Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/3230312e37372e3138382e302f32322d3234203d3e203333363137.roa
File: 3230312e37372e3138382e302f32322d3234203d3e203333363137.roa (raw, json)
Hash identifier: oSLNJjb9U54P86DodpVzNdTau18+Kx+XieQkHj1a240=
Subject key identifier: 8C:6C:82:7E:84:14:FC:6D:CD:52:7C:29:D5:E4:A8:D0:4B:F1:5B:17
Certificate issuer: /CN=9687E9759E87C680DEC08116FB6F44EC73175390
Certificate serial: 7E4D79D34CAE2A045928CE691890481A2CD8AE3B
Authority key identifier: 96:87:E9:75:9E:87:C6:80:DE:C0:81:16:FB:6F:44:EC:73:17:53:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9687E9759E87C680DEC08116FB6F44EC73175390.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/3230312e37372e3138382e302f32322d3234203d3e203333363137.roa
Signing time: Sat 03 May 2025 14:26:26 +0000
ROA not before: Sat 03 May 2025 14:21:26 +0000
ROA not after: Sat 02 May 2026 14:26:26 +0000
asID: 33617
IP address blocks: 201.77.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:4d:79:d3:4c:ae:2a:04:59:28:ce:69:18:90:48:1a:2c:d8:ae:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9687E9759E87C680DEC08116FB6F44EC73175390
Validity
Not Before: May 3 14:21:26 2025 GMT
Not After : May 2 14:26:26 2026 GMT
Subject: CN=8C6C827E8414FC6DCD527C29D5E4A8D04BF15B17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:22:08:8f:22:7f:8e:b0:79:f2:f7:87:bd:15:
c2:40:d0:da:c3:01:a9:24:28:64:01:0d:68:81:f2:
e3:28:04:30:0e:b4:92:2f:41:05:01:8c:65:ac:a8:
99:c6:2a:70:1c:75:82:0f:b5:cd:89:87:42:98:6a:
60:a4:71:4c:81:35:3d:0b:e4:44:99:03:32:a4:e2:
cc:ca:07:b3:52:ad:9a:51:9c:cc:0f:31:b4:d4:25:
43:80:db:ad:d0:e8:d2:41:cf:80:d4:9c:33:21:6a:
4c:2b:13:1f:02:00:e0:7f:b5:51:d2:63:d1:49:89:
6c:3c:31:8d:cd:83:b4:25:89:02:b7:6e:dc:5c:6a:
d5:82:b3:30:32:ea:5f:2b:fa:c2:b8:d4:86:bc:76:
dd:f3:84:74:11:69:24:d6:3e:5d:38:30:db:5b:7e:
fc:1b:cf:88:c6:40:b6:58:fc:4f:5e:64:75:34:77:
ef:d6:92:1e:48:09:7d:29:f3:9e:b7:3f:6f:fa:b6:
cf:06:3d:f8:6d:b5:f6:10:2a:e8:2d:07:cd:06:f5:
68:35:41:80:78:f4:8c:8e:f5:33:64:75:a9:da:06:
b7:f0:30:98:7c:70:d6:e7:4b:00:98:c2:e2:fc:c0:
e0:29:f7:cf:e9:21:6f:cd:1d:f9:9a:6c:bd:42:0e:
fe:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6C:82:7E:84:14:FC:6D:CD:52:7C:29:D5:E4:A8:D0:4B:F1:5B:17
X509v3 Authority Key Identifier:
keyid:96:87:E9:75:9E:87:C6:80:DE:C0:81:16:FB:6F:44:EC:73:17:53:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/9687E9759E87C680DEC08116FB6F44EC73175390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9687E9759E87C680DEC08116FB6F44EC73175390.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/439891ef-3113-4b77-a38a-ea422f51db05/0/3230312e37372e3138382e302f32322d3234203d3e203333363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.188.0/22
Signature Algorithm: sha256WithRSAEncryption
07:77:84:1b:a9:ff:90:c6:a2:06:d7:1d:05:e3:d8:86:14:3a:
4b:c5:77:ac:fe:33:0b:57:b1:9f:13:42:44:43:c5:97:8f:f0:
fb:f0:b4:f3:16:72:70:52:93:a8:ae:13:1c:ec:f8:62:6d:56:
27:25:a7:22:31:e6:2d:28:d8:4f:a4:26:5a:77:dd:7c:86:0f:
df:96:ed:eb:36:59:4d:50:3d:31:78:a9:c0:8c:b6:43:01:21:
c1:59:c6:98:6e:c3:7d:fd:96:0c:82:3b:94:53:7b:65:ff:86:
09:01:0f:ce:95:5d:1d:85:fc:4e:22:a2:c7:15:aa:d9:7d:e4:
62:aa:06:59:92:e3:98:bb:9a:7a:fb:4c:1f:c0:87:83:34:aa:
33:03:40:31:af:f3:a2:b8:ad:27:dc:de:91:e1:45:ad:f0:01:
a0:04:d2:d7:6c:f2:93:28:a4:0f:a2:64:5e:f1:c9:dc:68:27:
32:36:d7:89:13:03:12:c2:f8:fc:7f:95:b9:b9:82:34:f6:be:
e9:24:28:ec:7d:bf:25:af:71:78:d0:bb:64:c4:aa:e5:79:f6:
50:67:89:57:44:bd:55:a2:a8:f4:f0:eb:ff:d5:71:da:ca:5b:
5c:4f:6d:88:e8:72:09:ce:14:93:9b:73:ac:e2:2a:b2:f9:63:
6d:be:ab:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:42:17 2025 by rpki-client