Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38372e302f32342d3234203d3e20313336373837.roa
File: 37372e3234332e38372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 4hziBInJCjBib0xxDwWa9F5a488ahcDwR3QVGyD8poA=
Subject key identifier: 32:02:90:47:FE:70:00:21:0C:3C:E7:8F:22:0D:F3:EC:C9:4F:86:FB
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 639A336F26D679F9F4A77337FAAC5E3867ECA6B8
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 11:47:13 +0000
ROA not before: Fri 27 Dec 2024 11:42:13 +0000
ROA not after: Fri 26 Dec 2025 11:47:13 +0000
asID: 136787
IP address blocks: 77.243.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:9a:33:6f:26:d6:79:f9:f4:a7:73:37:fa:ac:5e:38:67:ec:a6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:13 2024 GMT
Not After : Dec 26 11:47:13 2025 GMT
Subject: CN=32029047FE7000210C3CE78F220DF3ECC94F86FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b0:c8:2d:fb:c7:87:9b:09:6e:19:92:1c:ff:
59:62:5d:43:3e:7d:01:aa:ae:6e:12:22:1c:03:e5:
b5:b1:14:09:1b:04:cb:4f:3b:47:ee:4f:da:3e:55:
8e:84:37:2b:03:0c:0b:62:4b:65:aa:0a:1b:8e:d5:
0b:8c:1d:bc:d0:46:26:95:e8:62:8a:d0:1c:40:ae:
3b:d4:e1:a4:0f:7f:66:87:1b:d1:0d:dd:b3:b0:3a:
7c:9e:26:9c:e1:e4:f1:5a:86:00:d1:b8:f9:31:00:
55:95:2c:e5:54:c8:28:c7:f1:58:a7:2f:91:1c:bf:
d7:18:d1:ca:76:2d:2e:c4:2c:24:c0:00:62:99:97:
1e:6e:92:b3:64:e4:39:37:4c:6a:ac:d2:5f:4f:aa:
4c:06:49:74:14:6a:e9:fe:71:a7:67:35:c4:d1:ee:
59:41:c1:f7:93:f5:87:31:67:a6:58:9e:d0:25:88:
f2:03:68:5f:90:e8:8c:c2:cd:65:a7:83:4a:1a:d3:
ed:64:a0:c1:d5:e9:9f:8b:93:93:8b:91:57:61:bc:
f8:2e:8d:9c:04:3f:51:4c:c7:5d:49:61:2a:f4:ca:
09:9c:bf:ae:1e:7b:7b:94:cc:80:97:fd:f6:bf:a6:
45:21:b1:03:6e:24:eb:2f:5e:97:ca:6e:ab:81:4d:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:02:90:47:FE:70:00:21:0C:3C:E7:8F:22:0D:F3:EC:C9:4F:86:FB
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e3234332e38372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.243.87.0/24
Signature Algorithm: sha256WithRSAEncryption
49:cd:20:30:d0:05:d2:18:95:c8:74:d8:b5:8e:c3:9c:3d:ff:
ea:bb:7a:0e:2d:cf:60:f4:eb:21:93:5c:00:1f:d9:d6:9a:73:
98:80:de:58:17:f8:c3:4f:bd:56:53:84:c1:7d:ed:4a:69:fc:
e5:f4:dd:ce:8c:b3:67:a4:61:30:19:91:c8:f6:ee:77:d2:76:
21:c8:f0:b0:ac:02:ed:8d:f6:5c:34:1b:19:1b:c0:ad:97:49:
86:c1:55:ed:16:40:c8:40:6a:04:ee:43:c2:9e:65:a8:d0:8d:
38:38:34:66:f6:c1:7e:6e:0c:3b:12:24:35:05:28:49:34:67:
17:0d:38:6d:78:4a:3e:70:4d:f2:4c:ad:ad:1a:dc:27:83:7a:
2d:d9:47:a4:be:c0:33:40:a4:3e:68:dd:94:bd:0e:f4:08:8e:
66:78:cf:ae:f2:e8:0f:61:5e:c1:7f:bf:b1:13:72:17:06:56:
90:93:a2:b5:9b:2b:18:5f:c6:01:dc:d7:47:b0:06:9b:1e:bb:
eb:52:b0:90:e7:8c:03:f9:af:a6:46:80:32:da:ce:21:d7:c4:
67:90:36:23:d3:5c:4b:71:a3:03:b4:68:ed:e1:fc:58:3d:55:
8c:1b:d0:6d:5a:6c:f5:b6:69:06:90:9c:ce:82:ae:1c:31:04:
0d:69:42:5d
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUY5ozbybWefn0p3M3+qxeOGfsprgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMTNaFw0yNTEyMjYxMTQ3MTNaMDMxMTAvBgNV
BAMTKDMyMDI5MDQ3RkU3MDAwMjEwQzNDRTc4RjIyMERGM0VDQzk0Rjg2RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUsMgt+8eHmwluGZIc/1liXUM+
fQGqrm4SIhwD5bWxFAkbBMtPO0fuT9o+VY6ENysDDAtiS2WqChuO1QuMHbzQRiaV
6GKK0BxArjvU4aQPf2aHG9EN3bOwOnyeJpzh5PFahgDRuPkxAFWVLOVUyCjH8Vin
L5Ecv9cY0cp2LS7ELCTAAGKZlx5ukrNk5Dk3TGqs0l9PqkwGSXQUaun+cadnNcTR
7llBwfeT9YcxZ6ZYntAliPIDaF+Q6IzCzWWng0oa0+1koMHV6Z+Lk5OLkVdhvPgu
jZwEP1FMx11JYSr0ygmcv64ee3uUzICX/fa/pkUhsQNuJOsvXpfKbquBTUSlAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUMgKQR/5wACEMPOePIg3z7MlPhvswHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNzM3MmUzMjM0MzMy
ZTM4MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABN81cwDQYJKoZIhvcNAQELBQADggEBAEnNIDDQBdIYlch02LWOw5w9/+q7
eg4tz2D06yGTXAAf2daac5iA3lgX+MNPvVZThMF97Upp/OX03c6Ms2ekYTAZkcj2
7nfSdiHI8LCsAu2N9lw0GxkbwK2XSYbBVe0WQMhAagTuQ8KeZajQjTg4NGb2wX5u
DDsSJDUFKEk0ZxcNOG14Sj5wTfJMra0a3CeDei3ZR6S+wDNApD5o3ZS9DvQIjmZ4
z67y6A9hXsF/v7ETchcGVpCTorWbKxhfxgHc10ewBpseu+tSsJDnjAP5r6ZGgDLa
ziHXxGeQNiPTXEtxowO0aO3h/Fg9VYwb0G1abPW2aQaQnM6CrhwxBA1pQl0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:54:23 2025 by rpki-client