Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/37372e3234362e3234302e302f32342d3234203d3e2035363530.roa
File: 37372e3234362e3234302e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier: yxk4TFt/ObXReJM9hZWCrSiaxkBBnmZ/PajmEhPrCIU=
Subject key identifier: F2:FF:AA:77:B8:4A:96:49:15:39:59:09:87:7C:A4:FB:78:9A:09:FD
Certificate issuer: /CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Certificate serial: 16893A46B623428F7DE7652E25777C8821C52F8D
Authority key identifier: FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/37372e3234362e3234302e302f32342d3234203d3e2035363530.roa
Signing time: Thu 27 Mar 2025 14:57:28 +0000
ROA not before: Thu 27 Mar 2025 14:52:28 +0000
ROA not after: Thu 26 Mar 2026 14:57:28 +0000
asID: 5650
IP address blocks: 77.246.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:89:3a:46:b6:23:42:8f:7d:e7:65:2e:25:77:7c:88:21:c5:2f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff426f19ba67bc89de5ae6df487c1c8c1e752e27
Validity
Not Before: Mar 27 14:52:28 2025 GMT
Not After : Mar 26 14:57:28 2026 GMT
Subject: CN=F2FFAA77B84A964915395909877CA4FB789A09FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:16:2b:8f:5b:9d:08:00:15:3d:a3:f4:9f:6e:
6a:7a:67:66:7a:5f:33:30:8d:dc:85:c6:2f:f7:93:
b5:21:ea:f1:f9:a7:e9:b3:fe:e8:7d:b0:08:0f:55:
f3:58:81:63:0a:4d:a8:df:40:04:5f:46:c3:d3:d6:
fb:62:8e:e6:dd:5b:67:c8:70:6f:3b:31:c9:19:e6:
ff:ca:24:65:7d:83:de:45:27:d5:a5:b3:22:5e:af:
31:4a:8c:74:99:73:b6:fe:78:41:f5:0f:a4:84:62:
9e:90:f7:f6:e7:09:62:02:c3:48:18:37:98:57:7a:
61:3e:b7:92:c1:df:c5:07:82:df:88:5a:28:12:cc:
08:6f:5a:e6:36:ca:f7:91:4f:dd:fc:21:66:7c:1e:
19:6c:78:1d:21:99:1a:a6:5a:8f:3b:58:47:f0:1b:
b5:42:c9:78:57:25:9a:a8:39:1d:77:a2:f4:8a:35:
2e:df:f0:25:19:54:8c:84:6a:a1:cc:f0:f1:32:8f:
e1:27:12:d4:be:5e:40:a9:4e:70:1a:7a:44:af:40:
5d:49:4f:d2:d8:61:99:16:c4:2d:bf:d7:c8:f2:a4:
0f:60:29:d3:10:2b:79:52:dc:a0:5c:c5:c5:6c:5a:
f0:5e:03:3b:3e:42:97:05:89:dc:8d:fa:30:0e:cd:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FF:AA:77:B8:4A:96:49:15:39:59:09:87:7C:A4:FB:78:9A:09:FD
X509v3 Authority Key Identifier:
keyid:FF:42:6F:19:BA:67:BC:89:DE:5A:E6:DF:48:7C:1C:8C:1E:75:2E:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/FF426F19BA67BC89DE5AE6DF487C1C8C1E752E27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0JvGbpnvIneWubfSHwcjB51Lic.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/468b081e-ba93-465f-9b6e-7fbd63bdff63/0/37372e3234362e3234302e302f32342d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.240.0/24
Signature Algorithm: sha256WithRSAEncryption
43:9c:ec:c6:14:33:fb:76:cf:b1:a6:73:a5:4d:3e:72:75:39:
b0:91:25:d9:3f:13:c1:5a:5b:4a:d5:46:15:c0:e2:87:f4:cb:
6c:9f:54:5c:ab:ae:90:32:bb:7f:fd:82:c6:5c:7a:ff:a7:e1:
c4:30:dd:2c:63:a7:e0:55:74:3e:5a:04:70:ff:d4:94:69:bd:
58:57:f4:d0:af:21:74:65:cc:7d:00:aa:44:6a:62:67:8a:7d:
90:13:49:17:59:a2:82:8d:4d:a0:6f:f8:a7:b4:24:3b:44:3d:
d6:7a:8f:ed:4d:b6:4c:24:86:73:9e:8c:ab:e5:72:9c:8f:72:
07:26:ac:9a:8e:0a:27:04:55:db:1b:ee:82:3f:f9:fd:8d:26:
aa:84:20:3d:ff:2c:19:f2:fb:c5:34:12:e9:14:18:7e:69:8e:
c1:0b:6a:6b:42:30:b0:ee:9b:f6:99:be:dd:70:06:6d:74:e2:
d0:a7:44:4b:10:42:25:48:a4:5f:2f:ad:58:b6:c7:cf:bb:51:
ad:b0:d2:93:12:aa:00:52:3a:4a:53:cd:07:90:35:b1:da:0c:
be:c1:0a:78:04:4a:4b:85:ad:09:f4:8a:4e:81:b9:18:2e:d4:
14:0d:7c:6a:d0:80:84:ec:0c:c0:16:8d:09:2e:73:64:b4:88:
a9:45:30:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:20:09 2025 by rpki-client