Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/1-XrsUs775LcJCCEOffucVgocwBM.roa
File: 1-XrsUs775LcJCCEOffucVgocwBM.roa (raw, json)
Hash identifier: vo6GX3rKFqGpFC4HWadWl3HjgxvJOyko8ZdueOVf9ks=
Subject key identifier: F9:7A:EC:52:CE:FB:E4:B7:09:08:21:0E:7D:FB:9C:56:0A:1C:C0:13
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0185178560B718BB307DCCC12959D11068C5
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/1-XrsUs775LcJCCEOffucVgocwBM.roa
Signing time: Thu 15 Dec 2022 20:41:35 +0000
ROA not before: Thu 15 Dec 2022 20:41:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212609
IP address blocks: 77.37.9.0/24 maxlen: 24
93.127.166.0/24 maxlen: 24
77.37.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:17:85:60:b7:18:bb:30:7d:cc:c1:29:59:d1:10:68:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Dec 15 20:41:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f97aec52cefbe4b70908210e7dfb9c560a1cc013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:db:2c:22:a3:49:20:4d:6b:00:be:ac:cf:
de:dc:27:80:28:8a:b8:6b:12:97:4d:bf:23:fa:f1:
77:43:d7:2c:f0:a8:8f:59:11:55:c9:85:3b:8e:f3:
f0:60:86:03:b3:28:1e:0c:a2:a5:51:40:0b:79:a3:
cb:f5:e1:7e:f8:ff:f8:b9:ad:d6:28:4a:0f:36:9d:
6b:db:ce:c5:c4:ae:2e:02:69:59:b0:23:d8:85:8a:
fc:e0:1b:ee:81:5b:5e:c9:08:73:32:2f:9b:5f:9b:
81:e7:0e:44:82:4a:a4:b9:fb:7c:72:e5:80:a2:47:
b3:fa:0e:ab:c8:30:7a:27:af:c1:1e:1a:ea:85:c3:
8c:be:d7:87:2a:65:6a:b4:f4:c9:24:45:46:4e:de:
eb:99:6a:b6:b6:3f:5e:3a:20:46:6d:e5:b4:96:71:
62:f9:d3:36:cf:01:00:ac:7e:fc:68:47:d5:8b:a2:
c2:22:ca:86:46:db:df:62:ef:30:e7:63:f8:24:c5:
a7:0d:1c:fb:cc:d0:c0:46:5c:12:ba:fb:2c:af:4c:
ce:e4:91:81:ef:73:ba:1c:63:9f:63:a4:e7:70:f4:
0e:8c:a2:2c:2b:dc:74:f0:76:5a:3d:83:06:4b:fa:
a4:78:d6:de:f6:db:41:f9:4a:44:c0:70:6e:01:06:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7A:EC:52:CE:FB:E4:B7:09:08:21:0E:7D:FB:9C:56:0A:1C:C0:13
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/1-XrsUs775LcJCCEOffucVgocwBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.9.0/24
77.37.38.0/24
93.127.166.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e1:56:09:c5:7c:92:15:b3:d3:9f:39:0e:52:9e:8b:a6:8e:
f5:72:7d:1e:c1:a4:6d:4d:c6:f9:0c:8e:d5:5c:d3:2c:49:03:
c6:65:83:fd:91:4a:bb:ce:c1:f8:cc:24:c9:16:bd:ee:d8:ef:
4a:43:dd:9e:f3:3d:83:7a:a1:9c:7f:ce:4f:0f:66:dd:0e:1f:
51:bd:e2:ca:fd:8a:fa:7d:56:8d:c8:5f:f9:28:62:9e:91:27:
03:7b:d0:26:a2:5f:e5:af:24:93:4b:cf:7a:fd:7f:92:fe:56:
f9:e4:8b:84:e1:8b:98:95:bf:83:1a:59:bf:40:22:23:62:43:
e4:d4:5a:ba:33:d4:4f:b0:6c:aa:98:6c:d6:31:28:ac:dd:de:
b6:cb:aa:7f:fc:f4:53:2f:dc:9c:0a:39:c2:0d:39:7e:48:8e:
ac:fd:fd:92:c2:be:18:45:15:b0:49:7f:3e:3a:d3:31:23:fc:
fa:b3:ac:b5:fe:b1:e6:a4:a2:ed:39:a4:93:84:5e:58:47:04:
ee:10:1e:9f:2b:eb:86:91:e1:74:f7:f3:18:4a:e4:05:e8:2b:
9a:b5:36:a6:d2:1d:cf:eb:00:64:ef:04:52:a8:46:f2:a8:b0:
7a:52:a1:cd:1e:c3:9f:f1:05:0f:2b:fe:c6:ae:b5:8c:af:d6:
b5:e7:43:fe
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:36:46 2025 by rpki-client