Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/3ZaYjQTl9Cnbr153KJYnKGkY3gU.roa
File: 3ZaYjQTl9Cnbr153KJYnKGkY3gU.roa (raw, json)
Hash identifier: HseKjiHhsWyjgiA9JhJC9BAilRXBgjIAaBUCnlLzmNY=
Subject key identifier: DD:96:98:8D:04:E5:F4:29:DB:AF:5E:77:28:96:27:28:69:18:DE:05
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01850623E76C128AC9580E93340210695B7F
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/3ZaYjQTl9Cnbr153KJYnKGkY3gU.roa
Signing time: Mon 12 Dec 2022 11:41:34 +0000
ROA not before: Mon 12 Dec 2022 11:41:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 77.37.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:23:e7:6c:12:8a:c9:58:0e:93:34:02:10:69:5b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Dec 12 11:41:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd96988d04e5f429dbaf5e77289627286918de05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0f:05:73:80:26:70:e7:80:03:74:3a:38:6b:
5a:3b:07:bb:04:fa:43:f3:77:3f:00:14:06:3c:d0:
63:ff:65:90:2b:85:03:d1:d1:ba:2b:8a:34:7d:49:
f8:43:4d:70:9f:16:10:67:99:96:a4:f5:61:58:dc:
35:ae:f4:e4:fb:4e:d6:73:61:2c:70:3f:d9:5c:d5:
a0:4b:56:78:73:d8:04:34:07:5e:b0:2a:c9:1a:31:
a1:be:77:50:06:5a:f0:e1:e5:f6:15:de:ac:07:2f:
65:73:37:28:cf:b7:41:ae:fd:ac:37:50:cb:f3:91:
48:43:0b:6b:99:5d:23:64:bb:b6:7e:f3:20:6e:e1:
ff:c0:fd:ea:34:df:0c:d0:4f:aa:95:0e:17:53:2d:
88:0a:e0:20:ea:29:3c:11:87:8a:34:df:f6:9d:5f:
78:aa:72:4a:13:f8:64:38:db:a9:ce:21:c6:7b:3b:
d5:44:52:8d:7c:06:1a:1c:50:50:4b:08:12:35:07:
65:63:9e:76:76:d9:bc:92:5f:cf:e7:11:45:55:0e:
f7:dd:e2:3a:46:10:e2:0b:89:31:f6:f4:31:36:ac:
cc:56:1e:7f:48:2e:7a:1f:db:2e:d4:ab:bf:8b:9c:
63:e2:e9:62:9b:9f:15:b3:13:fc:4f:8c:d7:da:3c:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:96:98:8D:04:E5:F4:29:DB:AF:5E:77:28:96:27:28:69:18:DE:05
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/3ZaYjQTl9Cnbr153KJYnKGkY3gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.88.0/24
Signature Algorithm: sha256WithRSAEncryption
35:92:23:79:fe:e0:65:c8:2b:5f:5b:ed:2d:fc:87:56:b9:26:
e2:4a:63:a7:45:df:4d:90:44:ab:a0:e8:38:6e:b2:91:1a:82:
95:70:64:d3:6e:6c:88:4e:8e:6a:a2:3b:40:19:84:3c:18:ef:
0d:04:e0:45:e7:14:c3:d6:df:2e:0a:01:55:8e:5a:9a:46:b2:
1f:f8:72:25:11:f7:81:cb:09:3d:84:59:1e:aa:68:e0:95:c8:
87:4d:d1:fe:fb:eb:9f:9f:3a:f7:d3:e3:1f:9c:9f:17:24:5a:
fe:ef:15:39:a6:04:43:92:94:ed:83:03:0b:06:34:64:2b:2e:
3f:d8:1e:55:48:bc:17:65:8f:94:d0:f5:d5:cc:13:ce:2e:80:
55:40:75:e0:56:d6:c1:3e:9c:1e:3c:07:ab:e4:8d:14:4f:24:
ad:2c:69:5d:0a:9f:64:ce:26:12:11:8d:1b:6e:27:51:15:d7:
ab:20:a6:fd:8f:dd:cc:1a:a6:36:c1:f2:07:b9:cb:ef:ce:bc:
91:fc:8a:c1:60:16:d1:b2:3d:48:2f:d4:ea:25:44:f6:ab:58:
b2:d7:2e:3b:c6:4a:ba:ad:67:14:e5:91:ca:59:78:cf:0f:65:
c0:b6:cd:52:92:e5:0d:b1:9f:32:9e:40:41:2f:03:b0:92:69:
7c:bb:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:41:43 2025 by rpki-client