Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/MCt4YzF9wAFewaOwaTMSnYykzAI.roa
File: MCt4YzF9wAFewaOwaTMSnYykzAI.roa (raw, json)
Hash identifier: yyzfvavQHHHB2XR0B+RdE6s2Zv6KZkwx5t2m7UvrDGI=
Subject key identifier: 30:2B:78:63:31:7D:C0:01:5E:C1:A3:B0:69:33:12:9D:8C:A4:CC:02
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01857070591C4595E1BCDCE821458B0D7EB2
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/MCt4YzF9wAFewaOwaTMSnYykzAI.roa
Signing time: Mon 02 Jan 2023 03:04:49 +0000
ROA not before: Mon 02 Jan 2023 03:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 77.37.91.0/24 maxlen: 24
77.37.94.0/24 maxlen: 24
77.37.40.0/24 maxlen: 24
77.37.41.0/24 maxlen: 24
77.37.43.0/24 maxlen: 24
77.37.52.0/24 maxlen: 24
77.37.60.0/24 maxlen: 24
93.127.203.0/24 maxlen: 24
93.127.212.0/24 maxlen: 24
93.127.219.0/24 maxlen: 24
93.127.167.0/24 maxlen: 24
93.127.171.0/24 maxlen: 24
93.127.179.0/24 maxlen: 24
93.127.188.0/24 maxlen: 24
93.127.190.0/24 maxlen: 24
93.127.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:59:1c:45:95:e1:bc:dc:e8:21:45:8b:0d:7e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 2 03:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=302b7863317dc0015ec1a3b06933129d8ca4cc02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cc:3e:56:13:35:5d:55:d7:e1:ea:32:6d:43:
9b:55:42:53:ac:be:72:f1:11:2f:93:1c:e8:22:e9:
0d:fe:af:f8:53:5a:e8:e5:52:69:a2:fa:77:22:33:
5e:34:5c:79:01:a2:9f:f8:86:bc:80:e6:f7:41:03:
7b:21:33:f2:06:db:0a:ee:11:0b:42:bf:73:ad:95:
6d:5b:2a:0a:70:1a:74:4a:10:dd:16:4a:d6:9a:b1:
74:39:e8:52:35:32:92:af:e5:b5:37:03:e1:8a:e5:
ed:57:57:f5:c1:05:86:ac:71:9c:eb:cb:8d:f6:51:
2d:78:9f:88:73:b3:03:e9:c8:ad:c8:cb:f7:78:d2:
65:b4:d4:5e:50:a2:2e:a9:53:f3:2d:dd:59:6f:d8:
7b:57:f0:9d:9a:db:73:04:f0:e4:42:df:8b:1d:c1:
9a:48:dc:3f:0a:e0:5a:8a:a2:9e:37:ca:39:d8:0c:
a6:a6:9e:fc:28:db:17:4d:4a:8a:e1:63:b9:9c:39:
30:e7:89:79:8a:ef:dc:e4:0e:ed:90:74:79:89:32:
9f:83:b5:35:fe:65:90:60:d0:be:15:b6:65:9a:dd:
99:f6:04:17:27:8e:4f:cc:1e:30:e6:b1:1a:96:37:
74:ca:a0:2e:be:e5:73:45:c8:16:f6:cc:72:40:5e:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2B:78:63:31:7D:C0:01:5E:C1:A3:B0:69:33:12:9D:8C:A4:CC:02
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/MCt4YzF9wAFewaOwaTMSnYykzAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.40.0/23
77.37.43.0/24
77.37.52.0/24
77.37.60.0/24
77.37.91.0/24
77.37.94.0/24
93.127.167.0/24
93.127.171.0/24
93.127.179.0/24
93.127.188.0/24
93.127.190.0/23
93.127.203.0/24
93.127.212.0/24
93.127.219.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:07:b3:f5:c2:c7:30:59:0c:77:92:0e:32:25:8f:a8:61:5f:
59:09:8c:98:88:03:50:69:78:39:f4:7c:70:ec:d7:78:15:99:
bb:e7:62:2c:9f:63:2f:01:f1:57:d2:6c:70:41:74:e7:6a:ff:
00:46:38:90:56:a0:10:76:7d:ba:77:86:46:e4:4f:38:18:24:
af:92:05:2b:74:92:e7:86:5b:6d:e7:69:4a:fe:3e:6f:c3:1f:
c5:6c:6e:20:5a:6a:d4:a7:23:d5:3b:93:75:db:7d:48:14:40:
36:33:19:c2:02:57:bc:55:dc:34:c0:37:6b:58:b8:0a:f8:51:
da:1b:3d:f6:85:26:25:2c:5c:bd:e6:e2:93:41:99:fe:0f:38:
3c:96:04:63:ec:a8:0b:d1:69:42:69:b3:99:54:fc:a6:4a:f2:
d6:52:82:33:f7:84:9e:01:e9:c7:36:cf:b0:ae:d6:53:55:51:
e1:03:2d:63:7d:eb:26:a3:c0:a0:43:19:14:c5:0e:e1:d4:f7:
5e:3d:b3:5f:e1:9b:9c:d5:10:e7:37:bf:1f:2e:1e:68:92:1c:
c4:49:ef:64:c7:cf:df:6a:01:77:02:75:36:77:fa:4f:a0:aa:
45:61:64:81:ef:f8:28:8f:b3:0c:1e:a7:5a:59:42:3c:7a:d8:
8e:ab:ac:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:40:33 2025 by rpki-client