Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/KbeV3MtO-jP18lxyaM2h5YearIQ.roa
File: KbeV3MtO-jP18lxyaM2h5YearIQ.roa (raw, json)
Hash identifier: sn6o6i6cHJcRGctnHEg+sUZ7DNoB+QrM4+8LxhB/UN4=
Subject key identifier: 29:B7:95:DC:CB:4E:FA:33:F5:F2:5C:72:68:CD:A1:E5:87:9A:AC:84
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 018570705AF194914D83D8CCBB6173C09C9E
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/KbeV3MtO-jP18lxyaM2h5YearIQ.roa
Signing time: Mon 02 Jan 2023 03:04:49 +0000
ROA not before: Mon 02 Jan 2023 03:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 77.37.36.0/24 maxlen: 24
77.37.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5a:f1:94:91:4d:83:d8:cc:bb:61:73:c0:9c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 2 03:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29b795dccb4efa33f5f25c7268cda1e5879aac84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:8f:4d:db:29:87:7a:19:5a:eb:bf:54:e5:
a8:35:7f:8b:d1:f2:a6:c7:c1:db:54:21:8f:85:43:
4e:79:a3:eb:68:62:3b:3f:cb:ab:2e:73:59:63:9c:
dc:50:97:d1:40:7d:d0:2a:04:4d:26:d7:21:b1:23:
7a:b0:ba:01:9f:1c:c9:9a:92:ec:34:69:8b:7e:07:
1e:2a:18:ff:e9:cd:bd:92:e9:62:58:c8:0e:0f:ec:
a7:65:2c:01:e6:60:4b:df:4f:42:fc:a7:cd:bd:b0:
97:c9:92:87:4c:1f:de:74:47:51:05:60:7e:66:6c:
b3:c7:44:ae:34:d4:40:bc:c7:aa:02:46:92:07:af:
eb:93:9c:f0:5c:25:67:0c:8b:79:a5:38:73:dd:ba:
62:b5:64:ab:48:21:c2:ef:34:56:34:1d:1b:6c:87:
30:12:ed:4e:17:45:9e:c3:11:a8:0a:c4:9c:26:bd:
8a:21:a5:97:27:44:7e:63:85:06:87:85:88:fb:3f:
d7:e3:2c:56:d3:e4:ab:26:93:01:31:39:61:cb:58:
97:f2:cc:27:70:e5:e9:7a:eb:f6:9b:ce:20:d4:19:
c0:fa:68:11:96:d0:88:f1:ca:69:c9:ae:18:42:91:
0e:2d:db:e7:ed:0d:b9:42:7b:32:63:ec:64:54:d3:
40:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B7:95:DC:CB:4E:FA:33:F5:F2:5C:72:68:CD:A1:E5:87:9A:AC:84
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/KbeV3MtO-jP18lxyaM2h5YearIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.36.0/24
77.37.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:47:4a:9d:c3:07:75:5c:d9:fe:8d:ba:63:a3:41:3d:aa:c1:
df:dd:2e:52:5e:fd:73:d6:1e:04:33:d1:b7:40:6c:c3:80:7f:
4d:11:75:94:95:8b:05:09:ea:df:a9:3c:ff:2d:32:13:db:c8:
c7:60:3f:3e:81:4c:cd:ff:6f:27:b5:2c:e8:b8:fc:da:9a:6d:
84:02:6c:8d:07:34:e0:f5:ad:6c:4f:08:5d:ea:50:5d:b9:25:
d7:6b:5b:ca:10:85:b5:77:08:a1:7c:ac:00:79:97:09:6a:3b:
e8:47:c1:e5:da:89:a9:3a:a9:a2:de:fb:51:8b:09:fa:56:9f:
a7:59:f8:7c:df:30:3c:4a:5e:5e:6a:12:9f:5c:f6:de:f8:a5:
36:4e:6f:53:4e:08:2f:5b:25:1e:43:30:2d:eb:c7:af:0d:5b:
66:24:3a:a4:61:d3:14:19:22:0c:29:57:39:18:c1:21:1d:f6:
87:f9:dd:c3:6b:65:0e:84:c3:6e:34:ef:26:4d:05:03:47:2c:
62:bb:e5:4d:80:ec:d2:fb:90:9e:cb:4e:53:43:57:53:16:f9:
e4:47:c7:43:aa:f4:0e:c0:1e:a1:d1:8e:7d:86:9d:00:b6:e3:
69:4a:f8:86:c9:c2:ac:f0:5d:cd:3d:e3:db:46:ae:88:20:94:
2a:15:e2:fc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwcFrxlJFNg9jMu2FzwJyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjMwMTAyMDMwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWI3OTVkY2NiNGVmYTMzZjVmMjVjNzI2OGNkYTFlNTg3OWFhYzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGuPTdsph3oZWuu/VOWoNX+L0fKm
x8HbVCGPhUNOeaPraGI7P8urLnNZY5zcUJfRQH3QKgRNJtchsSN6sLoBnxzJmpLs
NGmLfgceKhj/6c29kuliWMgOD+ynZSwB5mBL309C/KfNvbCXyZKHTB/edEdRBWB+
Zmyzx0SuNNRAvMeqAkaSB6/rk5zwXCVnDIt5pThz3bpitWSrSCHC7zRWNB0bbIcw
Eu1OF0WewxGoCsScJr2KIaWXJ0R+Y4UGh4WI+z/X4yxW0+SrJpMBMTlhy1iX8swn
cOXpeuv2m84g1BnA+mgRltCI8cppya4YQpEOLdvn7Q25QnsyY+xkVNNA/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCm3ldzLTvoz9fJccmjNoeWHmqyEMB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvS2JlVjNNdE8talAxOGx4eWFNMmg1WWVhcklRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATSUkAwQA
TSUnMA0GCSqGSIb3DQEBCwUAA4IBAQAdR0qdwwd1XNn+jbpjo0E9qsHf3S5SXv1z
1h4EM9G3QGzDgH9NEXWUlYsFCerfqTz/LTIT28jHYD8+gUzN/28ntSzouPzamm2E
AmyNBzTg9a1sTwhd6lBduSXXa1vKEIW1dwihfKwAeZcJajvoR8Hl2ompOqmi3vtR
iwn6Vp+nWfh83zA8Sl5eahKfXPbe+KU2Tm9TTggvWyUeQzAt68evDVtmJDqkYdMU
GSIMKVc5GMEhHfaH+d3Da2UOhMNuNO8mTQUDRyxiu+VNgOzS+5Cey05TQ1dTFvnk
R8dDqvQOwB6h0Y59hp0AtuNpSviGycKs8F3NPePbRq6IIJQqFeL8
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:31:20 2025 by rpki-client