Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/JWYyDXpTpAjkogTcd_tAOn0NYLM.roa
File: JWYyDXpTpAjkogTcd_tAOn0NYLM.roa (raw, json)
Hash identifier: b27onH46DHyZ+UjgX4TBgKovoWbqeELl9xgVleRkKDs=
Subject key identifier: 25:66:32:0D:7A:53:A4:08:E4:A2:04:DC:77:FB:40:3A:7D:0D:60:B3
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01852A0BF9C37128F85DB08ED15CDC7D42B0
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/JWYyDXpTpAjkogTcd_tAOn0NYLM.roa
Signing time: Mon 19 Dec 2022 11:01:45 +0000
ROA not before: Mon 19 Dec 2022 11:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 93.127.203.0/24 maxlen: 24
77.37.95.0/24 maxlen: 24
93.127.164.0/24 maxlen: 24
93.127.167.0/24 maxlen: 24
93.127.171.0/24 maxlen: 24
77.37.40.0/24 maxlen: 24
77.37.43.0/24 maxlen: 24
93.127.179.0/24 maxlen: 24
93.127.188.0/24 maxlen: 24
93.127.190.0/24 maxlen: 24
93.127.191.0/24 maxlen: 24
77.37.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:0b:f9:c3:71:28:f8:5d:b0:8e:d1:5c:dc:7d:42:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Dec 19 11:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2566320d7a53a408e4a204dc77fb403a7d0d60b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:68:55:0a:38:99:93:32:40:72:e9:f0:e3:
48:4d:0f:89:22:e0:99:e3:92:88:5e:d4:16:b7:39:
08:72:b1:6b:59:81:8c:91:69:85:00:b1:e8:c7:bd:
ec:55:86:86:23:54:61:f0:fd:69:2f:16:6d:59:76:
4c:81:2e:b9:28:65:4a:37:ec:7d:df:c5:1b:ce:40:
7c:ef:11:6e:95:ab:3d:af:bc:c1:cc:2c:a5:d0:35:
68:5f:9e:9a:60:73:26:82:80:ee:54:6b:e8:5c:29:
77:77:ef:4a:fb:a0:9c:87:40:0a:d2:16:1f:e9:e1:
a2:3b:69:b9:af:46:1e:63:9c:a7:3c:61:8f:8a:59:
11:76:4f:15:81:eb:75:c4:6d:c8:1e:4a:82:c5:ad:
4e:fb:47:ad:7c:00:f3:7e:76:af:9c:88:5b:3a:14:
89:67:78:22:10:68:ce:ad:57:73:13:cf:3b:1f:6c:
ed:b9:e0:93:3b:73:de:36:05:36:57:2b:65:e5:aa:
33:54:62:18:8e:88:23:a7:f9:78:93:1f:6d:89:5a:
7d:4f:6e:89:62:c1:8c:03:04:15:9c:e9:db:76:de:
ed:e6:46:26:a9:95:ab:c4:09:35:29:2b:f2:f0:fe:
10:18:41:4d:2f:1b:38:18:6f:2f:e9:00:14:66:1b:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:66:32:0D:7A:53:A4:08:E4:A2:04:DC:77:FB:40:3A:7D:0D:60:B3
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/JWYyDXpTpAjkogTcd_tAOn0NYLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.40.0/24
77.37.43.0/24
77.37.60.0/24
77.37.95.0/24
93.127.164.0/24
93.127.167.0/24
93.127.171.0/24
93.127.179.0/24
93.127.188.0/24
93.127.190.0/23
93.127.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:3d:d2:09:01:57:7c:4d:c6:35:c5:42:db:3d:22:fb:0c:ed:
5e:6d:fc:ec:18:49:91:b4:cc:0a:5f:e2:91:ff:5b:61:b0:69:
a5:f6:82:a1:1a:e9:c8:f4:9e:8c:da:74:da:ff:4f:a4:ea:f1:
0e:9c:2e:a7:c4:cb:e9:c5:a4:99:28:64:35:97:64:41:7e:f5:
48:99:81:87:56:cd:17:5a:b9:59:6d:63:7f:2f:a5:25:9f:b6:
be:23:f8:45:3d:66:d3:38:c6:3c:81:18:d9:50:0a:ae:55:59:
0d:47:54:2f:a3:bb:2e:52:1b:4b:a5:45:58:30:25:28:95:47:
fd:75:6f:6f:11:cf:ac:3a:d3:9c:54:47:7a:50:82:40:02:d8:
c3:ea:20:92:e7:cb:90:97:8f:36:23:ce:2b:93:77:c0:2a:e1:
41:c4:e4:5a:2c:ac:8c:d2:88:32:23:d1:a2:c9:43:80:d6:0a:
df:9e:41:45:a4:1e:3d:e1:42:c2:84:2f:8e:f1:90:0a:e0:0f:
27:c5:db:6f:ce:dc:30:ae:1a:53:fa:c5:66:75:c8:5a:e8:ea:
0c:c6:c6:77:f2:4f:73:c5:81:75:9d:bf:1a:e5:3c:1c:6a:ef:
72:14:db:fa:7d:16:6f:29:e4:c1:43:65:b6:fd:e1:c4:85:e1:
46:50:e5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:17:38 2025 by rpki-client