Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38302e302f32332d3233203d3e20383334.roa
File: 37372e38312e38302e302f32332d3233203d3e20383334.roa (raw, json)
Hash identifier: 8VRwgNXvFUdu3kfmO50807gw1BniQhmC877LSnpGZWg=
Subject key identifier: 3D:B9:F2:E2:4C:4C:5D:8B:D4:2F:12:F2:4A:0D:C6:37:3B:5E:32:8E
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 19350D43B23E4414EEEFA69D19747989A2FD6215
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38302e302f32332d3233203d3e20383334.roa
Signing time: Tue 25 Mar 2025 06:19:36 +0000
ROA not before: Tue 25 Mar 2025 06:14:36 +0000
ROA not after: Tue 24 Mar 2026 06:19:36 +0000
asID: 834
IP address blocks: 77.81.80.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:35:0d:43:b2:3e:44:14:ee:ef:a6:9d:19:74:79:89:a2:fd:62:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Mar 25 06:14:36 2025 GMT
Not After : Mar 24 06:19:36 2026 GMT
Subject: CN=3DB9F2E24C4C5D8BD42F12F24A0DC6373B5E328E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:52:c0:69:31:27:ce:7a:cc:a6:f9:48:d1:dc:
a5:af:82:36:26:b4:d4:32:d7:68:0a:51:f8:c3:66:
a4:f7:59:e0:e0:31:83:1d:97:b2:8b:80:39:63:47:
7c:22:34:09:e6:4a:36:24:5c:0f:17:ef:18:14:db:
e7:29:b1:34:dd:a4:d2:ac:f1:9c:e5:3b:06:00:70:
64:03:51:3a:52:30:e0:84:dd:18:36:e1:b4:93:cd:
7e:67:de:4f:aa:36:84:ed:22:67:6f:87:de:8c:3e:
4c:c1:65:68:cf:51:a2:ff:b6:b3:a3:2e:ac:82:b0:
ff:34:98:20:79:f3:c9:5b:4d:c6:2a:5e:cd:52:db:
46:ab:8a:ab:09:0f:fc:0b:e6:45:31:97:ac:7b:e6:
6a:3d:57:20:a0:94:b9:58:da:aa:f3:bb:3d:3c:92:
17:5d:d7:3e:4e:80:4c:ad:f4:8d:31:7b:c1:7d:53:
0e:26:a5:fd:92:47:77:45:23:5c:50:d9:f8:77:9a:
f2:d4:61:f4:78:17:bc:08:88:e8:b6:17:d9:ca:77:
36:65:35:fc:a3:72:5c:f8:1d:b7:e4:7f:36:49:f0:
eb:f2:dc:63:fb:92:e0:dc:1b:cf:cb:8e:4a:ef:bd:
c7:5d:4d:ab:62:78:01:5b:f7:eb:ad:31:30:27:f3:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B9:F2:E2:4C:4C:5D:8B:D4:2F:12:F2:4A:0D:C6:37:3B:5E:32:8E
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38302e302f32332d3233203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:1b:7d:20:2b:d3:8d:7b:e8:e5:3f:50:6d:7e:21:89:ee:14:
88:4d:da:be:70:ad:d4:3d:11:01:fe:ff:b2:22:7a:09:f7:83:
9e:1e:ad:01:96:3c:15:42:fe:2e:7f:bc:64:c7:eb:64:e5:16:
56:fd:d8:2b:95:ec:aa:fe:45:1c:56:b7:01:3d:79:f9:d0:ac:
e6:91:9d:01:b7:f0:5a:f3:22:72:f5:2e:a6:2c:b9:d5:49:3f:
09:3c:41:8c:f1:b3:67:c4:79:d2:83:2a:4a:d7:74:19:d7:d4:
ad:ec:22:ca:a3:f4:e8:63:2b:59:c3:09:49:da:8c:b8:ac:fe:
2f:9d:80:8e:6a:f5:a3:b9:a2:3e:be:3c:55:ca:9e:1f:45:42:
7a:9b:57:87:6a:f5:8b:19:2f:51:92:ef:f3:b2:0d:de:30:83:
18:5b:c2:29:c7:d1:62:01:6f:36:84:53:0f:44:22:a5:e2:33:
f4:f3:5a:46:a9:25:bd:2c:78:5d:61:db:bc:43:d4:7d:fd:71:
63:52:0e:22:f6:b6:1c:c4:28:80:b6:38:7d:fb:6f:13:3c:41:
09:8e:6d:c1:18:6d:ab:06:78:fd:1b:6a:4b:b5:78:f1:87:07:
97:d0:d8:53:ec:2d:0e:5c:b1:0a:4d:1f:55:36:be:54:45:09:
2b:33:08:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:05:59 2025 by rpki-client