Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/4Zs3M7JT1v7Kp-dIdFZdo1KuwRQ.roa
File: 4Zs3M7JT1v7Kp-dIdFZdo1KuwRQ.roa (raw, json)
Hash identifier: 2AICJcY8x6Vog1smQKarQxGEr+fOsAI8Jx8rsjljsUs=
Subject key identifier: E1:9B:37:33:B2:53:D6:FE:CA:A7:E7:48:74:56:5D:A3:52:AE:C1:14
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0185707056D2E4B9F729334E5D256F3C1761
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/4Zs3M7JT1v7Kp-dIdFZdo1KuwRQ.roa
Signing time: Mon 02 Jan 2023 03:04:48 +0000
ROA not before: Mon 02 Jan 2023 03:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31400
IP address blocks: 93.127.128.0/17 maxlen: 17
77.37.0.0/17 maxlen: 17
2a01:4d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:56:d2:e4:b9:f7:29:33:4e:5d:25:6f:3c:17:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 2 03:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e19b3733b253d6fecaa7e74874565da352aec114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fb:f3:15:d7:d3:75:25:96:44:06:fa:c8:b3:
3c:51:cc:1e:d0:74:71:14:bc:6a:1a:d2:9a:f0:8a:
fb:4a:f8:a4:ef:0d:14:2c:bd:3c:7f:b8:e9:24:a7:
97:48:58:7a:a4:97:82:61:54:24:b4:a8:22:80:51:
86:fe:5c:a0:26:fd:da:aa:ac:ad:1a:b0:01:47:0b:
30:4f:c1:9c:71:13:b9:53:13:4c:a4:74:64:7a:07:
35:03:12:29:4a:cf:bb:da:85:41:8f:d0:3c:fe:96:
42:14:20:dc:d0:a8:50:ac:46:78:0d:e4:f5:d3:a3:
d9:f8:c0:f2:44:d7:1a:af:74:2c:ed:7c:a4:5d:1d:
f6:f5:9e:7e:1b:dc:95:8c:62:2c:9e:4e:ac:e3:64:
34:6e:6f:3f:8e:21:8e:bb:23:47:32:eb:bc:0d:05:
9b:d0:b5:f2:8d:6b:fa:10:0b:39:4b:b3:6d:f4:8e:
d5:95:8f:dc:a9:ea:ba:33:97:8d:fb:65:8c:f4:fb:
d0:04:9d:24:d5:9c:01:fc:1a:27:1c:b3:37:6f:9d:
c6:94:18:8d:33:27:cb:e9:6d:fa:3d:f5:80:ea:6c:
dc:65:c7:98:fe:d6:fb:9e:8f:13:4d:28:5b:a2:49:
2b:f9:53:97:c1:1f:53:d0:a3:58:a3:43:84:09:4b:
86:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9B:37:33:B2:53:D6:FE:CA:A7:E7:48:74:56:5D:A3:52:AE:C1:14
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/4Zs3M7JT1v7Kp-dIdFZdo1KuwRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.0.0/17
93.127.128.0/17
IPv6:
2a01:4d0::/32
Signature Algorithm: sha256WithRSAEncryption
a4:4a:a0:54:d3:48:d1:b0:88:a8:e9:ae:a1:71:19:18:cf:c2:
93:50:dc:9a:e4:54:73:fe:3a:e2:03:de:04:06:e6:fd:ff:1f:
b8:47:c2:0d:19:1d:30:63:db:45:40:b7:dc:e3:5f:83:0e:06:
9e:ef:35:9a:49:6d:37:ef:ce:87:ff:2f:4c:69:8a:5a:5f:a8:
ed:a5:07:17:b0:47:bd:e5:7a:35:69:ca:39:64:2d:19:cd:34:
5e:ab:98:11:fa:58:60:ef:15:3b:dd:eb:02:73:38:a6:e8:fe:
83:55:09:a2:c9:38:ad:4e:46:e5:69:f8:cd:09:6f:5d:79:68:
d9:d8:38:17:99:29:00:86:c3:a9:c2:e3:fd:6a:96:b8:b1:00:
a4:5d:9d:75:37:44:e6:3b:13:e5:98:07:a3:2f:7b:0b:60:24:
2d:b0:eb:4b:4d:76:98:98:00:1d:c3:a7:c6:39:05:8e:f5:b2:
50:95:2f:db:ae:bd:3d:08:6b:82:ec:13:d9:f3:1d:60:35:61:
2c:69:1c:0b:84:ca:ce:96:83:ee:db:b7:d0:ae:a5:96:33:e4:
7d:02:ba:3c:17:30:ee:06:00:b8:b6:cb:04:6b:48:b6:00:66:
0f:e7:54:4e:38:51:f8:04:d2:7e:03:cb:20:12:20:8e:2b:b7:
ac:db:c9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:15:16 2025 by rpki-client