Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e203631333137.roa
File: 3137312e32322e37362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: zR9iXStb3Ztyjiu0IeLQELnGqZD5v+Qvn/HUHNb/qKY=
Subject key identifier: 35:FE:08:4F:40:28:90:87:FD:50:46:A3:73:58:96:55:4F:60:EF:F2
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 40EE5645A7DB22454D346CC805B3F136C56F27B1
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e203631333137.roa
Signing time: Mon 24 Mar 2025 21:53:58 +0000
ROA not before: Mon 24 Mar 2025 21:48:58 +0000
ROA not after: Mon 23 Mar 2026 21:53:58 +0000
asID: 61317
IP address blocks: 171.22.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ee:56:45:a7:db:22:45:4d:34:6c:c8:05:b3:f1:36:c5:6f:27:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Mar 24 21:48:58 2025 GMT
Not After : Mar 23 21:53:58 2026 GMT
Subject: CN=35FE084F40289087FD5046A3735896554F60EFF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:cb:b5:a0:4c:bc:2c:dc:3d:98:22:31:fe:
dd:f4:76:79:59:a9:d2:20:41:c0:dc:d8:39:2d:7c:
42:f2:9f:bb:0c:7c:e0:ae:2c:2b:7a:a4:36:e6:8e:
b9:1f:4f:f1:f2:8d:ba:78:98:89:99:7a:69:36:4a:
a2:9b:55:5d:02:89:69:65:90:63:45:24:7d:60:11:
f8:c1:ee:82:5d:53:e0:fb:4f:7b:e0:34:fe:f9:44:
bc:43:a2:88:a1:1d:cc:e7:05:c7:85:aa:59:1c:06:
6f:b1:d4:0f:ba:cd:39:d0:46:ca:62:bd:25:fa:f9:
f6:a7:6e:50:e5:46:6f:30:a0:96:79:dc:13:09:3c:
40:f7:e9:fa:2a:bd:b1:dd:e4:07:ac:93:30:c1:e2:
d1:bc:69:ef:84:a2:27:fc:b4:9c:1d:cb:c1:7d:94:
51:8d:4e:01:36:8e:9a:1c:60:94:e2:f5:43:9c:f2:
1c:d5:ec:45:6b:4a:4b:1a:ff:81:5a:19:aa:50:45:
c1:f4:93:cf:e6:9e:a5:dd:fd:78:6a:d6:73:85:57:
4d:be:2e:9f:1f:de:bd:f1:e3:33:de:04:65:17:ce:
13:e1:48:45:14:8c:b7:da:9d:6c:e3:b4:58:5b:c8:
84:ff:28:0c:73:86:3f:0b:4e:cf:45:c6:0c:1c:03:
5f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FE:08:4F:40:28:90:87:FD:50:46:A3:73:58:96:55:4F:60:EF:F2
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3137312e32322e37362e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.76.0/24
Signature Algorithm: sha256WithRSAEncryption
76:9b:36:1e:8a:df:f1:95:27:40:17:7f:2f:1b:4c:3b:b2:e4:
99:75:57:54:c4:07:02:9b:16:3f:e1:ed:4b:8c:2e:4a:4c:17:
d9:b3:54:e2:d0:e3:38:b1:75:55:11:35:72:29:4a:7c:e9:d7:
2d:13:1a:e2:12:4f:66:84:d1:72:c4:df:d2:b7:e3:10:7a:54:
f5:bd:72:ba:a8:c5:56:5a:72:bd:85:1e:90:22:75:fd:79:f2:
43:78:fd:d2:1c:f9:05:e4:d7:cb:16:aa:e2:eb:43:8b:a9:4f:
8a:d4:19:13:c3:62:de:b7:e9:60:c7:ac:39:77:83:88:da:0d:
86:22:f1:bd:4a:1a:e2:e1:cb:50:6a:f1:5e:80:bb:24:96:fe:
33:17:ca:d1:bd:28:2e:76:30:16:b4:47:7b:32:10:d0:dd:4e:
b6:46:e1:7c:68:3e:72:8a:bb:8e:d1:e0:be:94:80:0c:04:8a:
b2:4e:e7:74:8d:d8:e5:6f:b5:22:72:78:ee:fa:ab:76:97:74:
32:4e:ab:65:37:58:ea:84:db:64:af:4b:03:e6:91:be:3a:14:
30:cf:45:d8:09:d2:ca:1e:f9:f4:59:7e:61:e5:a9:e3:45:5d:
05:58:11:ac:38:d2:1f:93:1b:29:14:94:24:ca:c6:8f:f7:41:
3e:d3:d2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:29 2025 by rpki-client on console.sobornost.net