Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/R6dMc-LbMQNN8IrVlrt9Dbg9j7w.roa
File: R6dMc-LbMQNN8IrVlrt9Dbg9j7w.roa (raw, json)
Hash identifier: XgbKSUY90JoZ2pSe8ISQn1aa/y7zlQ7xLO2FP/ITM/Q=
Subject key identifier: 47:A7:4C:73:E2:DB:31:03:4D:F0:8A:D5:96:BB:7D:0D:B8:3D:8F:BC
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0183F20624730BB94266B7398361EF546FDA
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/R6dMc-LbMQNN8IrVlrt9Dbg9j7w.roa
Signing time: Wed 19 Oct 2022 20:53:52 +0000
ROA not before: Wed 19 Oct 2022 20:53:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 77.37.92.0/24 maxlen: 24
77.37.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f2:06:24:73:0b:b9:42:66:b7:39:83:61:ef:54:6f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Oct 19 20:53:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47a74c73e2db31034df08ad596bb7d0db83d8fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3f:4c:2c:fe:28:e2:21:c1:ab:db:6c:a8:52:
fe:d0:05:a2:22:85:5a:79:0a:61:94:44:67:88:44:
bb:e9:16:88:b5:09:a0:be:7f:39:9e:dd:f9:f6:a1:
72:60:63:b8:f2:da:d0:e0:25:c4:23:23:e9:21:dd:
2f:9a:f9:ab:c7:1b:86:4a:bc:58:1b:ae:58:e7:a4:
55:11:90:ec:e9:3c:d1:22:5b:01:9b:8d:df:2d:5c:
37:e6:ef:23:d9:e6:8d:4f:71:69:7a:7e:f2:de:bb:
ba:c3:45:77:33:cf:62:c3:51:70:f9:89:b2:b0:b0:
ff:16:ce:ae:b1:a8:69:16:e6:b0:83:77:50:e3:a2:
37:00:1d:e8:73:bf:74:2a:e6:ab:39:84:ea:29:9a:
4e:34:05:61:4c:3d:d6:3c:c7:88:1d:1b:21:b1:b5:
14:2a:77:f8:59:ba:b8:19:d2:4c:c3:82:c2:c2:a3:
54:e4:e8:d7:25:d4:45:9c:ca:e7:7a:11:00:8a:fb:
0e:53:74:ec:04:b0:b0:a1:37:e6:e4:f8:9f:7d:f2:
85:85:a5:2f:b2:53:5e:61:82:2f:fd:da:9b:d7:48:
77:6c:c2:c1:bd:12:d5:ba:c3:3b:b1:eb:e6:c2:9f:
1c:f4:4c:70:78:b9:3e:a8:78:8c:1d:52:fe:2b:bc:
91:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A7:4C:73:E2:DB:31:03:4D:F0:8A:D5:96:BB:7D:0D:B8:3D:8F:BC
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/R6dMc-LbMQNN8IrVlrt9Dbg9j7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.58.0/24
77.37.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:dd:86:c0:0a:af:4d:b3:f6:2a:0b:24:dd:68:5c:be:51:c9:
c7:5c:c5:47:2d:bf:1b:1a:ff:a7:c3:af:e0:c3:5f:c4:be:fa:
75:d4:fd:f6:65:b5:67:20:99:ed:10:41:7b:b8:e0:e8:19:13:
61:04:f5:04:4e:b1:24:27:09:65:24:18:eb:41:07:43:cd:6d:
36:e6:8e:a8:b7:35:76:89:90:0e:6f:53:6e:62:8d:31:f9:a2:
c8:f1:91:65:25:35:4f:10:9d:df:6b:fc:a3:f7:d6:86:ea:5a:
b6:35:ca:d1:f2:4f:a5:e0:ba:5e:06:ae:88:07:34:e1:9d:86:
89:ef:f4:84:27:d4:f3:01:1d:f9:1c:04:46:8b:18:af:a4:da:
6b:5c:f9:ba:09:6f:4d:18:84:ad:a4:b5:98:3c:fe:a3:b6:1a:
31:ad:ff:bb:f3:23:ba:f3:5d:89:87:bc:58:2a:ba:60:fb:26:
f4:98:47:62:f3:f1:74:a7:c7:13:34:67:57:51:a5:f2:cb:63:
39:91:65:7d:10:46:59:0f:5e:77:58:5a:68:be:09:fe:4b:db:
16:a8:a6:4e:7d:67:a4:90:18:c2:ae:d5:78:bf:ad:15:d6:0c:
2e:ea:c7:72:96:56:1c:ab:61:ea:89:ed:c8:9c:8b:ff:a3:f4:
1f:8d:22:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:40:31 2025 by rpki-client