Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/IS_aEi7r2JJBJPjAaxOzC0y2ZOQ.roa
File: IS_aEi7r2JJBJPjAaxOzC0y2ZOQ.roa (raw, json)
Hash identifier: wYtJweT8ES22qzHxJ/Z5AeaKkzex/pB1XO96XryvQr8=
Subject key identifier: 21:2F:DA:12:2E:EB:D8:92:41:24:F8:C0:6B:13:B3:0B:4C:B6:64:E4
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0181D39BBFDD19A61AD0EFC75EC6CE644C4E
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/IS_aEi7r2JJBJPjAaxOzC0y2ZOQ.roa
Signing time: Wed 06 Jul 2022 13:03:28 +0000
ROA not before: Wed 06 Jul 2022 13:03:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204471
IP address blocks: 77.37.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d3:9b:bf:dd:19:a6:1a:d0:ef:c7:5e:c6:ce:64:4c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jul 6 13:03:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=212fda122eebd8924124f8c06b13b30b4cb664e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e1:60:37:de:80:70:3f:9e:75:b6:c6:24:d2:
6e:55:c9:e8:f5:d3:bd:9d:37:9e:6b:48:5c:2f:f3:
8f:2a:70:e5:58:01:77:4a:92:59:07:2f:39:9c:66:
69:a4:2f:75:32:14:c6:2c:dd:4b:86:df:a3:0d:e3:
e0:fc:9f:57:45:a6:0b:7c:20:91:12:84:4e:53:bb:
11:83:12:78:be:ef:99:0c:df:33:29:8a:9d:8e:ab:
32:95:e2:ae:02:27:c2:b4:d8:32:3a:2c:92:c8:fd:
ed:c0:93:2c:fa:fd:ac:62:31:44:9a:9a:5a:96:16:
ae:fc:41:f4:e2:07:9b:e6:69:be:5a:6d:53:b1:ba:
ee:5d:0c:f6:b3:39:68:fd:a4:7a:f5:ed:95:c6:51:
48:19:c1:22:2f:9c:b9:f8:33:d0:da:b3:fe:ce:f7:
06:20:e4:3d:a1:0a:84:5e:e9:a4:ff:c9:cf:c3:79:
e6:28:af:50:2e:5c:6c:12:64:f7:e3:2a:d4:13:88:
55:bf:bf:ca:51:18:23:15:39:6d:72:e1:fd:0f:c9:
26:73:14:65:0f:a2:0e:a7:a2:cf:ed:3e:7b:ab:71:
45:36:b8:77:19:50:51:4b:3e:79:56:b1:db:19:57:
cb:da:36:d6:65:0e:db:45:b6:65:d4:87:bb:0f:3b:
d7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:2F:DA:12:2E:EB:D8:92:41:24:F8:C0:6B:13:B3:0B:4C:B6:64:E4
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/IS_aEi7r2JJBJPjAaxOzC0y2ZOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.29.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:a4:23:62:18:ae:13:02:c7:71:44:20:35:83:f2:7d:ab:80:
30:94:e7:47:f6:65:fc:c3:82:29:31:c9:17:5a:ad:50:91:fc:
51:70:33:3d:22:dd:97:b1:b0:11:79:9e:96:01:86:b5:be:b4:
a8:8b:a3:f0:1c:36:c8:cc:2d:41:62:5b:e1:56:37:4c:77:09:
c6:15:84:52:6a:3d:38:fc:f3:e8:05:fb:06:8a:8e:77:34:1d:
40:6d:b1:2c:0c:dc:4a:6a:65:ff:ad:64:3b:e4:ba:18:3e:17:
77:02:d3:8a:35:99:b2:c7:12:11:5c:51:8a:18:73:27:ba:ef:
b4:40:ba:08:e0:b9:09:de:eb:51:0f:83:b1:d7:cb:c4:9a:42:
48:f7:68:f1:49:52:a1:16:fd:cb:d0:95:d5:05:55:71:43:f4:
35:d6:40:ea:47:b9:17:26:c5:c7:6c:39:d2:aa:f5:76:ba:52:
9e:26:f0:1e:e5:d1:d0:0b:d4:75:06:3a:dd:b0:7f:1b:05:9d:
45:f6:ed:d4:a8:96:80:46:bd:39:8d:d7:74:19:92:7e:b7:85:
87:bc:7e:9c:b2:0e:6f:71:05:25:ef:b7:18:fa:d7:3a:e7:36:
f5:f4:95:62:82:8b:30:c0:75:6c:01:a7:9b:a7:a4:e5:2b:0a:
b9:7b:a2:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYHTm7/dGaYa0O/HXsbOZExOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjIwNzA2MTMwMzI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTJmZGExMjJlZWJkODkyNDEyNGY4YzA2YjEzYjMwYjRjYjY2NGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+FgN96AcD+edbbGJNJuVcno9dO9
nTeea0hcL/OPKnDlWAF3SpJZBy85nGZppC91MhTGLN1Lht+jDePg/J9XRaYLfCCR
EoROU7sRgxJ4vu+ZDN8zKYqdjqsyleKuAifCtNgyOiySyP3twJMs+v2sYjFEmppa
lhau/EH04geb5mm+Wm1TsbruXQz2szlo/aR69e2VxlFIGcEiL5y5+DPQ2rP+zvcG
IOQ9oQqEXumk/8nPw3nmKK9QLlxsEmT34yrUE4hVv7/KURgjFTltcuH9D8kmcxRl
D6IOp6LP7T57q3FFNrh3GVBRSz55VrHbGVfL2jbWZQ7bRbZl1Ie7DzvXvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCEv2hIu69iSQST4wGsTswtMtmTkMB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvSVNfYUVpN3IySkpCSlBqQWF4T3pDMHkyWk9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATSUdMA0G
CSqGSIb3DQEBCwUAA4IBAQB/pCNiGK4TAsdxRCA1g/J9q4AwlOdH9mX8w4IpMckX
Wq1QkfxRcDM9It2XsbAReZ6WAYa1vrSoi6PwHDbIzC1BYlvhVjdMdwnGFYRSaj04
/PPoBfsGio53NB1AbbEsDNxKamX/rWQ75LoYPhd3AtOKNZmyxxIRXFGKGHMnuu+0
QLoI4LkJ3utRD4Ox18vEmkJI92jxSVKhFv3L0JXVBVVxQ/Q11kDqR7kXJsXHbDnS
qvV2ulKeJvAe5dHQC9R1BjrdsH8bBZ1F9u3UqJaARr05jdd0GZJ+t4WHvH6csg5v
cQUl77cY+tc65zb19JVigoswwHVsAaebp6TlKwq5e6Ji
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:36:37 2025 by rpki-client