Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130342e302f32332d3233203d3e203631333137.roa
File: 37372e38332e3130342e302f32332d3233203d3e203631333137.roa (raw, json)
Hash identifier: 82cipmykNUPU+j4HXwgzDC4wmdYgC1Hd5WF++MD2UJQ=
Subject key identifier: 61:E2:08:65:DF:86:9B:00:2C:52:45:C8:CB:FA:49:6A:0B:FB:A5:8E
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 6FF825377F8793535D08E0A6EB643DBFEF275399
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130342e302f32332d3233203d3e203631333137.roa
Signing time: Wed 04 Jan 2023 10:43:58 +0000
ROA not before: Wed 04 Jan 2023 10:38:58 +0000
ROA not after: Wed 03 Jan 2024 10:43:58 +0000
asID: 61317
IP address blocks: 77.83.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:f8:25:37:7f:87:93:53:5d:08:e0:a6:eb:64:3d:bf:ef:27:53:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Jan 4 10:38:58 2023 GMT
Not After : Jan 3 10:43:58 2024 GMT
Subject: CN=61E20865DF869B002C5245C8CBFA496A0BFBA58E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:07:06:62:a6:95:b6:4f:7b:65:af:53:cc:
e8:7e:37:5e:f6:0b:27:cf:96:bc:a2:ec:65:ab:09:
99:86:f6:74:9c:05:50:53:4d:f7:9c:db:90:52:f9:
26:74:ea:d9:75:1d:3e:37:7f:e9:81:af:6a:3f:a2:
e5:57:35:55:ce:89:31:08:bf:1a:08:5a:3d:fc:96:
77:1c:9b:63:0e:a4:5a:e9:f7:c9:7d:b7:a1:34:21:
a7:44:e2:0e:a6:8e:ff:ec:89:25:08:50:67:4b:3e:
36:e1:e0:dd:bc:89:f8:fc:1a:ae:81:de:94:49:5a:
0c:bd:f3:91:82:ed:df:78:c8:56:d6:ce:b7:8b:f5:
10:92:92:a4:47:18:dc:23:61:3e:0d:d5:fc:46:51:
02:cc:ab:2e:1e:76:32:d7:64:5e:9c:ec:f5:d1:cb:
81:67:2d:be:29:81:35:a8:40:37:44:98:a6:de:64:
ac:0d:f9:aa:4d:ed:f5:41:c2:6f:d0:c6:9d:fe:0f:
1a:f2:c1:4c:54:e6:ea:19:1d:06:65:d7:18:42:00:
42:fb:8a:50:8a:84:48:f0:d3:22:ef:02:f8:be:a6:
17:6b:2a:03:b3:14:50:d7:21:65:9a:1f:7c:50:7f:
7d:d0:46:f1:5d:c3:dc:1b:d3:8b:15:60:92:a9:75:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E2:08:65:DF:86:9B:00:2C:52:45:C8:CB:FA:49:6A:0B:FB:A5:8E
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130342e302f32332d3233203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.104.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:ee:fa:d1:0e:75:e9:1e:e8:5c:f7:cf:cd:e5:13:77:7d:1b:
13:e6:86:d1:68:ba:aa:60:a6:e6:78:33:c0:95:b1:31:8a:ac:
06:da:77:60:46:19:2d:97:ef:76:cf:17:84:f3:26:dc:b5:d9:
1c:a1:f1:73:5f:3b:38:fe:ff:5d:b1:85:78:75:dd:ff:d8:45:
3c:d7:40:a5:35:4c:0e:b8:bb:2c:32:8f:2b:0e:db:b8:f5:c0:
3f:99:db:23:1d:6e:c5:d3:91:b5:53:bb:c5:33:bc:0f:d8:c5:
1b:c7:08:91:97:be:da:0d:34:17:55:2e:59:b0:97:5f:bd:8f:
6a:38:dd:57:97:d9:1e:17:9a:65:14:2b:54:90:4d:76:aa:b9:
eb:5b:42:4d:db:ae:d7:79:99:b6:7f:0b:95:ff:20:27:f9:64:
ab:ab:2c:0b:4a:6a:81:36:5c:b3:aa:49:8c:83:ab:6d:4a:26:
49:c6:32:42:b8:e3:0f:ab:e5:87:df:a2:23:d8:ae:32:55:5d:
af:e8:44:9c:06:3f:29:5e:c8:4b:da:50:eb:e3:e2:50:2f:95:
f1:59:c0:f7:19:e8:76:38:d4:18:f5:88:be:87:15:06:fe:60:
31:a5:db:be:72:49:65:09:1e:02:b2:eb:e5:d3:bd:90:b6:7c:
29:95:9d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:55:10 2025 by rpki-client