Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Rcd2jQU4CtOdGLMIirp_ao_H3-U.roa
File: Rcd2jQU4CtOdGLMIirp_ao_H3-U.roa (raw, json)
Hash identifier: JzDpBgbhVC5FNZw9anl66xDpjodqF2f0ecB0v51nfzQ=
Subject key identifier: 45:C7:76:8D:05:38:0A:D3:9D:18:B3:08:8A:BA:7F:6A:8F:C7:DF:E5
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0185596241E8A4325EF91EA563CB7A162A55
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Rcd2jQU4CtOdGLMIirp_ao_H3-U.roa
Signing time: Wed 28 Dec 2022 15:38:09 +0000
ROA not before: Wed 28 Dec 2022 15:38:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 77.37.94.0/24 maxlen: 24
77.37.95.0/24 maxlen: 24
77.37.40.0/24 maxlen: 24
77.37.41.0/24 maxlen: 24
77.37.43.0/24 maxlen: 24
77.37.60.0/24 maxlen: 24
93.127.203.0/24 maxlen: 24
93.127.212.0/24 maxlen: 24
93.127.164.0/24 maxlen: 24
93.127.167.0/24 maxlen: 24
93.127.171.0/24 maxlen: 24
93.127.179.0/24 maxlen: 24
93.127.188.0/24 maxlen: 24
93.127.190.0/24 maxlen: 24
93.127.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:59:62:41:e8:a4:32:5e:f9:1e:a5:63:cb:7a:16:2a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Dec 28 15:38:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45c7768d05380ad39d18b3088aba7f6a8fc7dfe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:bb:a7:2d:87:fd:1a:33:f7:92:90:6f:e2:
a2:81:ba:29:37:2f:6c:7c:30:6a:b7:c2:3d:a6:8a:
3b:4d:8c:b0:23:08:1d:78:5e:3b:34:d4:1d:f1:d0:
fd:72:f1:81:e0:75:34:71:e2:ff:d2:2f:0d:b4:9f:
76:a4:53:38:88:1e:dd:84:fd:0b:a0:5d:3c:c1:e2:
9a:f7:d2:e3:2f:b0:42:18:8d:25:63:32:56:03:c0:
26:5d:52:f9:9c:24:a4:40:bb:98:f9:fe:b4:8c:7d:
39:cd:98:69:74:de:07:f8:f7:98:10:98:bd:3f:e2:
94:1d:ba:77:d4:e5:f1:f3:f8:90:52:f5:3f:8a:46:
37:79:0b:b8:a0:1f:8d:28:d5:94:5a:a9:d9:c6:25:
40:b6:d1:08:45:9e:79:1f:35:e7:fa:94:98:6e:d2:
d9:fd:a1:f6:9f:71:87:d3:fb:5e:b6:f4:42:ed:6c:
78:42:29:7a:e8:9b:21:81:62:b1:09:1c:16:03:1e:
06:c0:91:7f:8a:6e:f0:2d:ad:a4:0a:c8:70:65:42:
08:ac:ff:8d:73:e1:80:dd:00:3f:64:55:aa:c2:24:
13:16:d7:1b:f7:25:06:ed:96:e1:c7:79:f3:79:da:
15:5f:ff:a3:00:ca:a5:e1:34:1d:e7:21:a9:ab:33:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C7:76:8D:05:38:0A:D3:9D:18:B3:08:8A:BA:7F:6A:8F:C7:DF:E5
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Rcd2jQU4CtOdGLMIirp_ao_H3-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.40.0/23
77.37.43.0/24
77.37.60.0/24
77.37.94.0/23
93.127.164.0/24
93.127.167.0/24
93.127.171.0/24
93.127.179.0/24
93.127.188.0/24
93.127.190.0/23
93.127.203.0/24
93.127.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:73:bb:43:b7:43:6c:6c:48:8b:96:31:8a:26:7e:64:95:11:
09:86:3e:e5:81:d6:88:82:ae:f1:b8:f4:44:50:8c:e9:3a:b1:
2f:4f:50:ad:c7:d3:c1:5b:10:fa:67:d5:fc:de:36:72:85:b8:
f4:28:8c:6b:c2:14:2a:ae:90:84:70:72:f7:bd:de:f3:6e:b6:
38:38:1e:fe:e7:28:45:56:c8:ab:5d:2c:0f:95:81:72:25:1e:
90:2b:18:23:5c:a5:19:0a:5d:2b:78:8a:66:a7:bd:0c:35:0b:
d5:0d:30:6f:36:b7:15:26:d0:b3:6a:12:4d:b9:0f:2c:8c:a1:
ff:57:f0:23:63:c5:cc:5f:dd:96:8f:a6:33:57:94:4e:56:27:
49:c5:96:61:2a:91:98:1e:bc:52:17:05:8b:ef:54:5b:11:f2:
a7:26:73:ce:8f:da:1d:13:21:93:7b:d8:22:e3:db:f9:9f:6f:
ba:48:c2:33:fa:11:ca:c8:a2:c5:ae:b6:9a:da:3c:6d:d0:e2:
3d:f3:74:fe:dc:4e:8c:6d:42:01:a6:d8:a6:0d:0f:14:d5:f7:
cd:e1:5d:95:fe:95:66:e3:92:c0:f2:4b:d3:c7:1e:93:11:96:
d1:2d:4e:41:92:88:c1:1e:80:a5:e0:5f:39:fa:ba:3b:aa:01:
56:7b:14:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:35:41 2025 by rpki-client