Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Oq3Fw3quDq-zBv2okzjEZoEM7z0.roa
File: Oq3Fw3quDq-zBv2okzjEZoEM7z0.roa (raw, json)
Hash identifier: fqailoiLsJcCaxVEpGeg3Nz5HE7SpHXbaDMs/ViPBv0=
Subject key identifier: 3A:AD:C5:C3:7A:AE:0E:AF:B3:06:FD:A8:93:38:C4:66:81:0C:EF:3D
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01844D30BB807B61B5538EC684DBAF6E008B
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Oq3Fw3quDq-zBv2okzjEZoEM7z0.roa
Signing time: Sun 06 Nov 2022 13:45:49 +0000
ROA not before: Sun 06 Nov 2022 13:45:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.36.0/22 maxlen: 22
77.37.44.0/22 maxlen: 22
93.127.184.0/22 maxlen: 22
93.127.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4d:30:bb:80:7b:61:b5:53:8e:c6:84:db:af:6e:00:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Nov 6 13:45:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3aadc5c37aae0eafb306fda89338c466810cef3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5e:68:51:ad:ff:f2:f9:79:1d:18:7b:1f:d5:
6b:15:95:c1:0e:42:91:89:be:cc:95:27:97:9e:86:
1a:70:80:8e:2e:8a:54:2d:f2:ca:d2:f9:f3:bc:8e:
07:e3:21:18:f0:45:0e:7a:de:f1:4d:70:32:15:00:
02:c1:13:3f:1b:8b:b8:07:fb:2b:61:f0:58:58:fb:
a5:ef:b6:9c:39:89:52:0a:a2:70:04:52:83:12:e1:
6b:64:63:0b:be:57:ff:de:54:d1:15:f4:4a:a5:32:
c9:22:99:f3:71:ea:d3:ba:fc:92:85:29:c8:89:24:
a3:25:dd:aa:a3:ab:c1:8f:d1:eb:5d:a4:80:9f:2d:
29:cf:2c:00:42:73:3b:db:9b:ee:70:ca:e2:31:40:
b8:0b:c5:dd:9e:4f:57:91:85:f6:82:6d:94:15:ee:
94:07:31:b9:8a:c3:3e:ca:8c:18:71:d7:4e:30:0d:
ee:6b:a3:23:fc:c7:2e:c8:84:c7:d2:d1:08:30:84:
3b:8b:14:70:30:31:fe:ca:7d:66:79:a8:58:2a:f2:
16:9d:64:a6:9f:40:6d:32:54:cf:30:59:9d:c0:7e:
a9:04:62:33:99:e7:c5:d0:35:0d:58:c0:fe:74:44:
7c:8d:2e:5d:5c:75:c6:52:ac:13:c9:5d:90:1f:41:
89:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AD:C5:C3:7A:AE:0E:AF:B3:06:FD:A8:93:38:C4:66:81:0C:EF:3D
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Oq3Fw3quDq-zBv2okzjEZoEM7z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.36.0/22
77.37.44.0/22
93.127.180.0-93.127.187.255
Signature Algorithm: sha256WithRSAEncryption
1f:7a:f8:43:5a:4d:1d:4c:1e:cf:ec:fb:d5:e7:a7:fe:6a:46:
d3:c1:c5:4f:49:44:7a:7f:d3:d1:a7:7d:b1:e2:b0:40:73:f7:
55:7c:3c:1c:80:a2:94:a7:87:7c:cd:1b:28:59:10:95:9c:53:
06:ff:a1:35:6d:6f:31:20:e5:2e:f6:11:f7:e5:09:18:f6:be:
2a:68:8b:b6:89:43:32:58:78:8c:b9:e4:76:e0:27:9f:13:94:
62:f1:4b:22:42:7d:cd:e7:82:56:61:4c:d7:fd:71:4d:ba:d1:
05:cb:df:61:88:8f:04:13:44:9f:cd:1f:5e:d5:c2:51:98:fd:
31:b5:45:d1:83:6a:83:1c:e2:80:5d:a2:b1:a0:7f:9b:c3:3b:
c1:f4:9e:0e:51:b1:b5:84:e1:93:79:25:81:ed:fc:fa:2c:99:
4b:7b:05:14:ee:b4:78:35:86:03:75:85:16:67:18:81:5d:fa:
c8:72:43:79:9d:59:c0:11:3e:4c:3e:31:a0:bb:e2:cf:3d:77:
77:f0:a5:51:81:fb:ea:cc:30:9f:8e:af:b1:bf:d9:5c:b0:8c:
b4:bb:69:cf:38:ff:d8:d5:2f:47:48:ac:8f:ff:7d:e9:29:80:
56:7e:12:40:73:21:e9:cc:55:a5:de:e9:01:98:84:37:77:9c:
af:97:e7:71
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYRNMLuAe2G1U47GhNuvbgCLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjIxMTA2MTM0NTQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWFkYzVjMzdhYWUwZWFmYjMwNmZkYTg5MzM4YzQ2NjgxMGNlZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF5oUa3/8vl5HRh7H9VrFZXBDkKR
ib7MlSeXnoYacICOLopULfLK0vnzvI4H4yEY8EUOet7xTXAyFQACwRM/G4u4B/sr
YfBYWPul77acOYlSCqJwBFKDEuFrZGMLvlf/3lTRFfRKpTLJIpnzcerTuvyShSnI
iSSjJd2qo6vBj9HrXaSAny0pzywAQnM725vucMriMUC4C8Xdnk9XkYX2gm2UFe6U
BzG5isM+yowYcddOMA3ua6Mj/McuyITH0tEIMIQ7ixRwMDH+yn1meahYKvIWnWSm
n0BtMlTPMFmdwH6pBGIzmefF0DUNWMD+dER8jS5dXHXGUqwTyV2QH0GJ/wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFDqtxcN6rg6vswb9qJM4xGaBDO89MB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvT3EzRnczcXVEcS16QnYyb2t6akVab0VNN3owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCTSUkAwQC
TSUsMAwDBAJdf7QDBAJdf7gwDQYJKoZIhvcNAQELBQADggEBAB96+ENaTR1MHs/s
+9Xnp/5qRtPBxU9JRHp/09GnfbHisEBz91V8PByAopSnh3zNGyhZEJWcUwb/oTVt
bzEg5S72EfflCRj2vipoi7aJQzJYeIy55HbgJ58TlGLxSyJCfc3nglZhTNf9cU26
0QXL32GIjwQTRJ/NH17VwlGY/TG1RdGDaoMc4oBdorGgf5vDO8H0ng5RsbWE4ZN5
JYHt/PosmUt7BRTutHg1hgN1hRZnGIFd+shyQ3mdWcARPkw+MaC74s89d3fwpVGB
++rMMJ+Or7G/2VywjLS7ac84/9jVL0dIrI//fekpgFZ+EkBzIenMVaXe6QGYhDd3
nK+X53E=
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:32:25 2025 by rpki-client