Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3232352e302f32342d3234203d3e20323031333431.roa
File: 37372e3233372e3232352e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: tzMRhf01tXuCm6urMr4xw5sWu3BTYCdgvHoelRWF0R4=
Subject key identifier: BC:F6:1F:EE:90:8C:93:D3:38:5F:E2:AC:C2:55:DC:AB:A3:79:07:01
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 779AA39D209E2FBA07E7081AC7A85EC038C89F87
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3232352e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 27 Jan 2025 09:45:07 +0000
ROA not before: Mon 27 Jan 2025 09:40:07 +0000
ROA not after: Mon 26 Jan 2026 09:45:07 +0000
asID: 201341
IP address blocks: 77.237.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:9a:a3:9d:20:9e:2f:ba:07:e7:08:1a:c7:a8:5e:c0:38:c8:9f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:07 2025 GMT
Not After : Jan 26 09:45:07 2026 GMT
Subject: CN=BCF61FEE908C93D3385FE2ACC255DCABA3790701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ef:7c:29:87:44:b6:30:da:30:40:73:1e:6b:
65:89:4a:b9:b5:38:5b:1d:71:0b:36:e2:28:bc:cb:
b7:10:3d:1c:0a:fe:58:98:00:16:e5:4f:65:86:bc:
63:15:4e:76:8b:dc:14:70:90:26:cc:e2:70:3a:00:
f5:48:61:93:df:a0:75:18:31:66:02:3a:10:0d:27:
c7:6d:89:10:cb:26:85:94:ff:bd:e9:8f:57:9d:d5:
5a:16:35:02:b7:54:88:92:32:38:73:21:ba:95:be:
42:52:e7:02:50:2d:b7:d1:e6:8c:c2:e5:37:cc:c5:
f5:80:5d:bd:6e:2b:5b:54:90:c5:c0:f9:c0:a3:19:
59:78:d0:b4:87:cf:6c:f9:2b:2e:1c:cc:a2:58:96:
8d:70:26:4b:24:23:b9:cb:ca:4f:f2:dd:b1:2d:69:
61:6b:ab:41:1a:9a:c0:96:b7:5f:79:28:7d:22:0f:
d2:92:32:75:47:a6:cd:8b:24:2c:2e:05:d7:c5:85:
45:50:95:2b:10:42:26:49:0f:d5:e0:77:f3:1e:4e:
a2:7c:3b:46:39:fa:1e:fa:b8:fd:24:97:a1:15:c8:
80:ca:9d:64:93:31:c3:ea:fb:85:37:30:e4:27:8b:
47:4e:f5:38:5d:b4:f8:5f:c4:dd:52:fc:eb:9f:b3:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F6:1F:EE:90:8C:93:D3:38:5F:E2:AC:C2:55:DC:AB:A3:79:07:01
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3232352e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.225.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b4:d7:f8:28:18:95:2e:15:37:5a:54:a9:44:7e:83:fc:a3:
da:24:57:20:cf:12:81:a0:da:45:ee:35:e2:f8:da:b0:02:af:
ab:a3:a2:0b:ae:8b:0e:f1:1e:36:c4:cc:d7:2f:a3:2d:3a:ff:
ba:c3:c5:58:a0:f9:24:36:37:6e:1d:58:80:ff:f7:62:9a:69:
05:73:49:8b:7b:d7:b4:92:f7:7b:9b:dc:c7:16:dd:50:87:ac:
c6:5c:61:77:75:7d:06:07:8e:cf:c9:b4:c8:bd:b2:53:2e:e4:
11:22:fb:3d:bf:7e:be:e2:17:13:04:18:97:7e:bf:a9:92:5e:
a6:89:74:57:b9:b1:df:ff:0d:de:9e:ae:0d:79:c2:6f:ef:3a:
2a:33:4b:9c:8a:d0:45:ab:2c:22:7e:f8:71:55:30:ed:24:ba:
0c:cd:7e:e2:21:5f:9e:b8:e7:06:9c:6f:39:34:f2:f4:2e:b4:
ad:76:65:a1:77:2c:de:eb:df:34:53:06:97:69:26:59:0b:5a:
38:4b:0e:2c:ab:7e:6d:6a:26:ca:d5:2e:96:c6:f7:21:d5:68:
28:df:4e:9e:2a:b6:cb:a2:2f:8e:ef:22:cc:cb:0b:4a:4e:f9:
62:76:e6:82:f4:8f:c5:04:55:34:0e:98:9f:c8:cd:84:f4:aa:
53:ab:6d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:17:26 2025 by rpki-client