Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38322e302f32342d3234203d3e203438353932.roa
File: 37372e38312e38322e302f32342d3234203d3e203438353932.roa (raw, json)
Hash identifier: g9+qPCIMbMsxLbmabycfUHp6SrIAw5buxV/5VJi8ArY=
Subject key identifier: 5D:DD:30:66:D9:04:D3:BA:3F:BE:94:B9:AB:A8:02:5B:89:47:41:F8
Certificate issuer: /CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Certificate serial: 1ECA563E70575EB23A4C07B88714E9328DF3EB26
Authority key identifier: 45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38322e302f32342d3234203d3e203438353932.roa
Signing time: Tue 25 Mar 2025 06:20:02 +0000
ROA not before: Tue 25 Mar 2025 06:15:02 +0000
ROA not after: Tue 24 Mar 2026 06:20:02 +0000
asID: 48592
IP address blocks: 77.81.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ca:56:3e:70:57:5e:b2:3a:4c:07:b8:87:14:e9:32:8d:f3:eb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e8648e445dccd0d8ee699f5140bb814e43ae1b
Validity
Not Before: Mar 25 06:15:02 2025 GMT
Not After : Mar 24 06:20:02 2026 GMT
Subject: CN=5DDD3066D904D3BA3FBE94B9ABA8025B894741F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:12:c8:83:88:4a:88:32:14:5c:a4:53:9f:
5b:fe:b3:21:0c:00:77:50:a1:fb:70:ee:15:99:76:
0f:e6:23:42:75:01:66:05:c9:83:78:53:7c:45:2c:
91:52:13:a0:2f:e2:27:da:be:9e:2f:a0:ee:35:46:
91:81:a4:38:d8:6f:1f:04:5c:1b:bc:e0:bc:e5:0f:
c1:b0:96:59:ac:07:71:eb:49:23:61:2f:c0:c2:4a:
3a:39:17:e0:87:7f:34:82:59:22:c7:d2:38:af:2a:
ae:0d:22:45:27:24:02:09:0a:b6:19:7f:b3:82:e2:
47:d5:0f:5c:94:65:56:1a:dd:b0:a2:0a:be:ef:73:
04:d4:94:27:66:cf:5d:2a:6d:fd:a0:5c:24:33:08:
6a:88:73:2e:ce:4e:01:b0:52:39:da:d8:2c:39:7f:
72:a0:e3:d3:1f:d3:80:83:df:0e:39:e9:b5:d3:8b:
bd:eb:f9:43:0c:b7:83:2b:52:0d:64:ee:f9:e4:10:
74:d0:27:72:92:cb:c2:46:f2:0f:19:db:b6:53:80:
29:22:55:31:09:02:07:82:3e:58:df:ce:6e:d8:ca:
35:95:fb:e7:5a:52:41:f8:83:03:da:6d:7d:b3:47:
dc:d4:d3:02:93:95:00:e4:11:22:c0:69:95:72:23:
18:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DD:30:66:D9:04:D3:BA:3F:BE:94:B9:AB:A8:02:5B:89:47:41:F8
X509v3 Authority Key Identifier:
keyid:45:E8:64:8E:44:5D:CC:D0:D8:EE:69:9F:51:40:BB:81:4E:43:AE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/45E8648E445DCCD0D8EE699F5140BB814E43AE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RehkjkRdzNDY7mmfUUC7gU5Drhs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/933b2fd7-31c1-451c-8288-c1aa0aa12750/0/37372e38312e38322e302f32342d3234203d3e203438353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.82.0/24
Signature Algorithm: sha256WithRSAEncryption
41:3b:69:0b:12:ba:ed:d0:75:02:c3:5f:90:9c:b9:41:b9:c0:
c2:b5:97:36:a4:fb:77:b9:67:0c:3e:85:76:58:97:b7:d3:0e:
c7:cf:d9:4c:68:13:7d:5a:a8:3f:ba:d1:c6:67:74:58:e4:f9:
bf:62:20:50:2d:09:3d:cb:d6:23:41:05:f7:84:3f:06:fc:e0:
8c:7f:83:cb:b5:77:b0:d8:0e:eb:73:67:11:4a:e3:ca:79:74:
78:20:a3:49:c6:81:16:f4:85:19:62:e3:1d:9d:95:6e:de:c5:
13:c2:6a:a8:77:3d:18:44:60:4e:82:5c:26:58:2d:a1:1f:26:
39:de:f3:76:28:42:26:4d:90:c1:09:23:6c:59:83:78:45:f2:
f8:13:d0:c2:f1:1e:bc:d5:f3:f6:a8:46:57:17:a6:9a:21:41:
e6:c4:89:78:d7:d0:a4:8e:3a:55:23:ec:dc:ff:cb:e4:a8:3a:
98:df:71:34:e5:05:06:78:9d:f5:ab:4c:ae:dc:1c:e5:65:6d:
11:36:63:b8:43:c4:12:ce:f5:10:b6:8d:a8:83:54:95:44:b0:
9e:c4:32:35:7c:1d:a2:6e:44:86:3f:dd:cb:ba:3f:6d:b3:03:
83:84:05:f7:9e:59:12:28:f1:de:95:77:c8:10:2c:31:2a:be:
a0:59:05:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:07 2025 by rpki-client