Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/3136382e3139362e32382e302f32322d3234203d3e20313334393930.roa
File: 3136382e3139362e32382e302f32322d3234203d3e20313334393930.roa (raw, json)
Hash identifier: b5/o0nL4anmXoG1Aaz9bY4KwEFrROY1NKXzmsL8+Ncw=
Subject key identifier: 57:72:E8:D8:C4:D7:EC:D9:76:CB:79:C9:F0:70:E9:7A:A0:9B:49:FF
Certificate issuer: /CN=9687E9759E87C680DEC08116FB6F44EC73175390
Certificate serial: 7509F56CC25451308961C65974F1604FF9F5A7E6
Authority key identifier: 96:87:E9:75:9E:87:C6:80:DE:C0:81:16:FB:6F:44:EC:73:17:53:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9687E9759E87C680DEC08116FB6F44EC73175390.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/3136382e3139362e32382e302f32322d3234203d3e20313334393930.roa
Signing time: Tue 29 Apr 2025 17:14:45 +0000
ROA not before: Tue 29 Apr 2025 17:09:45 +0000
ROA not after: Tue 28 Apr 2026 17:14:45 +0000
asID: 134990
IP address blocks: 168.196.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:09:f5:6c:c2:54:51:30:89:61:c6:59:74:f1:60:4f:f9:f5:a7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9687E9759E87C680DEC08116FB6F44EC73175390
Validity
Not Before: Apr 29 17:09:45 2025 GMT
Not After : Apr 28 17:14:45 2026 GMT
Subject: CN=5772E8D8C4D7ECD976CB79C9F070E97AA09B49FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:20:d5:05:3e:39:9c:68:26:30:a8:f1:ad:c9:
96:bb:91:74:52:ac:7d:3b:08:a4:47:17:db:21:01:
79:13:07:3d:aa:6b:06:f3:ab:4b:ab:f0:ef:07:7c:
3d:bd:63:27:6a:d4:e5:ba:55:37:b2:b4:48:89:e4:
e2:90:76:0f:64:60:c7:a2:eb:fc:f9:d1:dc:d2:e9:
6f:bd:f2:27:20:5c:56:49:8b:f3:a5:f5:f1:01:23:
34:cc:95:8c:a2:45:02:18:20:29:02:55:51:33:31:
0c:d7:19:8c:04:b0:16:d1:a7:d1:d7:02:1e:01:0f:
dd:dc:0a:c8:54:4f:c7:65:92:28:d6:18:b6:a6:da:
3b:38:90:32:3c:4a:46:da:98:fb:bb:dd:4c:16:e3:
4d:05:c9:10:ab:c3:c4:c8:40:b5:9d:9d:a5:66:8b:
06:50:b8:7c:bd:52:64:18:89:9a:0e:22:4d:04:11:
f2:29:ea:bf:35:02:1b:13:2d:84:c5:e3:41:09:65:
b3:0e:0d:f2:b1:45:d6:1f:97:99:ab:bf:c9:9b:c4:
98:db:1d:3b:b6:09:c4:bc:de:1f:56:06:a6:43:08:
d1:33:c1:e2:ef:d1:45:a8:4e:a5:df:80:06:98:2c:
d7:2a:ab:1b:8d:c2:f2:77:b1:7e:9a:7c:48:40:41:
af:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:72:E8:D8:C4:D7:EC:D9:76:CB:79:C9:F0:70:E9:7A:A0:9B:49:FF
X509v3 Authority Key Identifier:
keyid:96:87:E9:75:9E:87:C6:80:DE:C0:81:16:FB:6F:44:EC:73:17:53:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/9687E9759E87C680DEC08116FB6F44EC73175390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9687E9759E87C680DEC08116FB6F44EC73175390.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/3136382e3139362e32382e302f32322d3234203d3e20313334393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.28.0/22
Signature Algorithm: sha256WithRSAEncryption
18:85:15:74:78:a6:20:26:48:6a:a5:06:a4:4d:5a:7c:f1:62:
a2:af:05:ee:8e:3b:30:71:f3:f9:be:9d:12:ef:40:73:c4:43:
6d:14:a7:1c:fb:14:b0:b6:2c:96:4e:13:27:30:df:d4:98:98:
e9:a3:fd:dd:09:a7:b4:8c:be:14:69:5b:69:40:3a:3a:a1:aa:
4f:8b:91:c9:28:8d:4b:df:54:29:40:7d:1f:97:16:06:12:5f:
0a:e2:3b:1b:d8:60:9e:c6:71:1c:5d:4b:b6:99:29:85:5c:94:
4e:e1:9e:b2:03:91:4e:d3:5c:51:d6:1c:6b:2c:b7:4b:df:aa:
21:4e:61:f5:6a:ee:9e:fd:63:78:83:45:b5:0d:87:fc:54:4f:
ef:ae:f9:92:57:f8:7a:98:5d:b9:17:2a:41:30:62:fd:d6:d8:
5e:92:a4:5e:67:65:8c:fd:af:cb:dd:c6:05:2b:fe:09:b3:3f:
fb:2b:f5:dd:ae:c1:3c:32:d2:fd:16:64:a4:cc:c0:24:2d:b7:
b4:f2:2c:a2:35:c9:48:64:b0:08:73:e5:f3:8a:1d:c0:28:30:
12:cc:a9:ab:b4:4b:cd:53:fe:c8:ff:ec:9f:4a:7d:25:2a:52:
c9:70:90:e7:c7:28:d8:8e:99:f9:b7:65:6d:14:46:ed:c9:71:
d3:f5:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:29:01 2025 by rpki-client