Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e3132302e302f32342d3234203d3e20313336373837.roa
File: 37372e37382e3132302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: cmPUupn2qdn5wZnB6pAfDgY2dnGmY+/XK5pSGli7C/o=
Subject key identifier: 18:2F:60:10:A5:44:05:71:EE:89:E0:E3:65:D3:29:46:10:13:16:A2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2C5FA942876AC4362D07A63148D43F55AEC74E11
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e3132302e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:20 +0000
ROA not before: Mon 27 Jan 2025 09:40:20 +0000
ROA not after: Mon 26 Jan 2026 09:45:20 +0000
asID: 136787
IP address blocks: 77.78.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:5f:a9:42:87:6a:c4:36:2d:07:a6:31:48:d4:3f:55:ae:c7:4e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:20 2025 GMT
Not After : Jan 26 09:45:20 2026 GMT
Subject: CN=182F6010A5440571EE89E0E365D32946101316A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:25:46:00:6e:2d:73:9c:e8:14:d7:9f:1b:
be:c6:2d:f2:96:92:6f:3a:4e:65:5b:d7:2b:7e:24:
7e:4b:98:1f:74:8c:d8:04:5a:6d:28:71:eb:64:a1:
3f:7d:33:42:f2:7a:2e:7c:08:c0:bd:89:b5:71:81:
47:87:83:a7:e7:86:da:f1:6e:b8:d8:66:82:eb:28:
a5:4a:6e:b1:2d:89:22:c2:32:04:46:28:6b:ef:bc:
c9:2c:5a:3f:4d:a0:e2:df:6d:54:4b:c4:ef:cb:39:
d4:3e:d3:5c:d0:e0:c8:1b:3b:c5:f9:4d:ff:8b:38:
0d:af:be:b0:36:51:ac:bc:8a:a9:34:91:59:e8:c3:
66:20:ce:c5:64:b6:34:e6:1f:37:14:c6:97:35:44:
18:13:d9:34:6c:f4:eb:ba:e7:aa:cc:7c:bb:d3:04:
2a:47:be:50:33:dc:ca:b4:4e:42:73:31:f7:71:9c:
a0:4d:af:17:00:30:08:31:e1:5c:74:d2:e4:60:86:
3d:90:5f:53:04:3f:5c:be:00:03:b8:be:f0:53:63:
2e:cb:4f:34:52:1b:2b:51:8d:35:d9:f7:60:1c:21:
c1:4d:31:9e:b3:8e:75:73:4b:f0:3a:33:47:96:f1:
2a:d0:8a:29:9c:e1:c7:93:3a:f3:08:01:de:fd:3c:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:60:10:A5:44:05:71:EE:89:E0:E3:65:D3:29:46:10:13:16:A2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e3132302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:40:a3:f7:56:90:0f:cf:05:bd:69:25:f0:92:9e:00:6d:45:
51:3e:5b:0a:52:67:71:80:b9:58:0f:32:7c:f4:af:08:59:69:
30:65:78:2d:59:98:49:72:13:02:de:5b:06:2e:42:ef:a8:d7:
8e:18:dc:40:05:72:d9:ce:81:20:15:31:07:3c:76:ec:e6:2f:
ed:94:d3:73:82:91:f0:ca:7c:87:d8:a2:92:7d:40:2a:a6:2f:
4a:f9:8d:17:ef:f1:ac:62:33:f4:81:dd:9b:a1:2f:0f:d3:ff:
1b:cb:02:ba:bb:cd:79:14:dd:74:81:d2:b4:57:47:bc:aa:23:
a5:8a:bf:21:0e:3b:19:df:93:7c:a7:89:ea:19:bf:a8:6a:e3:
8f:33:81:df:21:29:96:70:ac:82:f2:4b:a6:38:0e:6f:80:59:
b9:6e:8e:6a:28:96:1c:04:69:4f:e9:9c:a7:1b:ec:f4:7f:c7:
22:61:4d:a8:6f:0b:f7:34:bb:3f:90:1a:d4:72:21:52:b3:e2:
72:25:3f:df:1a:f0:f3:5f:6a:53:91:4a:bd:33:00:b8:18:d5:
6c:88:35:75:b7:f1:c6:69:db:1b:1d:10:38:02:84:ab:0d:0f:
41:01:a3:2b:61:d6:8d:bd:31:59:0d:3c:32:e0:19:70:f4:35:
ed:42:a2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:09:24 2025 by rpki-client