Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/1-KOSmqIh1MdU2sR7Xyi9y4P11Zw.roa
File: 1-KOSmqIh1MdU2sR7Xyi9y4P11Zw.roa (raw, json)
Hash identifier: O9B47S2f+N32Z0TsQYabw76z1/cHa8SyRIEYJ/DXxBk=
Subject key identifier: F8:A3:92:9A:A2:21:D4:C7:54:DA:C4:7B:5F:28:BD:CB:83:F5:D5:9C
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 34D04BEB
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/1-KOSmqIh1MdU2sR7Xyi9y4P11Zw.roa
Signing time: Wed 04 May 2022 20:04:10 +0000
ROA not before: Wed 04 May 2022 20:04:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31736
IP address blocks: 77.37.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886066155 (0x34d04beb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: May 4 20:04:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8a3929aa221d4c754dac47b5f28bdcb83f5d59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:44:92:4e:01:d1:8d:34:78:84:db:56:14:72:
f3:e1:74:15:fa:62:a9:d5:37:6b:29:89:a5:b6:56:
8b:ef:0b:53:17:b2:81:bd:b0:10:7c:e8:f9:65:a3:
79:c9:5e:8e:78:1d:44:31:86:a9:5c:e3:a0:62:d3:
d4:58:f3:b8:4b:a5:eb:c7:11:12:5d:c1:75:b2:b6:
e4:fc:5f:80:74:30:97:2c:2a:82:3c:10:67:7d:f2:
e2:8c:f4:0d:27:f8:61:c9:c8:55:62:c4:b6:7a:c2:
29:93:fd:3a:36:a9:69:c5:13:3a:6f:db:c6:f1:05:
11:b7:df:0a:3c:1e:25:91:6b:47:ec:03:87:48:9d:
72:fd:33:ae:94:38:10:93:74:ad:68:ba:3b:55:5d:
0c:b8:32:ff:bc:b2:6a:ab:9a:74:72:8c:47:08:fd:
d1:71:88:d8:84:b7:81:92:11:63:4f:a9:14:1b:ec:
61:62:04:1b:51:9d:aa:0b:1a:8c:92:92:74:bb:90:
dd:4d:8b:2c:90:06:eb:c0:6a:8b:e3:49:44:97:35:
5e:a5:9e:b2:89:b9:e5:83:63:f7:8b:36:1d:c5:44:
bb:48:9e:37:08:64:f4:9b:2d:29:d7:fe:c7:72:a1:
53:ab:ed:e8:b4:96:34:f3:fd:ce:08:3c:d2:5b:af:
0b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A3:92:9A:A2:21:D4:C7:54:DA:C4:7B:5F:28:BD:CB:83:F5:D5:9C
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/1-KOSmqIh1MdU2sR7Xyi9y4P11Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.8.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b4:4a:5a:00:82:ba:bb:85:ca:62:a0:d5:e1:b5:83:1a:5f:
93:38:62:de:35:f3:df:8b:0f:16:76:80:8b:54:04:b6:0e:c1:
d1:dc:5e:a3:c0:92:93:35:04:c4:50:5d:c2:45:94:3b:41:79:
e4:b7:be:35:a9:41:da:68:7e:1a:95:75:ee:d5:80:6e:03:f0:
ef:21:35:47:a9:66:11:5f:fa:b5:86:25:84:50:54:a8:64:f5:
c4:f4:7b:8a:e8:65:31:c1:e6:e9:04:88:b4:6f:b6:54:bb:6f:
b5:2d:bb:4c:36:a0:e6:23:1d:ec:bc:94:d9:f5:95:db:be:9e:
1a:d1:ef:77:74:20:a4:c6:00:ba:25:c1:04:c1:2e:2b:f5:c0:
3e:91:27:e6:8f:24:17:c6:eb:a6:04:32:1d:01:d1:5e:07:41:
a9:23:73:04:02:a3:6f:db:b1:59:11:a5:f5:b0:c3:59:bb:ad:
06:15:ce:8b:25:10:9e:9f:73:31:ea:7f:5c:c1:65:27:72:51:
2e:29:89:82:7a:b9:8a:5c:f2:0e:f2:31:79:bf:02:8a:7b:50:
f6:07:53:e4:8a:e7:c4:81:b8:12:41:31:80:61:1c:02:15:a6:
dc:8c:a9:33:ef:0c:af:29:2b:11:cb:fb:bc:ab:91:6c:6a:69:
fa:67:88:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:35:45 2025 by rpki-client