Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130342e302f32342d3234203d3e2037343131.roa
File: 37372e38332e3130342e302f32342d3234203d3e2037343131.roa (raw, json)
Hash identifier: vweDQoDanLzuhGRcGSBJwozDIUrs8TgBQw8uqJD4xM0=
Subject key identifier: D1:FE:5A:A4:0A:02:F2:34:EB:22:FF:17:09:41:3A:A7:64:6D:A4:9F
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 085407FEFF00AEFAE21F2C46F7A41FA3A71841E3
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130342e302f32342d3234203d3e2037343131.roa
Signing time: Tue 25 Apr 2023 11:34:06 +0000
ROA not before: Tue 25 Apr 2023 11:29:06 +0000
ROA not after: Tue 23 Apr 2024 11:34:06 +0000
asID: 7411
IP address blocks: 77.83.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:54:07:fe:ff:00:ae:fa:e2:1f:2c:46:f7:a4:1f:a3:a7:18:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Apr 25 11:29:06 2023 GMT
Not After : Apr 23 11:34:06 2024 GMT
Subject: CN=D1FE5AA40A02F234EB22FF1709413AA7646DA49F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:29:c8:63:18:57:7f:93:30:b6:3b:48:d7:
f5:54:9b:71:30:4f:4c:04:ef:f1:af:ee:f3:95:47:
75:3b:e2:cb:c7:71:00:48:71:0f:cc:4b:e0:cb:02:
6d:9c:8c:12:01:6c:db:81:41:b0:44:4c:3d:93:aa:
49:23:b8:67:7e:dc:18:98:8b:e0:98:34:9a:32:bf:
b4:2c:48:5d:81:57:ea:05:68:6b:a8:df:8b:fb:56:
cf:25:89:31:fb:cb:98:17:f9:26:53:7b:f9:e7:2e:
95:53:09:a1:54:c6:b0:32:81:ba:5e:7b:c4:3e:b0:
98:f6:82:50:12:f6:a9:f9:46:46:dc:f0:1b:26:4f:
5f:ed:34:00:a0:36:6d:1a:87:22:20:8e:4d:13:58:
69:44:81:82:44:39:47:5a:f7:76:dc:f5:a0:28:36:
34:66:ab:d7:52:25:cd:24:3f:96:73:c1:a2:bd:ca:
f2:a7:29:44:e7:f9:02:3b:9f:0e:66:15:86:b4:6c:
6b:c1:05:99:e2:85:f5:a9:e7:6a:36:f4:f6:8f:de:
5d:a6:0b:b9:5f:22:bc:21:70:d4:fb:4e:0a:f8:88:
71:16:14:cb:60:2f:7a:02:09:0c:7b:5d:43:93:c0:
a6:d0:46:35:49:75:2d:88:a7:d6:e3:ed:a8:23:97:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FE:5A:A4:0A:02:F2:34:EB:22:FF:17:09:41:3A:A7:64:6D:A4:9F
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130342e302f32342d3234203d3e2037343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.104.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:be:98:8d:bc:6a:0c:aa:4a:6e:01:33:ed:90:67:87:5c:4b:
f8:10:c7:e6:b8:91:c5:59:de:33:33:cf:ce:03:88:9e:81:59:
d2:15:b3:c7:f9:4d:08:bc:65:84:ef:db:33:e2:b6:01:d6:d1:
b2:f2:e6:cf:68:d8:dd:eb:f4:a9:2c:35:f1:38:d4:5a:e0:28:
5c:67:e4:7f:6f:2f:21:20:62:12:4b:3c:2b:74:43:37:9b:ae:
3a:9f:e7:7e:bd:be:81:c8:14:8d:30:cc:0f:4e:27:ab:b0:d3:
e8:c1:fc:db:87:de:69:c5:9d:f1:40:ad:f8:da:2d:8e:51:7e:
87:0e:a4:08:ff:03:77:99:70:61:e1:11:ae:fd:e5:fc:97:d2:
d9:f0:38:a4:7b:d3:9d:5c:9e:8d:b5:56:f3:f5:2d:77:60:16:
31:5f:fc:ed:8e:9f:f7:64:d4:0a:98:e4:e2:d6:40:39:9d:63:
7e:43:82:41:52:d2:48:19:c2:41:0a:a3:26:e0:1c:d6:7d:c0:
a1:57:ee:17:25:a2:2d:18:10:d9:66:97:55:eb:27:03:b4:23:
43:c1:21:dd:e1:08:db:03:c6:04:2d:0d:50:07:ba:7e:af:cb:
3e:23:30:7e:d5:bc:e4:26:0b:d0:27:69:62:fe:89:f2:e4:82:
a1:4a:24:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:53 2025 by rpki-client