Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3232342e302f32342d3332203d3e203432333636.roa
File: 37372e3233372e3232342e302f32342d3332203d3e203432333636.roa (raw, json)
Hash identifier: 8B/gqDkS7fR1cymX2MvyU+6KEJ6eo6svyjE9jy6Nl+M=
Subject key identifier: 8F:63:B7:A5:77:9B:27:8E:53:CD:7D:13:21:75:98:35:13:9A:E5:0D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5344B77B769E115D190A542EE641F02834333C50
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3232342e302f32342d3332203d3e203432333636.roa
Signing time: Mon 27 Jan 2025 09:45:08 +0000
ROA not before: Mon 27 Jan 2025 09:40:08 +0000
ROA not after: Mon 26 Jan 2026 09:45:08 +0000
asID: 42366
IP address blocks: 77.237.224.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:44:b7:7b:76:9e:11:5d:19:0a:54:2e:e6:41:f0:28:34:33:3c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:08 2025 GMT
Not After : Jan 26 09:45:08 2026 GMT
Subject: CN=8F63B7A5779B278E53CD7D1321759835139AE50D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:9b:2e:c7:02:80:2e:f2:d1:e1:47:93:12:
6d:61:03:98:80:0a:62:38:89:8b:19:5f:df:73:fd:
ab:a1:6e:70:aa:b6:a9:f1:81:e6:d7:2f:1f:b2:e6:
c8:f0:8b:04:4f:f6:50:ec:54:ab:d6:06:ed:84:4e:
ba:38:e7:67:b7:9a:e6:08:64:39:ab:0a:ad:4b:2c:
17:61:41:8b:f9:69:22:84:ad:b7:ff:09:47:f8:90:
39:09:a9:6b:b5:eb:8c:eb:1e:13:7b:0c:c7:81:cc:
db:b9:c8:d5:1c:a6:7c:75:c1:60:80:0a:96:c8:e9:
ca:5a:57:30:a2:cd:07:e9:b5:99:8e:d7:76:56:c5:
a2:14:e9:88:31:06:df:89:db:78:10:65:31:6f:fb:
e1:08:66:3a:7c:02:6e:1b:ce:7e:7c:9f:7f:1a:b4:
b1:89:4c:ae:eb:ac:9b:e9:b0:3a:eb:72:87:ca:24:
a5:a9:f2:9d:fd:29:51:3d:5b:fa:fa:38:6c:ae:54:
cb:d4:78:ac:a1:01:fd:85:e9:66:f2:e0:74:75:87:
3c:73:e6:77:d5:cb:c9:04:72:c2:b3:97:5e:37:a9:
56:9e:54:5f:6b:f3:91:f6:4f:97:04:48:34:1b:b4:
62:5b:80:84:eb:9b:55:96:5a:f5:5f:8f:0a:90:d0:
a1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:63:B7:A5:77:9B:27:8E:53:CD:7D:13:21:75:98:35:13:9A:E5:0D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3232342e302f32342d3332203d3e203432333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.224.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:55:ba:a6:c2:e8:d2:1b:0d:cc:57:76:62:20:ec:98:32:c1:
5a:56:cb:3f:12:67:90:b5:2d:f7:96:8b:56:d5:42:e2:7b:5d:
df:28:55:04:f8:36:f3:6b:de:11:6c:5f:32:0e:b6:f2:69:c0:
8d:9c:af:a7:f4:17:4e:a9:dd:e2:dc:28:d2:86:28:ff:e5:53:
c2:cd:d1:54:6a:55:a2:3d:95:8c:33:bd:40:ad:4b:ac:ff:c9:
1e:00:77:d2:1d:4c:99:fa:3b:20:d6:11:97:2c:37:15:f9:11:
ea:65:92:20:76:67:be:8a:bb:7a:7d:e9:83:8a:df:b8:7f:d3:
33:f8:c3:1d:65:b5:41:f8:6c:14:88:9c:34:30:08:ee:65:9a:
ec:59:75:58:0c:eb:93:7c:fc:7c:d1:ae:ac:84:74:c1:1a:23:
6a:26:fe:e1:d9:dd:03:9e:e3:09:55:ec:26:bf:c7:1e:ff:91:
b3:ce:de:6c:ff:b3:e3:02:a3:06:6f:7f:22:d8:29:ea:35:7f:
48:8d:c4:c2:3a:af:65:8b:fd:22:0f:fc:b4:56:89:98:3f:00:
44:dd:cd:d1:1f:e8:0e:c1:4e:17:fb:69:3f:85:b1:64:9c:1a:
e2:f3:60:6d:89:2e:c7:1f:09:02:6e:ae:05:76:00:3b:23:60:
04:7c:11:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:15 2025 by rpki-client