Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Pk_T0SIT6X-cQSrT8eC_lHIV45Q.roa
File: Pk_T0SIT6X-cQSrT8eC_lHIV45Q.roa (raw, json)
Hash identifier: VZoSwCLbIUKRRnXk6kj6gmRMr9JtRg4Lf+TlPjwZcy0=
Subject key identifier: 3E:4F:D3:D1:22:13:E9:7F:9C:41:2A:D3:F1:E0:BF:94:72:15:E3:94
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01858644A211B1EAA5867347EA66CD66EB26
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Pk_T0SIT6X-cQSrT8eC_lHIV45Q.roa
Signing time: Fri 06 Jan 2023 08:48:42 +0000
ROA not before: Fri 06 Jan 2023 08:48:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 93.127.221.0/24 maxlen: 24
77.37.37.0/24 maxlen: 24
77.37.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:44:a2:11:b1:ea:a5:86:73:47:ea:66:cd:66:eb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 6 08:48:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e4fd3d12213e97f9c412ad3f1e0bf947215e394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:74:0f:9e:40:3e:7d:98:cc:80:25:9b:7d:
29:81:70:51:72:c5:e2:38:73:54:fb:ee:52:20:2e:
58:dc:f6:7b:97:dc:cc:1c:c6:4c:93:21:b8:e1:b5:
fa:41:d4:17:a5:cc:c6:d2:04:2c:cc:e6:af:41:6f:
c2:f8:15:f3:da:82:0f:79:75:f8:3c:84:e3:f9:bc:
2a:17:64:95:c3:95:31:95:50:c7:c7:45:88:cb:65:
a5:88:e4:86:b7:8f:24:0f:b6:cd:05:da:81:74:0c:
24:48:93:d3:50:4b:fd:f3:bd:14:13:9b:f8:bf:b6:
79:96:b6:8e:e3:90:75:5c:a0:ac:07:ae:d5:d6:62:
53:8e:70:42:49:9b:b1:75:4a:6e:93:d9:0a:a4:1f:
0c:01:d3:82:4a:0e:c0:1c:0b:ca:46:de:14:45:06:
07:b4:7d:48:f1:76:b5:d3:61:e5:4e:95:b8:8a:b5:
4f:ce:e8:99:62:2b:a0:3c:9d:f8:1f:65:32:bb:70:
7d:80:d3:36:ff:d3:08:8a:05:15:5e:60:8d:46:f2:
ad:4c:05:99:9f:66:7c:db:5f:e4:53:a6:d8:1d:01:
4d:b1:a1:e9:d1:3e:ee:e7:eb:8c:0e:fb:c6:8d:25:
c4:6c:e2:e5:5d:fa:3c:c8:ca:0f:a2:64:51:96:45:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4F:D3:D1:22:13:E9:7F:9C:41:2A:D3:F1:E0:BF:94:72:15:E3:94
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Pk_T0SIT6X-cQSrT8eC_lHIV45Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.37.0/24
77.37.57.0/24
93.127.221.0/24
Signature Algorithm: sha256WithRSAEncryption
37:53:fe:d4:99:c2:44:e2:7a:1f:e5:e2:81:d7:6f:d7:eb:0c:
04:4c:d7:67:cc:81:9c:c9:14:b9:4c:6e:6c:4d:33:d0:f3:42:
1c:48:ae:77:d8:21:f8:6a:6a:d7:9a:d0:8d:41:67:c4:f7:10:
59:49:22:ce:f7:87:57:a1:84:13:de:a1:c6:90:d6:b6:23:d2:
a7:8f:21:d9:5b:da:fa:f4:05:87:09:53:6e:42:bf:59:68:7c:
6e:c4:71:3b:91:fc:8c:62:30:6a:84:48:19:6a:91:1e:b1:22:
70:45:2d:20:5a:8e:8f:24:6c:99:1c:e6:c9:e6:94:72:fa:d2:
35:31:b9:34:01:c7:78:cb:f9:36:32:e7:81:11:ca:6f:1d:4f:
95:0b:5a:b4:9b:81:06:45:08:c3:55:f1:77:e0:d8:ab:8f:b4:
68:b4:75:9f:49:fc:ca:5b:31:c8:17:ce:1e:43:ef:ef:68:c3:
c7:f4:f8:3a:98:ca:c4:2b:7b:89:93:f1:0d:8b:f9:ac:76:e1:
29:51:68:91:d4:51:67:57:f8:e3:b4:f7:99:9b:d5:c2:73:68:
9a:fd:99:85:33:c3:a9:6f:b2:c9:4d:e8:95:c9:0c:1f:e1:2c:
81:b6:bf:f5:87:70:fa:9a:aa:a8:e7:4a:62:49:7e:a9:f3:8f:
08:33:b6:86
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYWGRKIRseqlhnNH6mbNZusmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjMwMTA2MDg0ODQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTRmZDNkMTIyMTNlOTdmOWM0MTJhZDNmMWUwYmY5NDcyMTVlMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW50D55APn2YzIAlm30pgXBRcsXi
OHNU++5SIC5Y3PZ7l9zMHMZMkyG44bX6QdQXpczG0gQszOavQW/C+BXz2oIPeXX4
PITj+bwqF2SVw5UxlVDHx0WIy2WliOSGt48kD7bNBdqBdAwkSJPTUEv9870UE5v4
v7Z5lraO45B1XKCsB67V1mJTjnBCSZuxdUpuk9kKpB8MAdOCSg7AHAvKRt4URQYH
tH1I8Xa102HlTpW4irVPzuiZYiugPJ34H2Uyu3B9gNM2/9MIigUVXmCNRvKtTAWZ
n2Z821/kU6bYHQFNsaHp0T7u5+uMDvvGjSXEbOLlXfo8yMoPomRRlkWxDQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFD5P09EiE+l/nEEq0/Hgv5RyFeOUMB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvUGtfVDBTSVQ2WC1jUVNyVDhlQ19sSElWNDVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATSUlAwQA
TSU5AwQAXX/dMA0GCSqGSIb3DQEBCwUAA4IBAQA3U/7UmcJE4nof5eKB12/X6wwE
TNdnzIGcyRS5TG5sTTPQ80IcSK532CH4amrXmtCNQWfE9xBZSSLO94dXoYQT3qHG
kNa2I9KnjyHZW9r69AWHCVNuQr9ZaHxuxHE7kfyMYjBqhEgZapEesSJwRS0gWo6P
JGyZHObJ5pRy+tI1Mbk0Acd4y/k2MueBEcpvHU+VC1q0m4EGRQjDVfF34Nirj7Ro
tHWfSfzKWzHIF84eQ+/vaMPH9Pg6mMrEK3uJk/ENi/msduEpUWiR1FFnV/jjtPeZ
m9XCc2ia/ZmFM8Opb7LJTeiVyQwf4SyBtr/1h3D6mqqo50piSX6p848IM7aG
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:36:50 2025 by rpki-client