Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Nf5E--tMl-xm--Q_0wKlrVv8Kn0.roa
File: Nf5E--tMl-xm--Q_0wKlrVv8Kn0.roa (raw, json)
Hash identifier: W9LwmrV21e5UEPkAbM9x2jfjUGeccv/hIyH/SGK21UU=
Subject key identifier: 35:FE:44:FB:EB:4C:97:EC:66:FB:E4:3F:D3:02:A5:AD:5B:FC:2A:7D
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 018572AD5BA32FE859A368300B8B37F109CB
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Nf5E--tMl-xm--Q_0wKlrVv8Kn0.roa
Signing time: Mon 02 Jan 2023 13:30:41 +0000
ROA not before: Mon 02 Jan 2023 13:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 93.127.222.0/24 maxlen: 24
77.37.93.0/24 maxlen: 24
93.127.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ad:5b:a3:2f:e8:59:a3:68:30:0b:8b:37:f1:09:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 2 13:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35fe44fbeb4c97ec66fbe43fd302a5ad5bfc2a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7b:c7:6d:20:18:84:83:eb:c2:19:ea:95:a6:
25:86:f8:52:3e:4c:74:a7:fc:65:99:e0:7e:a3:22:
71:f1:38:86:ff:f9:05:bd:d0:c7:5d:b2:d7:63:55:
e2:7f:2d:ae:41:5b:f6:bb:03:f3:7b:2f:e4:5a:8b:
6c:8d:34:9f:1f:31:a6:77:88:e2:ff:81:55:a0:46:
eb:5c:16:74:7a:ff:3b:d1:70:a8:db:ed:81:94:57:
bd:4b:e5:41:c6:48:17:e4:f8:6b:e9:a5:b0:26:63:
dc:8a:15:40:b3:ce:70:a7:9a:0d:f8:78:8e:28:21:
bb:4f:34:a3:a0:71:86:3f:10:71:41:7b:2f:76:8c:
07:ea:90:5c:04:cc:67:36:b4:19:87:65:02:06:6f:
e7:71:34:e7:9f:dd:8b:6b:3b:96:45:72:f4:74:e3:
b4:1b:be:5c:0f:b7:dc:e5:eb:18:5d:d9:62:89:81:
79:28:5f:eb:2f:36:8c:d4:df:53:1e:70:d7:41:e3:
63:0e:a1:00:04:aa:6f:4c:d2:37:c6:e0:af:02:59:
dd:82:20:39:86:59:49:6e:c0:db:3c:f2:ec:23:30:
8b:cc:8a:96:d4:75:7f:0b:11:82:c6:08:9d:75:8e:
f8:cc:22:8f:4a:d1:75:6e:39:54:29:78:a8:60:cd:
52:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FE:44:FB:EB:4C:97:EC:66:FB:E4:3F:D3:02:A5:AD:5B:FC:2A:7D
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Nf5E--tMl-xm--Q_0wKlrVv8Kn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.93.0/24
93.127.163.0/24
93.127.222.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b0:1c:59:fb:db:15:ff:b5:a2:51:3e:42:8a:69:72:1c:10:
01:dd:47:22:f0:30:ce:7b:ba:3b:a4:49:0d:6a:88:2e:1b:a7:
2a:cf:08:08:47:3d:31:e9:a4:ea:5a:85:b2:85:1c:03:36:62:
95:66:94:a7:f8:bc:e3:8d:c9:e8:29:4d:59:55:0d:c9:8e:e4:
3f:90:0f:1e:01:b0:a5:a7:24:98:ee:45:e2:08:da:1b:ca:85:
51:7f:4b:b6:d0:6c:24:81:55:e0:c7:32:66:e5:16:b0:64:09:
c5:51:9e:7f:49:5d:61:fe:c6:43:a5:c3:61:23:43:93:87:14:
a1:29:1b:27:c0:33:d3:4e:91:d2:01:29:2e:ec:87:2d:a0:38:
0b:29:13:c6:9f:85:17:bd:98:61:91:99:6c:64:1b:e8:a3:b2:
29:93:81:11:f0:c1:8b:0b:9a:ef:fd:7b:ae:d7:5d:4f:c0:ef:
69:d6:de:74:af:ff:88:48:c5:ce:5d:54:2a:c8:9c:d3:f7:4c:
83:44:24:42:c2:b6:55:bf:af:5a:17:46:71:3c:0c:52:38:67:
ef:3a:96:aa:b2:1e:b6:6c:50:c8:e1:89:8a:6b:1c:b0:2c:4a:
5a:03:cf:42:72:58:1f:ad:0b:d0:5f:60:2c:6b:2c:60:45:69:
69:65:55:a1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVyrVujL+hZo2gwC4s38QnLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjMwMTAyMTMzMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWZlNDRmYmViNGM5N2VjNjZmYmU0M2ZkMzAyYTVhZDViZmMyYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HvHbSAYhIPrwhnqlaYlhvhSPkx0
p/xlmeB+oyJx8TiG//kFvdDHXbLXY1Xify2uQVv2uwPzey/kWotsjTSfHzGmd4ji
/4FVoEbrXBZ0ev870XCo2+2BlFe9S+VBxkgX5Phr6aWwJmPcihVAs85wp5oN+HiO
KCG7TzSjoHGGPxBxQXsvdowH6pBcBMxnNrQZh2UCBm/ncTTnn92LazuWRXL0dOO0
G75cD7fc5esYXdliiYF5KF/rLzaM1N9THnDXQeNjDqEABKpvTNI3xuCvAlndgiA5
hllJbsDbPPLsIzCLzIqW1HV/CxGCxgiddY74zCKPStF1bjlUKXioYM1SRwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDX+RPvrTJfsZvvkP9MCpa1b/Cp9MB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvTmY1RS0tdE1sLXhtLS1RXzB3S2xyVnY4S24wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATSVdAwQA
XX+jAwQAXX/eMA0GCSqGSIb3DQEBCwUAA4IBAQAnsBxZ+9sV/7WiUT5CimlyHBAB
3Uci8DDOe7o7pEkNaoguG6cqzwgIRz0x6aTqWoWyhRwDNmKVZpSn+LzjjcnoKU1Z
VQ3JjuQ/kA8eAbClpySY7kXiCNobyoVRf0u20GwkgVXgxzJm5RawZAnFUZ5/SV1h
/sZDpcNhI0OThxShKRsnwDPTTpHSASku7IctoDgLKRPGn4UXvZhhkZlsZBvoo7Ip
k4ER8MGLC5rv/Xuu111PwO9p1t50r/+ISMXOXVQqyJzT90yDRCRCwrZVv69aF0Zx
PAxSOGfvOpaqsh62bFDI4YmKaxywLEpaA89CclgfrQvQX2AsayxgRWlpZVWh
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:31:18 2025 by rpki-client