Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/8ZvyYJZ4T3mnMs0Knio1FfqF6-c.roa
File: 8ZvyYJZ4T3mnMs0Knio1FfqF6-c.roa (raw, json)
Hash identifier: 37bbZz3+IdFySlzfBGizzYU1lSpB1UlkbZX+U3jQNkE=
Subject key identifier: F1:9B:F2:60:96:78:4F:79:A7:32:CD:0A:9E:2A:35:15:FA:85:EB:E7
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01853B42D977C9E13872FB1D94F149240FCD
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/8ZvyYJZ4T3mnMs0Knio1FfqF6-c.roa
Signing time: Thu 22 Dec 2022 19:15:14 +0000
ROA not before: Thu 22 Dec 2022 19:15:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.71.0/24 maxlen: 24
77.37.72.0/22 maxlen: 24
77.37.84.0/22 maxlen: 24
77.37.48.0/22 maxlen: 24
93.127.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3b:42:d9:77:c9:e1:38:72:fb:1d:94:f1:49:24:0f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Dec 22 19:15:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f19bf26096784f79a732cd0a9e2a3515fa85ebe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:1b:3d:0b:fd:72:76:36:b3:6e:6b:c3:66:
63:81:49:ef:42:0f:bf:d6:0e:8b:71:34:f1:7a:4e:
d4:d5:50:2d:dd:ae:ac:57:aa:cf:7f:f3:1f:b3:30:
5b:db:36:0c:62:ba:c2:88:19:24:d1:48:15:c7:e6:
89:33:24:c0:c8:58:97:71:44:f9:16:8a:ac:e6:79:
a3:e9:39:af:1e:63:4d:b1:83:24:4e:8f:91:20:09:
26:47:81:fe:d9:41:3b:86:78:dc:0e:d4:03:d3:6c:
6d:4d:85:4d:90:c5:0a:e1:e7:74:86:63:35:88:9f:
61:5f:79:48:b3:e6:ae:eb:df:f0:e3:87:0f:8e:36:
0e:76:4a:f8:a5:1c:f1:14:c3:e4:d0:9d:10:21:24:
dc:b4:02:35:9e:c1:bc:b4:26:6d:83:75:31:b3:3c:
2e:0d:c5:36:5a:4c:e2:3e:57:12:27:d9:2c:f0:9f:
69:f0:7e:8d:0f:ba:68:08:ce:c6:a5:27:bb:d6:82:
0b:79:92:6d:ea:d3:cc:e8:94:af:a6:74:a2:cb:5b:
b3:76:1d:84:4c:a8:e9:0c:c1:8d:bd:70:bb:ef:3c:
d4:09:34:e8:c2:e6:f6:7e:06:af:2e:f7:b7:91:e5:
b1:e8:ba:82:94:af:a6:20:4a:01:35:1e:e7:73:6a:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9B:F2:60:96:78:4F:79:A7:32:CD:0A:9E:2A:35:15:FA:85:EB:E7
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/8ZvyYJZ4T3mnMs0Knio1FfqF6-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.48.0/22
77.37.71.0-77.37.75.255
77.37.84.0/22
93.127.187.0/24
Signature Algorithm: sha256WithRSAEncryption
83:40:c5:04:e6:03:cb:9f:58:3d:af:03:22:49:fa:c9:b1:d6:
d6:7b:cc:88:ce:d3:68:ca:15:d1:f7:40:3c:44:b7:a0:ca:9f:
f2:bb:57:e7:00:35:46:25:ea:1f:44:7c:78:0d:0a:79:24:68:
8f:e5:84:e4:48:c8:d1:5e:bc:fa:3c:a5:8b:98:a6:bd:96:f2:
ad:bf:18:cc:d3:ad:1e:57:c6:5f:2d:be:e9:77:1b:af:e1:23:
73:bd:c2:9f:a5:76:a7:84:5b:60:41:ff:a7:0e:7f:9a:04:3e:
d0:51:d8:b1:36:a4:10:d2:be:50:e2:3d:ee:9b:10:e3:17:3d:
10:3b:8c:02:ab:26:86:8e:4d:fa:95:d5:3a:8b:79:72:c6:92:
1a:86:78:ec:3a:69:45:f7:0f:35:07:da:64:3e:e0:69:8b:39:
10:1c:93:2b:03:35:2d:6a:9b:55:c5:33:4c:65:52:43:32:80:
6b:bc:54:89:ae:0b:af:82:8d:77:0e:b6:61:d0:4f:8b:41:7a:
d6:c5:fb:56:1c:ec:f2:7d:a8:1e:c9:7a:5c:0b:9b:82:02:a7:
d6:48:cb:0e:4c:1c:b2:82:0a:de:7e:bf:8e:98:e0:d9:66:b0:
30:fd:2e:0e:1f:fb:5c:11:cb:b6:c5:00:10:6c:ae:73:99:2a:
fd:e2:fa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:34:19 2025 by rpki-client