Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e37332e32302e302f32322d3232203d3e20323033303631.roa
File: 37372e37332e32302e302f32322d3232203d3e20323033303631.roa (raw, json)
Hash identifier: 1GRtldcPS8Am51VJE9JZDT1Bph1tE/2XNvCe0uKwnGA=
Subject key identifier: AD:59:B7:AB:EA:B9:D1:E1:80:BC:1E:11:8B:C1:B6:C5:D3:A4:0A:27
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 0E76281D5B1B93B5E4857C805519BA68D56460C9
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e37332e32302e302f32322d3232203d3e20323033303631.roa
Signing time: Fri 27 Dec 2024 11:47:37 +0000
ROA not before: Fri 27 Dec 2024 11:42:37 +0000
ROA not after: Fri 26 Dec 2025 11:47:37 +0000
asID: 203061
IP address blocks: 77.73.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:76:28:1d:5b:1b:93:b5:e4:85:7c:80:55:19:ba:68:d5:64:60:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Dec 27 11:42:37 2024 GMT
Not After : Dec 26 11:47:37 2025 GMT
Subject: CN=AD59B7ABEAB9D1E180BC1E118BC1B6C5D3A40A27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:56:94:32:cd:10:3d:93:0f:2f:77:c3:d2:
25:ab:90:ba:db:b7:22:d7:93:0b:f1:a0:55:0f:c5:
71:4c:52:1d:33:e0:e0:2b:a4:80:42:8d:c3:18:ab:
fa:ee:39:8b:ff:a7:ad:55:61:07:c4:cc:c8:9d:30:
10:31:af:b7:03:ab:7e:ee:2e:f8:67:56:fc:98:04:
21:22:30:1a:a2:25:c0:3f:f2:47:59:df:46:14:f0:
36:78:16:2b:9d:b7:b9:4b:93:29:77:c6:87:c9:18:
13:8a:1a:f5:2a:f8:53:50:1b:7e:8d:c2:0f:17:bd:
a0:64:b2:7c:f2:d6:7a:e8:89:1b:09:75:0d:c7:dd:
c8:1e:a9:c4:14:25:03:82:4b:cb:b4:49:2d:ef:a8:
de:87:61:8e:81:28:83:5d:13:05:8d:11:0c:06:8d:
26:c2:fd:a9:66:1f:5f:92:b9:cd:a6:d7:03:76:0c:
6b:99:aa:d8:c5:b9:37:cf:7e:54:62:1d:1d:5a:61:
73:5c:5c:dd:68:3d:07:1f:86:68:f8:64:1b:15:58:
c3:aa:dc:48:b5:f5:17:50:79:ee:19:8f:b0:36:8f:
5c:b4:50:d1:94:45:20:37:c8:ef:3e:27:ff:f2:1f:
6a:69:88:75:4f:19:84:a8:14:48:40:96:39:b3:28:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:59:B7:AB:EA:B9:D1:E1:80:BC:1E:11:8B:C1:B6:C5:D3:A4:0A:27
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/37372e37332e32302e302f32322d3232203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.20.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:fe:a1:41:75:55:30:2b:2e:04:c7:2f:6f:6d:7a:86:2b:d2:
90:73:c3:ff:0a:be:0c:58:fe:c1:40:1d:ce:22:dc:98:82:f7:
4f:44:2e:4d:9f:22:2e:66:53:39:38:96:8f:3a:98:da:51:64:
94:fd:1e:85:d3:53:5a:f1:98:04:ad:9a:df:5a:7e:93:b7:1b:
f5:7d:51:c0:58:2a:21:27:6b:5d:21:3c:b1:d6:20:3c:57:5b:
08:67:9a:aa:01:73:a8:52:21:b7:b5:39:68:df:9f:0f:06:ed:
09:77:8a:63:7b:c3:14:b1:32:75:94:06:d6:ac:5f:51:c1:9a:
80:2b:a2:83:f9:79:09:f2:7a:a0:7e:cf:95:85:b7:15:08:33:
bb:67:c9:da:44:8e:eb:d6:24:99:21:ce:8f:89:68:c7:68:d4:
77:a5:d8:51:8b:b1:4c:dc:0f:d7:af:0c:1a:9c:28:51:f5:4c:
bc:16:92:c1:f6:f7:39:e3:e1:74:92:93:8f:f6:0e:ed:11:d4:
f7:fe:20:c9:07:f2:8f:61:21:25:7b:41:d3:52:f0:34:99:4c:
dd:c0:65:e5:50:0a:fd:52:8f:e3:36:9d:d4:1c:39:57:39:96:
53:99:80:01:40:d5:cf:06:99:99:b7:5b:45:59:31:61:d3:e9:
c4:0d:d4:dd
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUDnYoHVsbk7XkhXyAVRm6aNVkYMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNDEyMjcxMTQyMzdaFw0yNTEyMjYxMTQ3MzdaMDMxMTAvBgNV
BAMTKEFENTlCN0FCRUFCOUQxRTE4MEJDMUUxMThCQzFCNkM1RDNBNDBBMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHYVaUMs0QPZMPL3fD0iWrkLrb
tyLXkwvxoFUPxXFMUh0z4OArpIBCjcMYq/ruOYv/p61VYQfEzMidMBAxr7cDq37u
LvhnVvyYBCEiMBqiJcA/8kdZ30YU8DZ4Fiudt7lLkyl3xofJGBOKGvUq+FNQG36N
wg8XvaBksnzy1nroiRsJdQ3H3cgeqcQUJQOCS8u0SS3vqN6HYY6BKINdEwWNEQwG
jSbC/almH1+Suc2m1wN2DGuZqtjFuTfPflRiHR1aYXNcXN1oPQcfhmj4ZBsVWMOq
3Ei19RdQee4Zj7A2j1y0UNGURSA3yO8+J//yH2ppiHVPGYSoFEhAljmzKIs3AgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUrVm3q+q50eGAvB4Ri8G2xdOkCicwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNzM3MmUzNzMzMmUz
MjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMDMzMzAzNjMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQCTUkUMA0GCSqGSIb3DQEBCwUAA4IBAQAO/qFBdVUwKy4Exy9vbXqGK9KQc8P/
Cr4MWP7BQB3OItyYgvdPRC5NnyIuZlM5OJaPOpjaUWSU/R6F01Na8ZgErZrfWn6T
txv1fVHAWCohJ2tdITyx1iA8V1sIZ5qqAXOoUiG3tTlo358PBu0Jd4pje8MUsTJ1
lAbWrF9RwZqAK6KD+XkJ8nqgfs+VhbcVCDO7Z8naRI7r1iSZIc6PiWjHaNR3pdhR
i7FM3A/XrwwanChR9Uy8FpLB9vc54+F0kpOP9g7tEdT3/iDJB/KPYSEle0HTUvA0
mUzdwGXlUAr9Uo/jNp3UHDlXOZZTmYABQNXPBpmZt1tFWTFh0+nEDdTd
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:12 2025 by rpki-client