Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/M-cf0m1J4a-pYcPr_ptTw2FnrH4.roa
File: M-cf0m1J4a-pYcPr_ptTw2FnrH4.roa (raw, json)
Hash identifier: 63eI9QC0hNr/ViEqD3VBkmNhGal8kk1DFawIDYLKaYY=
Subject key identifier: 33:E7:1F:D2:6D:49:E1:AF:A9:61:C3:EB:FE:9B:53:C3:61:67:AC:7E
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 018498D48BCEB25E42052409917020976040
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/M-cf0m1J4a-pYcPr_ptTw2FnrH4.roa
Signing time: Mon 21 Nov 2022 06:16:17 +0000
ROA not before: Mon 21 Nov 2022 06:16:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.71.0/24 maxlen: 24
77.37.72.0/22 maxlen: 24
77.37.84.0/22 maxlen: 24
77.37.44.0/22 maxlen: 22
93.127.184.0/22 maxlen: 24
93.127.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:98:d4:8b:ce:b2:5e:42:05:24:09:91:70:20:97:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Nov 21 06:16:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33e71fd26d49e1afa961c3ebfe9b53c36167ac7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6a:3e:a0:1f:f9:c7:6f:b7:a4:39:67:e1:c9:
dd:5e:df:41:17:10:10:34:ee:cd:a0:72:9e:d5:42:
b0:ef:3b:08:83:5d:21:38:3f:a0:67:0f:30:d0:24:
fe:6e:6f:ac:ed:cc:d3:3f:a1:91:ea:4c:cd:79:7d:
bc:24:06:5b:a3:8e:ba:33:91:18:cc:12:74:89:5f:
7d:05:dd:ce:f2:ae:c8:01:63:d3:3a:c0:79:14:5b:
05:bc:c8:62:84:cb:be:9d:96:a3:bf:26:cf:6b:a2:
49:73:87:a3:9c:13:fb:64:4b:49:cb:f1:31:67:6d:
86:35:57:cc:f2:8f:27:af:3e:fc:ef:7e:01:95:90:
45:bf:48:b2:5a:dc:a7:67:2b:57:15:da:4a:fa:7d:
ec:e1:49:ff:5a:d9:39:1c:ca:69:9a:2b:6a:78:6f:
e6:3e:42:55:31:ce:33:d5:68:a0:38:bb:51:19:9a:
c4:84:3d:d1:5b:ee:fb:35:48:82:ca:c9:28:5c:0e:
e2:96:5e:88:51:6e:08:d4:51:91:fe:53:1f:6f:d6:
e9:e7:85:4d:ee:23:7a:5a:da:94:01:b5:9f:73:23:
47:23:2f:e2:c7:a3:d1:42:30:42:d4:5b:4a:f5:a0:
d9:da:aa:82:2d:47:33:50:16:27:48:20:b1:5a:53:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E7:1F:D2:6D:49:E1:AF:A9:61:C3:EB:FE:9B:53:C3:61:67:AC:7E
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/M-cf0m1J4a-pYcPr_ptTw2FnrH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.44.0/22
77.37.71.0-77.37.75.255
77.37.84.0/22
93.127.180.0-93.127.187.255
Signature Algorithm: sha256WithRSAEncryption
39:a1:95:0d:dd:2e:0b:e9:0d:f2:58:bb:3b:4f:8d:e4:35:00:
1e:01:e4:5b:27:33:b2:13:db:d7:4e:5e:e2:20:50:d4:81:a3:
44:c5:1d:42:48:16:b3:6d:b9:55:43:6a:ad:05:b4:42:a3:e8:
5b:ee:45:fb:05:0b:b7:97:56:46:ab:e7:70:e2:0a:48:52:23:
0f:09:6b:f7:e3:03:87:53:a4:1c:5c:f9:e6:77:95:29:93:80:
c2:17:4a:f3:39:1c:fe:c7:fa:a7:0e:64:fa:ff:98:49:09:b4:
d3:66:46:08:7b:10:42:75:cd:6c:d2:4a:d0:c8:d5:43:78:0d:
95:a8:f8:f0:36:ad:87:61:9d:61:e1:ee:21:cc:f4:14:e0:17:
5f:18:89:ce:60:82:91:c3:68:94:b5:6a:7f:1b:a7:67:c7:09:
f6:8d:fa:ce:cd:54:e8:d7:18:14:97:b9:c5:0e:77:ba:1d:04:
9e:ba:31:59:56:ee:44:8b:23:d8:99:96:f1:5f:0a:77:f0:5b:
f4:8b:34:2e:c3:2f:d4:d0:2a:ff:66:b6:1b:59:e5:4a:54:2b:
19:a1:90:c9:25:5d:d1:66:a6:da:6b:bc:2e:0a:c5:c7:66:f9:
c2:a8:c9:ac:d2:7e:d5:ab:93:d8:25:34:24:62:ec:51:5b:a5:
c2:19:75:ad
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYSY1IvOsl5CBSQJkXAgl2BAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjIxMTIxMDYxNjE3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2U3MWZkMjZkNDllMWFmYTk2MWMzZWJmZTliNTNjMzYxNjdhYzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Wo+oB/5x2+3pDln4cndXt9BFxAQ
NO7NoHKe1UKw7zsIg10hOD+gZw8w0CT+bm+s7czTP6GR6kzNeX28JAZbo466M5EY
zBJ0iV99Bd3O8q7IAWPTOsB5FFsFvMhihMu+nZajvybPa6JJc4ejnBP7ZEtJy/Ex
Z22GNVfM8o8nrz78734BlZBFv0iyWtynZytXFdpK+n3s4Un/Wtk5HMppmitqeG/m
PkJVMc4z1WigOLtRGZrEhD3RW+77NUiCyskoXA7ill6IUW4I1FGR/lMfb9bp54VN
7iN6WtqUAbWfcyNHIy/ix6PRQjBC1FtK9aDZ2qqCLUczUBYnSCCxWlOxIQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFDPnH9JtSeGvqWHD6/6bU8NhZ6x+MB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvTS1jZjBtMUo0YS1wWWNQcl9wdFR3MkZuckg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQCTSUsMAwD
BABNJUcDBAJNJUgDBAJNJVQwDAMEAl1/tAMEAl1/uDANBgkqhkiG9w0BAQsFAAOC
AQEAOaGVDd0uC+kN8li7O0+N5DUAHgHkWyczshPb105e4iBQ1IGjRMUdQkgWs225
VUNqrQW0QqPoW+5F+wULt5dWRqvncOIKSFIjDwlr9+MDh1OkHFz55neVKZOAwhdK
8zkc/sf6pw5k+v+YSQm002ZGCHsQQnXNbNJK0MjVQ3gNlaj48Dath2GdYeHuIcz0
FOAXXxiJzmCCkcNolLVqfxunZ8cJ9o36zs1U6NcYFJe5xQ53uh0EnroxWVbuRIsj
2JmW8V8Kd/Bb9Is0LsMv1NAq/2a2G1nlSlQrGaGQySVd0Wam2mu8LgrFx2b5wqjJ
rNJ+1auT2CU0JGLsUVulwhl1rQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:14:58 2025 by rpki-client