Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/1F6YVmlfCR3nXIcKTozvZRtzdzI.roa
File: 1F6YVmlfCR3nXIcKTozvZRtzdzI.roa (raw, json)
Hash identifier: LD1FZFSkVmfDOp4JIbKDoDEV/OP8ube7GGOLii9FH2E=
Subject key identifier: D4:5E:98:56:69:5F:09:1D:E7:5C:87:0A:4E:8C:EF:65:1B:73:77:32
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0185314816A0F47151E0A1C61AE246CB3433
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/1F6YVmlfCR3nXIcKTozvZRtzdzI.roa
Signing time: Tue 20 Dec 2022 20:44:46 +0000
ROA not before: Tue 20 Dec 2022 20:44:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.71.0/24 maxlen: 24
77.37.72.0/22 maxlen: 24
77.37.84.0/22 maxlen: 24
77.37.44.0/22 maxlen: 22
77.37.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:31:48:16:a0:f4:71:51:e0:a1:c6:1a:e2:46:cb:34:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Dec 20 20:44:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d45e9856695f091de75c870a4e8cef651b737732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fc:63:76:2b:cb:e7:98:f0:7e:32:4a:c1:4c:
67:fa:b8:fc:34:25:13:77:5e:dc:6a:71:26:cb:57:
a7:e2:b3:fe:ca:89:1e:93:fa:cb:bd:7c:2c:98:9f:
f5:7a:38:61:e9:d2:cf:a2:2d:5e:52:54:3d:c4:ed:
2b:c6:d2:08:82:d4:b9:e2:c9:69:fc:d6:b2:2e:97:
53:40:cb:e2:b5:19:0a:66:75:eb:87:00:68:12:46:
4c:ef:e9:7d:06:33:58:ad:9e:45:12:92:50:b2:20:
0a:9c:76:87:03:a9:58:0a:c3:de:98:0f:a7:02:01:
57:71:75:87:6c:12:17:0c:6c:e6:81:02:df:5a:db:
7a:f1:21:8c:2c:c4:9c:cf:43:a9:ff:0a:2d:a2:b6:
62:90:6b:e6:ab:d0:2f:1c:0d:b4:fd:10:4c:76:f1:
43:45:43:3d:84:83:82:fa:04:2c:ef:29:77:94:60:
a6:6d:c8:6a:21:48:e0:01:91:6c:aa:79:bc:4a:52:
51:da:c3:3c:e8:12:f7:b4:84:7b:5c:52:63:d8:aa:
8e:d4:53:e0:21:8b:36:a3:cd:52:07:bc:66:9f:dd:
29:75:00:00:a2:40:6a:96:d5:ab:b2:31:28:0f:99:
e0:41:f9:02:29:79:92:d1:b7:fb:29:69:4a:83:b5:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5E:98:56:69:5F:09:1D:E7:5C:87:0A:4E:8C:EF:65:1B:73:77:32
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/1F6YVmlfCR3nXIcKTozvZRtzdzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.44.0-77.37.51.255
77.37.71.0-77.37.75.255
77.37.84.0/22
Signature Algorithm: sha256WithRSAEncryption
52:5c:c8:86:e4:ce:9c:f6:03:41:c7:15:dd:34:73:86:b5:2d:
f4:68:67:3c:97:90:3c:49:6c:65:8a:41:11:f2:e8:c5:4f:8d:
39:08:19:06:c0:9e:5a:b3:f3:cd:10:3b:b2:38:ba:78:e1:29:
bc:ff:f0:a5:66:a2:47:b6:f9:00:04:9c:2c:7e:c2:01:d8:1c:
c7:23:2d:80:80:45:3d:0c:36:29:b4:f9:3f:16:d8:f1:db:3e:
ea:96:48:ab:d7:9d:69:84:27:a0:ae:e7:6e:ba:c9:34:53:57:
87:39:9f:df:84:58:84:3b:6c:7e:b8:0c:fe:3e:42:1e:fb:0a:
d7:40:bb:bc:a3:8b:c1:08:bb:d8:3e:07:ab:b5:b3:19:b7:b5:
6d:d0:97:63:96:9b:46:a3:26:df:b6:e3:60:58:2a:69:c3:90:
f8:1a:5f:c9:41:fe:64:c3:77:56:74:1f:d7:04:93:cb:68:60:
cc:36:f6:c1:e6:d8:ae:1b:2e:85:b1:c2:a5:35:e8:c1:27:54:
f2:5c:18:c8:12:c2:92:1e:4d:b3:26:71:8e:58:b3:35:52:4b:
c1:a6:af:ec:5d:7f:39:c0:5d:60:29:d1:91:2d:03:23:7c:25:
bf:d3:1c:87:68:da:52:c1:7f:2c:5a:8d:78:29:3b:c4:02:d4:
ea:3e:d0:e5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYUxSBag9HFR4KHGGuJGyzQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjIxMjIwMjA0NDQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDVlOTg1NjY5NWYwOTFkZTc1Yzg3MGE0ZThjZWY2NTFiNzM3NzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfxjdivL55jwfjJKwUxn+rj8NCUT
d17canEmy1en4rP+yokek/rLvXwsmJ/1ejhh6dLPoi1eUlQ9xO0rxtIIgtS54slp
/NayLpdTQMvitRkKZnXrhwBoEkZM7+l9BjNYrZ5FEpJQsiAKnHaHA6lYCsPemA+n
AgFXcXWHbBIXDGzmgQLfWtt68SGMLMScz0Op/wotorZikGvmq9AvHA20/RBMdvFD
RUM9hIOC+gQs7yl3lGCmbchqIUjgAZFsqnm8SlJR2sM86BL3tIR7XFJj2KqO1FPg
IYs2o81SB7xmn90pdQAAokBqltWrsjEoD5ngQfkCKXmS0bf7KWlKg7WzRQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNRemFZpXwkd51yHCk6M72Ubc3cyMB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvMUY2WVZtbGZDUjNuWEljS1RvenZaUnR6ZHpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAJNJSwD
BAJNJTAwDAMEAE0lRwMEAk0lSAMEAk0lVDANBgkqhkiG9w0BAQsFAAOCAQEAUlzI
huTOnPYDQccV3TRzhrUt9GhnPJeQPElsZYpBEfLoxU+NOQgZBsCeWrPzzRA7sji6
eOEpvP/wpWaiR7b5AAScLH7CAdgcxyMtgIBFPQw2KbT5PxbY8ds+6pZIq9edaYQn
oK7nbrrJNFNXhzmf34RYhDtsfrgM/j5CHvsK10C7vKOLwQi72D4Hq7WzGbe1bdCX
Y5abRqMm37bjYFgqacOQ+BpfyUH+ZMN3VnQf1wSTy2hgzDb2webYrhsuhbHCpTXo
wSdU8lwYyBLCkh5NsyZxjlizNVJLwaav7F1/OcBdYCnRkS0DI3wlv9Mch2jaUsF/
LFqNeCk7xALU6j7Q5Q==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:38:45 2025 by rpki-client