Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/2TeaOYdm7SsMyw6rn86DZ3_kuUQ.roa
File: 2TeaOYdm7SsMyw6rn86DZ3_kuUQ.roa (raw, json)
Hash identifier: 7PpECRC3gSKWnDgIsH2+6A5mGuNywAlqFAzUCPDzNEk=
Subject key identifier: D9:37:9A:39:87:66:ED:2B:0C:CB:0E:AB:9F:CE:83:67:7F:E4:B9:44
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01858CE8BF268501E7FCBBDB585FADBC3EA4
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/2TeaOYdm7SsMyw6rn86DZ3_kuUQ.roa
Signing time: Sat 07 Jan 2023 15:45:41 +0000
ROA not before: Sat 07 Jan 2023 15:45:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.71.0/24 maxlen: 24
77.37.72.0/22 maxlen: 24
93.127.223.0/24 maxlen: 24
77.37.32.0/24 maxlen: 24
77.37.44.0/24 maxlen: 24
77.37.48.0/22 maxlen: 24
93.127.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8c:e8:bf:26:85:01:e7:fc:bb:db:58:5f:ad:bc:3e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 7 15:45:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9379a398766ed2b0ccb0eab9fce83677fe4b944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:23:8a:a9:ac:21:24:e1:68:43:ae:78:9c:
78:99:44:d6:bc:61:e1:86:67:22:13:06:d1:f7:07:
b6:29:c3:f5:72:2b:a8:67:74:03:bf:cc:9d:55:46:
e5:cc:84:f7:33:bb:71:8a:52:23:1d:63:f9:07:a8:
e8:12:27:8f:26:81:32:30:d9:f2:33:6b:e3:a3:c9:
1e:28:5c:e0:f8:df:ec:9d:3c:bf:d5:bf:24:09:37:
02:18:4d:21:7b:aa:62:d9:78:d7:d5:a5:10:b6:15:
b5:ee:42:c3:ef:2a:b3:ab:57:bc:ca:3b:15:89:98:
91:61:e7:97:03:d4:2e:91:9d:0b:af:59:64:b7:9f:
94:c7:2e:af:94:af:81:61:4a:f2:81:71:3d:20:d8:
28:e9:96:7c:82:12:a0:a8:26:d7:cd:b3:1f:50:3a:
61:f1:57:43:da:10:de:0a:6c:31:ac:a1:74:b6:93:
72:7c:a2:01:d5:64:6d:d0:44:e4:31:2f:03:59:61:
16:09:c8:f3:9b:e9:4b:b9:39:78:72:45:0f:6d:b7:
9d:18:30:7d:32:44:b7:10:23:1e:9f:6d:d6:f1:2c:
d9:a1:88:5a:ed:fe:9e:be:e3:29:49:96:4d:83:0d:
c8:9c:a9:13:0d:4c:79:c9:1f:7a:42:e8:b9:3d:78:
a1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:37:9A:39:87:66:ED:2B:0C:CB:0E:AB:9F:CE:83:67:7F:E4:B9:44
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/2TeaOYdm7SsMyw6rn86DZ3_kuUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.32.0/24
77.37.44.0/24
77.37.48.0/22
77.37.71.0-77.37.75.255
93.127.187.0/24
93.127.223.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5b:d1:34:12:25:01:44:00:5d:b3:ea:e3:c1:1a:0e:75:f9:
2e:f9:84:f9:63:44:79:82:46:cf:c8:5f:85:1f:ac:cd:c5:99:
ef:43:84:55:b5:4f:13:49:5b:0b:67:6b:c6:37:d6:c3:b3:61:
9d:47:18:35:ec:ec:c9:a3:12:e4:92:22:dc:dd:2c:a7:b1:fc:
91:5b:ea:ec:a5:9a:eb:4e:47:f2:16:a8:fe:b1:0a:9a:55:ce:
d3:ba:55:a9:58:43:f6:da:92:8e:7c:b1:6c:0a:cc:28:7b:45:
2f:f8:8e:70:13:bf:e0:f2:60:16:d0:53:39:36:b8:2a:3e:64:
29:43:0b:c3:6a:ab:a8:12:e4:6d:86:de:10:ef:78:dc:2d:ca:
9c:6d:bc:66:65:16:1b:b2:41:2f:0c:12:12:55:b1:e4:27:1c:
55:5d:a1:3e:37:2a:a1:20:bd:67:5f:95:04:d8:69:52:14:67:
07:97:e7:34:2e:49:ed:ca:b3:9a:95:98:b3:65:c1:ae:7b:90:
3d:a2:5b:4e:59:8c:93:a5:89:17:26:f3:d6:a6:a1:77:40:b6:
99:bc:70:e0:74:f5:4d:2d:1b:e8:43:2d:7a:19:0c:d6:72:9b:
b4:9a:5f:52:f5:fc:45:51:5b:bf:1a:03:f7:30:6d:23:1a:9d:
35:90:0a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:36:36 2025 by rpki-client