Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38362e302f32342d3234203d3e20313336373837.roa
File: 37372e3234332e38362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 8iBmuanGnD0KoZPybaNBdbpenHQwKT2Ls974Kbn1/c4=
Subject key identifier: 56:FD:F5:B1:7B:30:1E:E7:1E:64:FB:25:E9:28:2A:42:35:D8:C9:29
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2196FD32DC59B91C7CEFB105B92A99414EE62A2D
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38362e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:07 +0000
ROA not before: Fri 27 Dec 2024 11:42:07 +0000
ROA not after: Fri 26 Dec 2025 11:47:07 +0000
asID: 136787
IP address blocks: 77.243.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:96:fd:32:dc:59:b9:1c:7c:ef:b1:05:b9:2a:99:41:4e:e6:2a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:07 2024 GMT
Not After : Dec 26 11:47:07 2025 GMT
Subject: CN=56FDF5B17B301EE71E64FB25E9282A4235D8C929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:49:e6:5b:4d:d2:a7:0a:b2:b9:3f:a0:31:
9c:2f:99:7d:9a:ac:e7:7c:6c:69:78:3f:22:bf:f1:
de:40:9e:6e:49:20:e1:d5:50:9b:30:be:ab:f4:35:
bf:24:29:79:d6:05:c1:4b:fa:a1:38:bb:2c:91:07:
98:03:2b:02:14:89:74:87:cf:ab:d0:50:6f:a7:02:
e1:f4:05:6c:66:61:13:6d:33:30:95:fb:be:14:47:
a8:90:e3:ad:9f:e4:d5:e4:94:6f:0f:a0:69:25:ed:
97:c9:4b:3d:e2:31:95:4b:df:a9:b4:ab:9b:d5:8c:
1e:1e:91:c4:94:ef:c1:db:1e:26:5e:68:ad:34:b4:
a4:51:56:1e:0f:97:37:d1:ec:a6:47:b9:c9:4f:11:
5f:8d:90:30:cf:a9:90:0e:1d:16:4f:64:9f:d0:5a:
ca:65:f8:af:71:00:85:36:91:79:63:ac:90:30:80:
51:03:31:58:bc:89:b5:37:af:16:88:ef:38:74:6f:
1f:98:9c:19:18:f7:33:09:c6:37:8c:87:12:fb:65:
76:47:61:5b:2c:65:5b:09:1b:ed:e7:97:f7:fa:4b:
82:5c:4e:13:fd:3c:34:11:0f:2c:00:a6:f9:08:33:
25:38:a3:64:3e:7b:f8:40:38:2a:f7:68:33:b1:71:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FD:F5:B1:7B:30:1E:E7:1E:64:FB:25:E9:28:2A:42:35:D8:C9:29
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.86.0/24
Signature Algorithm: sha256WithRSAEncryption
80:fd:60:62:ae:93:e5:84:c0:a3:17:f6:9f:ed:17:a7:e7:59:
36:3a:36:13:8c:d9:46:15:15:7f:fe:90:d3:eb:7b:3d:6f:8e:
ae:d1:75:23:cf:5a:de:ea:5a:54:fb:13:e5:0c:18:e4:48:e4:
24:b1:ee:65:5b:a5:bd:63:0b:b8:0f:1d:eb:60:9b:88:83:9c:
d3:76:12:26:86:9f:73:92:6f:02:36:13:3c:40:1c:f2:d9:7b:
55:bf:eb:bc:8a:7e:c7:87:b3:1f:33:69:41:0d:75:e8:72:59:
65:7d:9c:3d:0e:66:c7:93:2d:02:a0:6a:e7:e8:1c:e5:0a:ce:
dd:7b:6c:de:c7:78:85:89:c2:d3:57:95:8a:a3:18:30:24:09:
02:0b:81:b2:b5:2a:63:e2:a8:35:4c:5a:cc:f5:62:8a:c5:01:
6d:a7:9e:59:4a:98:76:df:4e:40:10:61:80:96:5a:a5:d6:e9:
e5:19:49:7e:f0:89:e5:22:63:21:f4:66:2b:46:29:fd:29:02:
35:05:b7:70:a0:ca:49:6f:d9:5e:5f:2d:07:81:a8:0a:81:8b:
9f:18:9e:c3:f1:52:9c:1c:27:5d:1c:73:98:a7:1e:1e:1a:9f:
b8:c4:df:09:93:8e:20:f6:d1:b9:c4:fe:68:cf:49:35:28:50:
98:52:80:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:51:11 2025 by rpki-client