Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/ABjgxP6opJIGNSGblkhgHoB50bM.roa
File: ABjgxP6opJIGNSGblkhgHoB50bM.roa (raw, json)
Hash identifier: TTM0Zg0xoUgw4y8Z7WEH4QtroxnRUaqLEBfPzIy2mRk=
Subject key identifier: 00:18:E0:C4:FE:A8:A4:92:06:35:21:9B:96:48:60:1E:80:79:D1:B3
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01857070555B4FCAE8500A160F52E62182C4
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/ABjgxP6opJIGNSGblkhgHoB50bM.roa
Signing time: Mon 02 Jan 2023 03:04:48 +0000
ROA not before: Mon 02 Jan 2023 03:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 983
IP address blocks: 77.37.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:55:5b:4f:ca:e8:50:0a:16:0f:52:e6:21:82:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 2 03:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0018e0c4fea8a4920635219b9648601e8079d1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:6d:0c:46:9a:c2:ae:97:4f:61:f6:28:e8:
b5:95:12:64:a9:8a:64:da:b8:5c:7c:66:69:39:a7:
98:20:08:1d:36:c1:9e:4f:b9:7c:ce:85:ea:4f:87:
88:0c:43:a1:7a:c0:cf:fd:9f:7c:ee:bb:67:1e:e7:
08:3b:97:da:e0:da:a8:d4:79:5b:61:28:b3:5c:ba:
48:a6:57:27:c8:66:44:65:b7:99:ea:d2:23:4d:de:
ee:35:ce:74:38:33:de:46:8e:64:6e:db:f7:e6:ed:
74:70:77:2f:70:62:fe:44:84:81:a7:c5:60:fb:53:
9a:17:12:c7:34:ba:f1:27:e2:46:94:b1:53:a7:51:
59:2b:e7:3b:7e:48:42:d6:e2:e4:36:bc:b1:7d:25:
ac:e2:b9:d4:f2:88:92:a7:01:b5:80:bc:a2:9f:ae:
45:d0:9b:2d:a8:fe:92:89:ee:53:f0:44:0a:03:2b:
c4:de:b0:54:d6:18:d2:cd:1e:c3:0c:4f:17:4b:65:
f5:57:47:cf:c1:44:7f:32:f5:73:2f:19:df:ba:6b:
25:eb:d0:92:22:f2:d0:db:ba:f9:5c:9f:ce:78:28:
47:f5:ec:84:6a:43:47:b2:5a:06:35:5b:8a:31:07:
b5:89:f2:dd:68:1c:44:dc:0e:23:95:2e:b3:f3:fe:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:18:E0:C4:FE:A8:A4:92:06:35:21:9B:96:48:60:1E:80:79:D1:B3
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/ABjgxP6opJIGNSGblkhgHoB50bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.77.0/24
Signature Algorithm: sha256WithRSAEncryption
74:42:7e:ee:99:e2:2f:c2:44:5e:f5:c3:23:ea:0f:27:b0:1a:
a6:be:74:b2:02:22:10:23:36:25:45:14:c7:56:37:f4:2a:ad:
fe:fa:33:9d:75:a5:ee:02:a5:37:78:83:7c:67:34:8e:1a:e8:
bf:37:bc:d6:b6:f0:aa:ec:ce:4b:ab:f7:f4:67:37:c9:09:6c:
71:8b:13:c2:10:5d:83:6b:4d:1d:57:0d:8d:8f:9b:65:d4:1c:
65:44:75:72:e7:72:0f:f0:cd:a1:48:5d:02:19:dc:a7:66:b6:
61:ae:79:2e:99:e2:8d:7d:0e:d2:c2:44:24:f4:1d:c9:81:02:
00:1a:b3:d0:18:b3:60:45:f5:6f:16:69:3f:2c:71:5a:49:2e:
34:76:21:7f:60:76:1f:1d:d8:61:1d:e6:6b:ac:97:cc:87:87:
92:93:75:37:79:5b:cd:fd:50:b1:5d:65:d4:67:fd:b1:77:9a:
7e:dd:58:fb:fe:a0:dc:c2:8c:c5:8a:28:29:e6:03:ee:b9:5e:
5b:ce:4a:65:d8:22:2c:8a:dc:8c:cb:9e:9a:bc:3f:b0:36:76:
31:99:b6:07:df:f1:51:7c:18:48:57:ac:99:80:cc:34:57:cc:
4a:ef:2c:2a:0c:4f:01:73:7e:c6:6c:da:71:6b:55:49:20:24:
38:dc:50:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:34:26 2025 by rpki-client