Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130352e302f32342d3234203d3e20383334.roa
File: 37372e38332e3130352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: hxvZtnmownNcSC7q4XgCOe//IADmA4m28d6Pf4G2MuQ=
Subject key identifier: 05:D9:6D:1F:F5:BD:58:1C:0E:DF:A2:67:63:A1:27:0C:56:4A:16:44
Certificate issuer: /CN=4a8d360cee6516527fd5492c37cac4441e119c00
Certificate serial: 7A5A7C7AE0FAD2DCB50611670BE69DA1D1771407
Authority key identifier: 4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130352e302f32342d3234203d3e20383334.roa
Signing time: Mon 11 Sep 2023 07:00:04 +0000
ROA not before: Mon 11 Sep 2023 06:55:04 +0000
ROA not after: Mon 09 Sep 2024 07:00:04 +0000
asID: 834
IP address blocks: 77.83.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:5a:7c:7a:e0:fa:d2:dc:b5:06:11:67:0b:e6:9d:a1:d1:77:14:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8d360cee6516527fd5492c37cac4441e119c00
Validity
Not Before: Sep 11 06:55:04 2023 GMT
Not After : Sep 9 07:00:04 2024 GMT
Subject: CN=05D96D1FF5BD581C0EDFA26763A1270C564A1644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:95:2a:8a:65:88:48:44:fe:a9:62:e4:2d:
a7:94:00:3d:6d:52:3d:19:58:0a:cf:e6:cb:ed:4a:
45:c2:36:6a:bf:a1:b5:2f:21:bf:cf:3c:36:eb:fe:
b6:88:30:57:59:a9:54:48:99:48:d2:88:3a:7a:27:
c5:00:c9:9e:e7:12:19:67:f3:5a:a7:96:27:55:62:
70:12:41:b3:17:b9:13:8c:bb:a1:9c:ce:2a:2d:9a:
99:aa:25:eb:34:3d:7a:4f:58:fc:1a:ad:bb:4d:11:
3d:cf:1f:ac:e8:26:d7:53:7c:57:a9:09:d1:38:99:
4e:3e:87:3c:ad:3f:43:d9:e3:a0:44:38:ae:3a:bb:
f3:9b:7b:6d:30:e1:ba:79:86:43:36:b3:92:f6:d5:
0c:ad:ce:54:90:d3:7b:20:31:78:6c:8f:99:e4:f4:
04:46:8c:1c:42:25:5c:d3:4e:15:04:1b:45:ff:59:
85:e0:e4:16:81:97:a4:59:d3:37:12:7a:16:84:a5:
04:86:71:45:72:96:ec:49:c7:61:f8:e8:3b:b3:7e:
c6:5f:c1:90:ac:0d:c2:57:e4:9e:f6:e5:bb:e9:7c:
10:85:ff:04:39:6d:16:b0:7b:c6:0d:bd:21:2e:1a:
37:ba:52:0c:ad:e9:dd:40:50:d8:2a:ce:0c:5a:b7:
12:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D9:6D:1F:F5:BD:58:1C:0E:DF:A2:67:63:A1:27:0C:56:4A:16:44
X509v3 Authority Key Identifier:
keyid:4A:8D:36:0C:EE:65:16:52:7F:D5:49:2C:37:CA:C4:44:1E:11:9C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/4A8D360CEE6516527FD5492C37CAC4441E119C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So02DO5lFlJ_1UksN8rERB4RnAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/35178f95-880c-42b2-8213-f20a505eb97e/1/37372e38332e3130352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.105.0/24
Signature Algorithm: sha256WithRSAEncryption
09:9e:a8:5d:02:16:48:a2:4c:8c:be:32:e7:97:14:0a:0a:a0:
ee:f2:ad:bc:4a:d5:c0:85:02:c8:1f:39:85:e8:04:3d:d3:62:
ba:c0:38:18:45:2e:ec:a0:bc:50:93:27:87:f6:ba:f2:82:5f:
35:37:d3:15:d9:2e:bd:a5:63:72:56:f7:f3:96:45:f0:cc:a5:
d7:b7:d0:67:46:95:48:61:9b:44:52:9b:01:58:4f:58:4f:cb:
80:c0:de:2e:a9:44:6e:a0:e2:20:b1:87:77:3d:7a:64:d2:e5:
4c:0b:93:1e:1b:64:9e:76:81:87:ab:c4:6d:ec:b5:00:34:75:
7a:69:46:85:37:08:b2:58:76:36:48:48:b1:53:3f:d5:46:88:
bd:09:0d:d6:bc:ec:01:f0:fe:c8:d1:26:25:c5:35:31:04:8f:
fa:23:21:e0:43:aa:80:02:86:27:da:9b:aa:07:eb:4f:85:b8:
df:91:16:90:0f:55:19:8a:7f:f8:e2:8b:f3:21:04:5b:67:51:
da:66:ac:5c:c4:94:6f:6a:ba:d9:5f:a4:1e:06:3e:bf:9b:5a:
3a:4d:27:02:f8:8c:d2:50:b8:86:26:bb:d1:52:75:01:fb:db:
29:2d:ff:92:53:61:ca:e5:54:bd:f8:fb:93:0a:af:00:66:7e:
80:34:8f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 08:42:13 2025 by rpki-client