Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/IfWxxxCOshjSQvQBy_0FraCK4sw.roa
File: IfWxxxCOshjSQvQBy_0FraCK4sw.roa (raw, json)
Hash identifier: bTxuLff2nEFbZPdy37qVSOX+dJdSAfqmmIWYz6gcwWY=
Subject key identifier: 21:F5:B1:C7:10:8E:B2:18:D2:42:F4:01:CB:FD:05:AD:A0:8A:E2:CC
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01838D338AF1DDD24AE60FFFC55BFA73D742
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/IfWxxxCOshjSQvQBy_0FraCK4sw.roa
Signing time: Fri 30 Sep 2022 07:01:48 +0000
ROA not before: Fri 30 Sep 2022 07:01:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62336
IP address blocks: 93.127.224.0/19 maxlen: 19
77.37.98.0/23 maxlen: 23
77.37.100.0/22 maxlen: 22
185.171.78.0/23 maxlen: 23
185.171.76.0/23 maxlen: 23
77.37.106.0/23 maxlen: 23
77.37.4.0/23 maxlen: 23
77.37.108.0/22 maxlen: 22
93.127.240.0/20 maxlen: 20
93.127.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8d:33:8a:f1:dd:d2:4a:e6:0f:ff:c5:5b:fa:73:d7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Sep 30 07:01:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=21f5b1c7108eb218d242f401cbfd05ada08ae2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:e9:aa:65:98:3d:b6:7b:51:ca:db:26:df:
45:6f:aa:2a:37:74:d4:e8:85:d9:16:47:9f:df:36:
60:25:40:00:89:4e:9d:f3:6b:b9:f7:c5:57:8e:a3:
2a:4f:de:e1:60:10:a6:97:82:5b:c5:e7:b3:35:92:
56:12:f1:5d:ff:ad:6b:ed:aa:f6:45:97:fc:8d:73:
93:41:11:b8:77:97:ba:7b:f1:a8:3b:b5:85:46:5e:
0a:07:cf:a5:df:d0:71:3c:58:ed:d0:c3:6d:6e:ef:
3e:53:c9:cd:ee:b2:af:b7:c4:84:3e:c3:8f:ce:1e:
9e:83:18:91:ad:8a:f3:7e:b3:6b:ad:73:e1:6f:71:
11:a0:92:d5:fd:cc:4a:94:d9:67:9c:e6:fa:ce:b2:
da:0b:f5:91:3f:46:1e:33:03:8d:85:47:a9:15:e1:
25:a6:d8:7b:18:9d:23:e6:2e:3f:e6:5f:9a:64:fa:
43:6d:bd:a2:a4:a1:b7:49:7b:6b:99:77:2f:b7:18:
6e:26:c8:9a:40:2b:fb:82:72:7c:8c:c3:82:14:21:
59:6e:88:f0:13:21:d8:ee:50:b9:23:7a:23:59:0c:
49:8d:08:e1:fa:30:51:ed:51:40:d6:64:7e:6d:f6:
b9:30:16:36:e0:9e:f8:b3:1b:8f:15:74:d9:66:20:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F5:B1:C7:10:8E:B2:18:D2:42:F4:01:CB:FD:05:AD:A0:8A:E2:CC
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/IfWxxxCOshjSQvQBy_0FraCK4sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.4.0/23
77.37.98.0-77.37.103.255
77.37.106.0-77.37.111.255
93.127.224.0/19
185.171.76.0/22
Signature Algorithm: sha256WithRSAEncryption
04:5e:1c:cf:f4:9a:b8:7c:b8:83:40:81:e3:a7:75:1e:58:8a:
0f:fa:bb:26:1b:2b:a4:ae:64:b5:c3:78:0d:a7:65:d0:53:d2:
38:f3:65:d3:8a:3e:76:f5:e1:c5:3d:bd:db:54:1d:f7:92:84:
2b:a3:06:75:e2:ed:e4:30:b8:d7:7b:9b:25:c8:84:c6:5b:31:
21:5d:21:c5:d8:26:1c:e6:62:45:91:20:55:b7:c4:b4:4b:c5:
5d:d8:1f:2b:0e:e7:cd:c2:fe:19:96:7f:b0:86:cc:98:65:b7:
97:15:ab:a3:ef:57:dd:83:b0:a5:cc:5c:76:71:33:c7:f7:cd:
af:25:1a:12:1a:82:19:30:6d:5c:63:f2:85:55:b6:24:54:91:
de:e9:4e:0a:06:c2:55:0f:6e:89:e1:53:ba:21:13:0f:28:ce:
b6:8f:f1:dc:80:35:17:7d:66:eb:3b:5b:6d:6e:2b:49:c6:42:
4c:9a:30:e6:71:d0:90:b2:d4:77:d0:4f:1b:82:15:0d:46:0a:
ba:8a:ec:aa:38:b6:bc:03:33:1f:fa:e7:d9:34:fb:14:aa:38:
0a:00:d5:c4:b3:90:8c:5b:3d:45:af:7a:02:11:a1:90:e9:b2:
c0:ae:04:2f:f0:23:e8:45:7c:66:0b:45:42:4e:a4:97:3c:61:
4a:01:2b:08
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYONM4rx3dJK5g//xVv6c9dCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjIwOTMwMDcwMTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWY1YjFjNzEwOGViMjE4ZDI0MmY0MDFjYmZkMDVhZGEwOGFlMmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYvpqmWYPbZ7UcrbJt9Fb6oqN3TU
6IXZFkef3zZgJUAAiU6d82u598VXjqMqT97hYBCml4JbxeezNZJWEvFd/61r7ar2
RZf8jXOTQRG4d5e6e/GoO7WFRl4KB8+l39BxPFjt0MNtbu8+U8nN7rKvt8SEPsOP
zh6egxiRrYrzfrNrrXPhb3ERoJLV/cxKlNlnnOb6zrLaC/WRP0YeMwONhUepFeEl
pth7GJ0j5i4/5l+aZPpDbb2ipKG3SXtrmXcvtxhuJsiaQCv7gnJ8jMOCFCFZbojw
EyHY7lC5I3ojWQxJjQjh+jBR7VFA1mR+bfa5MBY24J74sxuPFXTZZiCfewIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFCH1sccQjrIY0kL0Acv9Ba2giuLMMB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvSWZXeHh4Q09zaGpTUXZRQnlfMEZyYUNLNHN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQBTSUEMAwD
BAFNJWIDBANNJWAwDAMEAU0lagMEBE0lYAMEBV1/4AMEArmrTDANBgkqhkiG9w0B
AQsFAAOCAQEABF4cz/SauHy4g0CB46d1HliKD/q7JhsrpK5ktcN4Dadl0FPSOPNl
04o+dvXhxT2921Qd95KEK6MGdeLt5DC413ubJciExlsxIV0hxdgmHOZiRZEgVbfE
tEvFXdgfKw7nzcL+GZZ/sIbMmGW3lxWro+9X3YOwpcxcdnEzx/fNryUaEhqCGTBt
XGPyhVW2JFSR3ulOCgbCVQ9uieFTuiETDyjOto/x3IA1F31m6ztbbW4rScZCTJow
5nHQkLLUd9BPG4IVDUYKuorsqji2vAMzH/rn2TT7FKo4CgDVxLOQjFs9Ra96AhGh
kOmywK4EL/Aj6EV8ZgtFQk6klzxhSgErCA==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:44:10 2025 by rpki-client