Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa
File: 3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa (raw, json)
Hash identifier: IZUL7zEfrS59nO5eqaFvUNxkfEHC3BRjyZY2ApRcoSg=
Subject key identifier: A1:5F:DE:3C:EC:28:AB:03:5C:3B:A9:6A:D8:3C:77:9E:57:30:5A:19
Certificate issuer: /CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Certificate serial: 62700E2CC261056D068A843FB130D97E1346E52A
Authority key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa
Signing time: Tue 18 Feb 2025 19:47:35 +0000
ROA not before: Tue 18 Feb 2025 19:42:35 +0000
ROA not after: Tue 17 Feb 2026 19:47:35 +0000
asID: 213783
IP address blocks: 178.248.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:70:0e:2c:c2:61:05:6d:06:8a:84:3f:b1:30:d9:7e:13:46:e5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Validity
Not Before: Feb 18 19:42:35 2025 GMT
Not After : Feb 17 19:47:35 2026 GMT
Subject: CN=A15FDE3CEC28AB035C3BA96AD83C779E57305A19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:89:15:06:e2:0a:cf:f8:68:f6:4e:c9:e0:d3:
12:f5:df:e3:7b:92:89:1b:22:30:63:44:4e:d1:4b:
e0:5c:02:05:02:6f:a7:ec:e4:fa:6a:29:19:8b:8a:
9c:e3:07:a4:1e:20:e2:60:a7:7a:12:57:f7:cf:19:
b4:d8:31:3f:19:ac:48:83:63:44:3a:61:90:1f:7f:
73:02:8f:20:96:c8:fb:b3:62:2a:8b:9f:f4:cd:bc:
81:c6:bc:06:fe:d0:2a:d3:18:90:15:c3:b2:bc:40:
a5:3e:ca:93:ca:4e:a5:61:b0:fd:20:b5:f8:6f:37:
f6:ef:d5:8a:ec:6b:88:fb:87:0a:d2:ee:93:c9:e7:
00:32:69:e0:0c:8f:9d:c3:4f:6e:6f:70:bd:1d:da:
34:26:3a:f6:a3:32:f1:66:9f:3a:1e:49:79:f8:13:
67:74:e0:a2:6f:36:a2:1c:d9:c1:88:60:42:c8:25:
bf:01:26:75:4e:07:39:2f:c9:ca:70:d5:ce:d0:4e:
b8:2b:3e:79:f4:da:93:6d:52:aa:a5:e0:9d:1e:2d:
51:a8:ba:25:fe:4f:e6:a1:7e:dc:20:4a:c2:a4:56:
90:cd:e1:18:25:75:37:a9:9e:e1:5d:bd:d2:f4:64:
5c:9a:43:2f:a5:92:4e:9a:f7:05:2d:3c:67:88:95:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:5F:DE:3C:EC:28:AB:03:5C:3B:A9:6A:D8:3C:77:9E:57:30:5A:19
X509v3 Authority Key Identifier:
keyid:BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/3137382e3234382e37372e302f32342d3234203d3e20323133373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d2:8b:0c:a3:2a:da:65:48:c8:6e:bb:d3:49:63:7d:e7:14:
20:19:e2:47:56:b0:f1:96:3e:24:3d:f5:ff:03:60:bf:c4:bf:
54:4a:b8:f6:fc:51:31:8e:06:15:b1:41:78:d6:8b:b0:b2:78:
b9:f5:c7:5e:e5:c8:80:d9:e9:25:da:dd:f7:5e:22:a1:fc:af:
a1:71:f4:b6:43:d7:a2:f5:8c:9a:7a:18:da:3e:bb:39:7e:c6:
1a:19:a5:9b:f2:c3:65:0e:80:2f:80:32:eb:61:2e:52:98:27:
cd:ad:85:43:4a:3a:e6:fe:b1:16:59:2a:00:e3:2d:3b:c9:34:
5c:98:fb:fa:2e:3a:50:f0:6b:f9:eb:3c:1c:00:7c:f7:83:37:
db:65:e1:78:de:52:8a:93:56:5e:c9:01:5b:eb:24:f1:89:80:
02:8c:b1:59:0e:83:6d:71:d4:6d:d9:22:c8:14:82:f1:e6:46:
cf:e0:1e:19:5f:bb:df:72:1b:ab:b9:1a:56:6a:dd:c4:2e:7c:
de:c6:ed:6f:f8:e1:04:ac:42:89:8a:26:95:b0:8c:1f:df:f1:
06:bd:c5:80:50:8f:4f:3c:d7:8d:7d:0a:e9:75:e9:45:76:20:
fa:46:99:75:61:b2:16:12:71:bd:10:5e:db:3c:b0:ef:52:7b:
db:dc:da:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:57:14 2025 by rpki-client