Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e37332e302f32342d3234203d3e20313336373837.roa
File: 37372e37382e37332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Dzw9IjGo0n+xkBDApcwj2sYEX9LX21wnxdjzbyYymXs=
Subject key identifier: 75:F8:64:C8:EB:8A:56:DA:70:4E:ED:BF:9C:34:89:92:8A:DA:FB:48
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7349CF59F0C6AD659F21F86FA555C9968F32B56C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e37332e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 27 Jan 2025 09:45:26 +0000
ROA not before: Mon 27 Jan 2025 09:40:26 +0000
ROA not after: Mon 26 Jan 2026 09:45:26 +0000
asID: 136787
IP address blocks: 77.78.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:49:cf:59:f0:c6:ad:65:9f:21:f8:6f:a5:55:c9:96:8f:32:b5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 27 09:40:26 2025 GMT
Not After : Jan 26 09:45:26 2026 GMT
Subject: CN=75F864C8EB8A56DA704EEDBF9C3489928ADAFB48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:94:0d:4a:cd:7d:8c:25:c5:dd:99:d3:26:
74:89:a8:b0:7f:56:18:44:28:3e:d5:79:7c:29:77:
1d:f5:79:74:46:be:34:ae:47:bd:d3:ae:16:27:61:
c6:c5:69:c7:2f:55:b9:63:57:b7:34:40:b9:1e:dc:
aa:90:c8:e5:d8:8e:0b:30:95:7c:64:1b:9e:58:80:
53:11:48:93:c9:1b:2a:42:ed:3f:74:f8:64:d4:41:
cc:77:e0:cb:57:6d:fa:92:87:f4:a3:b1:dc:08:97:
db:5b:07:5a:14:4f:fb:17:bd:2b:cf:2d:a2:37:8d:
04:76:74:b7:52:61:1c:ea:c4:67:88:9d:b1:c8:82:
ae:97:e4:7c:c0:ab:f6:da:70:f4:d3:84:fb:a5:60:
e7:15:67:f7:45:f2:15:d7:07:66:1c:82:28:f8:23:
30:9e:14:2a:b3:04:52:88:df:f3:27:b2:bc:cd:ad:
1b:10:7e:d7:22:ba:31:8b:3e:c0:cf:90:22:da:e8:
01:1e:94:6c:34:a2:d9:be:f5:d2:b1:a8:10:ca:d2:
35:6e:7b:67:82:9a:6c:58:d6:d0:57:a8:e9:ec:4f:
fa:f5:76:8c:16:c9:d1:76:40:ba:24:50:fd:8d:b9:
d0:ed:88:e8:e1:12:ef:f5:b3:ee:d6:de:5b:23:10:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F8:64:C8:EB:8A:56:DA:70:4E:ED:BF:9C:34:89:92:8A:DA:FB:48
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e37382e37332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.78.73.0/24
Signature Algorithm: sha256WithRSAEncryption
38:6e:b9:e8:53:5d:6c:ea:93:0c:27:fc:28:86:fd:b8:d7:29:
f5:72:7e:69:c0:1c:f3:b7:8d:d0:8e:82:bd:6c:21:7f:11:80:
1f:f7:ca:07:66:c8:f3:d3:e3:a7:8b:c8:e7:99:04:62:bc:97:
2b:26:94:4d:ec:3e:0a:19:bf:0e:7e:74:53:19:82:e4:35:65:
aa:b8:0f:29:66:da:eb:de:bf:7b:26:9e:c9:98:d9:3e:6f:f4:
66:c7:09:a0:bd:24:a5:e6:7f:63:04:0b:a8:4a:0f:bf:80:d8:
b9:51:cb:7e:35:96:6f:a0:e6:78:10:64:67:2c:c1:02:13:40:
63:fa:3f:79:8b:fc:92:39:9c:a0:c1:c1:eb:b6:0e:a4:86:f7:
e6:ff:55:34:9b:ea:02:a0:06:42:66:75:42:2e:f9:84:cd:54:
7e:fe:81:23:de:55:1d:67:7b:a7:83:09:c1:4e:96:71:bb:ca:
f1:94:ff:19:ae:84:54:7c:ef:f3:aa:62:88:7d:41:81:df:2c:
80:26:39:84:72:f4:55:42:89:cb:db:6c:06:fc:aa:39:ba:00:
1a:88:c5:aa:b4:bb:64:44:02:4f:eb:39:22:e2:50:2b:cc:9c:
11:3a:6e:de:36:7e:64:46:c9:30:82:de:92:c4:90:19:1c:f6:
8e:af:19:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:08:18 2025 by rpki-client