Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37372e302f32342d3234203d3e20313336373837.roa
File: 38322e3139372e37372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: VHbo3ZOzcL91LWWGjnDdn8IrHjI0k3+dHgJQ28hrF1s=
Subject key identifier: D8:A1:3D:32:B7:5A:70:D8:30:AE:50:F2:92:61:CB:64:69:A8:77:D0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 23D44B9FEA471066BDDFC1F946101B9E7710D67C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37372e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:38 +0000
ROA not before: Fri 27 Dec 2024 19:39:38 +0000
ROA not after: Fri 26 Dec 2025 19:44:38 +0000
asID: 136787
IP address blocks: 82.197.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d4:4b:9f:ea:47:10:66:bd:df:c1:f9:46:10:1b:9e:77:10:d6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:38 2024 GMT
Not After : Dec 26 19:44:38 2025 GMT
Subject: CN=D8A13D32B75A70D830AE50F29261CB6469A877D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:19:65:c6:48:f1:4d:42:1e:0d:b9:23:f7:
e3:77:0e:e4:28:d2:03:3e:bb:9c:0f:1a:7b:e3:e7:
86:07:39:07:7f:ee:53:bb:2c:62:53:b5:92:8b:5f:
e9:89:7a:b9:9f:ac:d3:9f:ad:81:35:1c:02:e2:c9:
5d:c0:1e:c7:24:2a:ce:42:f4:a0:d1:d6:7e:27:ef:
eb:fb:97:02:78:6c:df:ec:4b:56:0d:b3:c2:92:15:
01:8f:68:d1:13:4a:a0:7e:6b:b1:88:d5:86:83:d2:
fc:f3:61:b8:79:54:93:f0:64:0e:20:e6:17:52:0c:
ad:d0:09:f7:e8:5b:c9:cd:aa:cf:25:65:c4:49:4b:
fb:45:cc:eb:33:c4:33:55:7f:f2:de:10:98:e0:57:
4f:a4:6a:df:e0:21:ce:19:3b:15:8d:89:15:b6:b2:
25:8c:c9:e9:9c:69:bb:36:5d:ff:e8:56:fe:e5:07:
50:a4:83:2c:05:cf:81:b6:a5:b4:22:ec:d1:9b:29:
5a:f3:3e:fd:27:2f:44:cf:5d:94:76:f3:b4:bd:14:
6c:55:a4:35:df:cd:b6:a3:90:08:9d:29:12:95:bb:
16:46:08:5d:26:2c:06:45:1f:fc:6e:76:c6:ec:63:
9a:c4:6a:76:eb:e7:52:6e:ac:91:8b:77:42:3e:c9:
78:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A1:3D:32:B7:5A:70:D8:30:AE:50:F2:92:61:CB:64:69:A8:77:D0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.77.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:92:cd:fd:ff:41:aa:fb:26:4b:76:2e:4d:0e:69:26:69:9c:
d6:90:42:80:33:66:04:2f:a3:cf:dd:83:2f:91:da:71:29:cf:
79:b7:98:95:df:36:27:d8:e2:ea:a4:16:07:79:75:ab:4f:f5:
bb:c9:66:08:b3:d6:23:8f:81:12:a7:35:56:4c:c6:12:b2:8f:
09:2b:92:cf:46:fe:d2:b7:02:28:d3:ea:23:dc:60:e2:7a:f3:
3e:45:3f:bf:71:12:52:40:ee:7f:f3:fe:53:22:68:f7:aa:a1:
95:86:3f:01:94:2a:a6:f9:5d:99:fc:c1:fd:a3:5b:d5:3f:7d:
49:60:48:1e:b7:bc:42:ae:75:f6:57:fc:47:70:4b:ac:1a:e0:
57:2d:81:25:dd:a1:14:8c:cc:b6:3a:7e:bc:90:57:e1:64:e6:
0a:bc:45:41:81:23:53:bc:79:d9:0d:2c:37:38:67:59:7b:ff:
72:e7:bb:49:c6:8d:f6:a7:86:ed:5e:2d:cd:b8:76:1a:33:35:
da:c3:40:25:61:77:ca:d6:91:3b:36:b5:5c:e7:76:05:7c:4a:
b4:c4:ef:41:f1:e6:07:2a:06:c0:c6:b6:dd:35:d7:ce:1c:ce:
cf:4c:76:3c:4c:b7:12:fa:31:a7:a2:f9:ca:56:b3:25:a9:8d:
a4:c7:fc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:22:22 2025 by rpki-client