Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37392e302f32342d3234203d3e2037303138.roa
File: 37372e38312e37392e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: Mtmk/kZphhA5s4uopguvEbJvjOjUXgfeStc99+50/4U=
Subject key identifier: 7D:18:37:E4:E6:13:04:25:21:31:31:D8:5D:DB:F6:D2:D9:CF:54:56
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 5DC79BE55F0C9CFBDE4673F36A9453DBF3174357
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37392e302f32342d3234203d3e2037303138.roa
Signing time: Tue 25 Mar 2025 06:19:46 +0000
ROA not before: Tue 25 Mar 2025 06:14:46 +0000
ROA not after: Tue 24 Mar 2026 06:19:46 +0000
asID: 7018
IP address blocks: 77.81.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:c7:9b:e5:5f:0c:9c:fb:de:46:73:f3:6a:94:53:db:f3:17:43:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Mar 25 06:14:46 2025 GMT
Not After : Mar 24 06:19:46 2026 GMT
Subject: CN=7D1837E4E6130425213131D85DDBF6D2D9CF5456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:03:fa:15:fd:47:3c:f2:0b:a9:93:bc:c1:
ef:43:fd:7f:62:7c:4a:d8:84:27:34:4b:de:c2:3e:
4a:2c:8c:d8:85:01:b7:66:72:84:4f:45:97:8c:6e:
28:24:87:30:aa:7b:67:da:8d:24:95:b0:00:4c:0c:
2e:db:20:7d:82:85:f8:20:df:f9:dd:60:d6:f1:77:
50:35:5c:86:a5:11:9d:d9:2a:e6:90:20:75:a2:63:
28:43:b6:25:54:05:38:49:a0:ce:f7:0c:69:f4:d2:
c2:dd:81:92:d4:66:7e:45:cc:24:6b:b0:e3:cc:f6:
0f:a4:c2:b4:17:3b:24:16:df:4c:b1:98:06:bf:56:
45:cd:3f:ad:77:db:92:75:b6:84:b3:de:22:0b:83:
0a:6a:8d:f8:02:cc:88:1f:a6:96:73:de:c3:05:af:
d9:9b:aa:44:f4:36:c9:d4:42:d6:8e:c6:c9:2a:ec:
4d:1f:7a:d9:25:84:8d:a8:13:e8:67:37:67:29:8a:
51:f3:e0:09:bb:b0:8a:af:88:53:ea:f5:a6:c1:35:
89:1c:9a:1b:9b:ea:d1:a3:f2:8d:d2:97:e6:df:87:
62:77:7d:a0:4b:71:31:da:49:58:41:89:b6:c7:67:
5a:a8:ac:4c:d3:25:69:10:91:65:3a:e7:81:3e:3d:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:18:37:E4:E6:13:04:25:21:31:31:D8:5D:DB:F6:D2:D9:CF:54:56
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e37392e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.79.0/24
Signature Algorithm: sha256WithRSAEncryption
24:25:bd:58:35:3e:8b:92:14:c8:01:21:29:3b:35:42:02:9d:
6d:16:ac:e4:88:37:02:ce:07:3c:55:84:15:50:a3:b5:e4:4b:
ea:43:99:b4:1e:76:ed:32:93:4c:da:99:0e:a3:94:d6:f5:67:
11:81:ae:cd:16:26:2e:6c:e3:ea:6d:1b:2f:e8:3a:86:72:10:
e0:8d:76:4d:fa:8f:7a:fe:d2:11:c0:0e:05:19:19:f4:2f:db:
83:45:57:9d:18:b7:20:9b:af:80:75:97:c3:ef:d4:5a:68:9d:
8a:44:a5:b4:bc:15:ff:6f:ba:b4:85:c2:50:80:8b:7c:a2:a8:
04:1a:1b:69:5d:50:30:84:1e:99:1e:3e:ae:ac:47:34:57:9d:
aa:29:6d:eb:d2:f0:31:b2:99:70:60:8d:81:04:11:c9:c7:f7:
75:07:db:f3:37:10:54:b6:ac:d1:5f:8c:c0:5b:2b:e4:94:af:
9e:5f:89:01:d8:a5:13:1d:b9:b9:8c:3d:ff:bf:9e:74:45:bf:
4a:c3:89:43:e0:6b:5e:3b:59:63:cd:23:af:07:c7:cf:8b:26:
6b:cf:28:21:f8:35:71:41:b4:06:c4:fe:1c:2a:55:38:85:26:
21:4f:01:a8:f6:43:15:d9:68:42:5e:e7:dd:f1:71:e4:53:1b:
0e:2f:fd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:08 2025 by rpki-client