Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Cd_Rpz46VYuc_s9vSKNAaoeZgEk.roa
File: Cd_Rpz46VYuc_s9vSKNAaoeZgEk.roa (raw, json)
Hash identifier: zUddPdd/KN06bPTvsnkUnS94/M2LabP8z3j1rF0Q3Bw=
Subject key identifier: 09:DF:D1:A7:3E:3A:55:8B:9C:FE:CF:6F:48:A3:40:6A:87:99:80:49
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0183DA10CB3DB2F5BD05013F91A7CD3D2A4F
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Cd_Rpz46VYuc_s9vSKNAaoeZgEk.roa
Signing time: Sat 15 Oct 2022 05:14:36 +0000
ROA not before: Sat 15 Oct 2022 05:14:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 93.127.160.0/22 maxlen: 22
77.37.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:da:10:cb:3d:b2:f5:bd:05:01:3f:91:a7:cd:3d:2a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Oct 15 05:14:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09dfd1a73e3a558b9cfecf6f48a3406a87998049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b6:b1:26:62:09:31:9a:45:d8:67:f3:18:ca:
47:87:f2:72:7a:86:22:01:c8:cc:e8:f5:9f:17:6c:
f7:7d:0f:0c:f4:5a:64:e0:41:b9:b0:2b:39:2c:9e:
96:15:a2:79:db:a4:13:f7:ba:c4:78:10:6d:ac:d4:
52:07:29:25:a8:ff:be:ce:30:c4:6c:ec:7e:fe:dc:
c1:7c:57:1d:a3:65:65:e0:be:68:7f:08:d9:d8:e5:
91:13:f9:51:c2:8c:53:62:2c:c4:e7:70:21:30:d9:
e8:e1:c8:4d:51:f7:0f:f6:c9:e6:e8:8d:25:78:12:
0b:61:1c:0d:e3:6d:bf:7f:1c:b9:94:08:5d:04:ff:
14:86:01:64:b3:d5:64:c5:43:bb:d2:85:e7:aa:19:
1f:dd:35:d4:75:be:47:74:59:6e:06:e6:a3:1c:bf:
5f:be:b5:23:46:2b:22:25:cc:1e:87:3f:2b:05:16:
21:8e:a2:8c:f2:35:a8:4f:47:4c:b0:30:d2:e6:ae:
52:4c:40:08:50:94:5f:08:6d:f1:ef:93:e0:b1:67:
2d:d9:c0:db:d8:8d:8a:fe:31:79:af:64:5a:ed:60:
51:34:b0:10:73:cd:9f:2b:af:c4:0c:39:4e:f8:cb:
37:4f:fc:7b:10:dc:8d:78:f9:2a:68:5e:22:59:ff:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DF:D1:A7:3E:3A:55:8B:9C:FE:CF:6F:48:A3:40:6A:87:99:80:49
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Cd_Rpz46VYuc_s9vSKNAaoeZgEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.32.0/22
93.127.160.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:96:5d:cb:47:06:10:0d:00:de:23:b7:40:63:1f:38:b1:7d:
2a:00:8f:72:85:c5:63:30:75:74:f1:82:6d:15:89:21:2e:1a:
59:ee:1b:de:83:aa:fc:49:0a:86:8b:30:bb:8c:9e:41:50:7f:
7a:9a:25:d5:b7:2f:d6:a7:b9:4d:45:07:1b:b3:78:a8:e1:8a:
fa:12:1c:6e:2e:77:d1:b2:9a:0d:ee:61:c6:56:67:46:c7:6a:
85:28:46:c5:d2:79:4f:39:0f:e0:38:8d:27:ef:16:af:65:37:
91:52:34:f9:37:f8:00:14:e4:e0:56:f9:db:43:07:5d:33:d2:
85:67:8b:37:30:6e:df:55:e4:e0:c0:03:b9:04:cd:ae:02:ed:
e1:78:9e:8c:cc:ba:d6:17:62:3a:17:39:f1:41:f7:19:48:22:
38:84:af:49:c5:b0:ee:d5:59:9b:33:e7:b1:ef:23:b8:78:fb:
3f:0a:88:69:d3:6c:ec:64:c1:7a:0c:74:c7:98:a9:9a:75:73:
29:72:06:a2:9a:95:7c:bd:62:0c:2e:f8:8a:ea:09:cb:d3:b8:
2c:c9:bd:a9:b2:36:d1:22:43:77:80:88:db:6f:3d:44:39:27:
54:8c:04:e6:36:b2:45:86:dd:57:20:c5:8a:15:86:ed:33:09:
b6:da:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:38:56 2025 by rpki-client