2:fa:0f:7f:
fd:a7:4c:55:9d:15:ae:a4:de:d0:42:66:fe:9d:5b:
2e:c4:03:cb:2c:29:8e:67:fd:fa:a9:6d:80:ed:fe:
30:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0C:AC:2E:BF:11:40:CF:1C:4D:24:6A:94:8A:77:6B:9B:96:40:D3
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235342e302f32342d3234203d3e20333936303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:32:8b:d7:00:62:32:34:21:bd:f4:98:3a:46:71:ef:c5:d2:
ed:27:4f:fd:85:1f:b1:fd:a3:b9:e5:b6:de:b5:c6:4b:bd:99:
64:9f:45:8e:19:aa:81:20:8c:89:c3:d0:62:e2:44:4b:af:c0:
86:10:31:56:69:7d:47:66:d0:f0:31:6d:d2:c1:81:59:9b:9b:
dc:ce:fc:a4:4e:94:df:c3:e8:2c:2e:73:00:5c:e3:f3:ac:39:
6e:ea:1f:4d:79:d4:ab:e5:ee:fb:ee:a3:f5:bc:cb:dc:50:12:
9d:75:98:f5:a2:06:e2:b1:ed:c6:50:12:9c:1a:44:3c:ac:a7:
3f:77:28:45:96:fa:89:61:6e:54:ca:c5:73:b0:88:d6:0f:23:
7c:4d:5a:b6:be:f8:3c:1c:46:a3:cd:f1:86:d6:53:c2:58:b3:
a4:48:4b:fc:31:7c:7b:8e:39:34:14:2c:64:46:1c:e8:3d:d1:
f7:3e:cb:b0:c0:d0:81:70:4a:d1:03:19:8d:6b:55:b6:5a:04:
ba:21:c3:55:bc:b0:45:c3:28:c9:bf:00:db:4f:49:9e:7d:21:
63:9a:51:ed:2e:d8:3b:4b:97:4b:d1:21:00:1a:08:51:a9:fe:
f9:43:d0:f6:21:3b:6b:cf:95:1f:de:20:0d:3d:ca:c6:d6:b9:
2c:82:6d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:04:20 2025 by rpki-client