Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/EvkHwcTNWT5TBjBDZqRW_ujbYLM.roa
File: EvkHwcTNWT5TBjBDZqRW_ujbYLM.roa (raw, json)
Hash identifier: fTbrOsE3ILIkb0knyGSrH/zuNq5Xsiww01qY60JW9HI=
Subject key identifier: 12:F9:07:C1:C4:CD:59:3E:53:06:30:43:66:A4:56:FE:E8:DB:60:B3
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01856CEFEDDE1FE36D1AF17AD94D79739465
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/EvkHwcTNWT5TBjBDZqRW_ujbYLM.roa
Signing time: Sun 01 Jan 2023 10:45:41 +0000
ROA not before: Sun 01 Jan 2023 10:45:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 983
IP address blocks: 77.37.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:ed:de:1f:e3:6d:1a:f1:7a:d9:4d:79:73:94:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 1 10:45:41 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12f907c1c4cd593e5306304366a456fee8db60b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:53:fc:67:90:ea:6a:2d:af:01:de:3a:25:dd:
0a:e0:02:a8:82:55:b2:66:52:f8:b7:81:bc:40:ed:
79:7b:62:ac:d4:04:c4:87:5e:b9:bd:05:f0:75:b5:
32:bf:16:7b:3f:15:fd:df:83:fc:c7:bf:87:67:72:
9b:77:37:f2:ad:8a:1d:db:86:69:27:b2:44:de:9b:
9e:c4:27:f6:01:67:90:76:86:70:fd:97:e0:63:63:
90:f7:8b:ba:e2:35:2f:a5:46:54:70:37:57:7f:f9:
ec:dc:7c:ed:b5:2a:ad:94:a8:e9:fc:c5:a9:fa:11:
27:cc:a0:e4:25:8a:4d:2a:6f:c3:8c:ab:76:83:93:
ac:7b:12:a4:dc:1b:5c:ca:c8:dd:9e:1b:f8:4f:2b:
2a:1c:2c:55:9f:59:e1:29:a8:38:ef:12:58:cf:c3:
20:84:54:83:26:af:1c:2e:05:41:50:28:67:00:ae:
8e:1a:fa:70:fa:df:5a:1d:15:52:fb:93:f5:cb:88:
6a:8b:bd:9c:aa:bd:fa:01:1b:1c:32:9f:61:cf:28:
97:85:a5:71:fc:04:47:04:4a:40:76:ec:17:ea:6d:
39:36:c6:95:05:64:b1:40:22:d7:19:5d:26:9f:19:
22:4f:d9:65:f4:5a:fc:33:de:e6:16:61:6e:78:2f:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F9:07:C1:C4:CD:59:3E:53:06:30:43:66:A4:56:FE:E8:DB:60:B3
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/EvkHwcTNWT5TBjBDZqRW_ujbYLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.77.0/24
Signature Algorithm: sha256WithRSAEncryption
66:bd:a9:78:9f:cb:43:98:7f:75:88:50:2d:e4:96:7c:b7:dd:
ac:02:3d:79:72:cf:3c:23:d2:ac:74:c9:62:a3:80:3f:fa:d6:
91:f0:5e:9a:2f:68:c8:c9:2d:2f:ae:f4:5d:b6:0a:f5:3a:45:
02:58:d1:03:73:f4:8a:f5:b3:2c:60:c1:b5:ec:46:3b:83:00:
33:c0:bd:8b:68:71:36:8c:42:d1:61:39:56:57:6b:f6:4a:08:
29:7b:44:47:83:a2:5c:1b:ea:7c:dd:cb:ea:89:33:0b:71:9a:
ff:4d:47:66:d6:55:c1:5a:60:cc:f2:dd:e2:b3:7c:64:f1:41:
11:ed:d7:2a:d2:9f:a6:18:1a:0b:f3:67:a7:f3:6f:cd:52:3f:
00:10:d4:b1:9d:64:96:4a:92:36:9c:11:a7:81:f1:4a:c5:c1:
63:08:79:c2:46:2a:7d:e5:a0:2a:c2:dc:c8:18:fc:5a:0e:d0:
08:1d:ba:ff:5d:65:ce:75:43:08:82:f3:2a:31:eb:1d:d1:1d:
1b:57:7d:03:36:11:a8:c1:e6:d8:d0:f0:7e:ce:a4:8d:b1:40:
08:6f:d6:b6:7d:a1:fa:63:ba:0b:35:b2:d8:8c:ec:04:6e:fe:
42:bd:b8:39:86:f0:c6:5a:ef:a5:4a:95:0d:93:41:c5:b2:4c:
14:f2:b1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:34:41 2025 by rpki-client