Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/V3_85gHXghY40af15LEJEwNDoJs.roa
File: V3_85gHXghY40af15LEJEwNDoJs.roa (raw, json)
Hash identifier: bCMXnZP2mSn+l0xaX96SXTvNFUwV4TAA5ELyjAdQJp8=
Subject key identifier: 57:7F:FC:E6:01:D7:82:16:38:D1:A7:F5:E4:B1:09:13:03:43:A0:9B
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01859AD6B442803B3AD08ECBD8A16FF0B9F3
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/V3_85gHXghY40af15LEJEwNDoJs.roa
Signing time: Tue 10 Jan 2023 08:40:40 +0000
ROA not before: Tue 10 Jan 2023 08:40:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 77.37.91.0/24 maxlen: 24
77.37.94.0/24 maxlen: 24
77.37.34.0/24 maxlen: 24
77.37.40.0/24 maxlen: 24
77.37.41.0/24 maxlen: 24
77.37.43.0/24 maxlen: 24
77.37.45.0/24 maxlen: 24
77.37.46.0/24 maxlen: 24
77.37.52.0/24 maxlen: 24
77.37.60.0/24 maxlen: 24
93.127.203.0/24 maxlen: 24
93.127.212.0/24 maxlen: 24
93.127.219.0/24 maxlen: 24
93.127.167.0/24 maxlen: 24
93.127.186.0/24 maxlen: 24
93.127.188.0/24 maxlen: 24
93.127.190.0/24 maxlen: 24
93.127.191.0/24 maxlen: 24
93.127.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:d6:b4:42:80:3b:3a:d0:8e:cb:d8:a1:6f:f0:b9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 10 08:40:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=577ffce601d7821638d1a7f5e4b109130343a09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:85:f1:c1:92:d6:6c:85:05:82:d2:04:40:81:
d5:78:af:51:3d:85:85:74:f4:3d:35:b6:71:84:91:
8a:95:ce:ca:0a:d9:3e:75:09:37:27:44:48:4e:29:
dc:23:64:ec:0b:64:2d:5a:0b:b9:88:fc:6a:e7:b1:
a1:37:b1:3f:43:6d:8b:93:db:5d:da:be:4a:bc:0c:
0a:f3:84:5e:cb:3e:c9:9f:e3:8c:90:fa:c8:35:ed:
a1:19:e9:0a:0d:c3:0b:d2:f3:f3:84:10:6d:78:c1:
16:c4:ad:df:0a:b4:23:24:47:4e:77:9d:fb:31:78:
58:86:99:3a:e5:57:4b:65:e0:71:9d:82:85:87:f9:
ae:62:a8:73:91:66:41:ef:89:f1:c1:1e:b6:e6:d8:
09:bd:f1:01:7a:f0:21:b4:17:e1:bc:56:e1:38:1e:
a0:19:42:42:ab:dd:02:49:fa:e9:81:3f:eb:7b:19:
62:4c:b4:ae:25:e2:9f:d0:8f:8b:75:14:d3:7a:cb:
11:16:85:92:c2:95:79:52:2f:f0:65:06:8d:31:89:
5c:51:9f:eb:55:6d:d4:88:b1:e3:f9:71:f3:46:ac:
6f:5e:24:7b:49:d1:31:ab:d4:f1:95:9b:cf:3e:d4:
a2:fe:c3:96:da:7a:ce:56:f3:7d:08:6f:e7:31:5d:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7F:FC:E6:01:D7:82:16:38:D1:A7:F5:E4:B1:09:13:03:43:A0:9B
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/V3_85gHXghY40af15LEJEwNDoJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.34.0/24
77.37.40.0/23
77.37.43.0/24
77.37.45.0-77.37.46.255
77.37.52.0/24
77.37.60.0/24
77.37.91.0/24
77.37.94.0/24
93.127.167.0/24
93.127.186.0/24
93.127.188.0/24
93.127.190.0/23
93.127.199.0/24
93.127.203.0/24
93.127.212.0/24
93.127.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8a:98:b1:1f:81:5f:09:6d:b4:32:cb:fe:24:a9:d5:2d:27:
b9:bc:ac:78:00:58:e1:a6:ac:7d:59:01:07:7a:d9:d5:76:f3:
42:5c:9d:1e:67:28:3e:d4:1f:02:11:51:ad:75:f6:c4:fe:93:
a6:a8:47:96:f6:bd:a5:25:0e:a2:0e:d8:97:bc:d0:ac:73:b7:
04:33:83:fe:7d:0c:6d:0e:31:c5:e8:c3:32:de:7b:42:6c:c1:
4c:6d:54:72:ad:c6:9d:30:78:e6:0e:67:13:bb:20:81:e3:5f:
21:10:75:0a:18:56:52:d7:ed:5a:bd:e1:e8:fb:1e:ad:7d:5e:
c7:ff:dc:eb:ba:ab:23:0b:f6:67:8b:9a:3a:e1:ec:91:f2:84:
b5:e9:fa:b2:d1:ef:15:15:49:50:7c:ca:ae:71:cc:7f:6b:33:
24:a1:11:48:9b:1f:d9:56:98:85:72:9d:7c:e3:2a:76:88:4a:
8b:1b:a9:57:68:72:75:d5:ee:6b:3d:4e:3f:29:db:cc:fa:d1:
5e:43:37:8b:1e:e9:1c:34:d0:d2:ea:69:62:27:b2:be:dd:77:
09:f1:ca:ce:45:54:a5:0d:78:7a:83:e4:62:b4:62:5b:fb:79:
a9:86:02:e5:2f:bb:cc:10:3e:e4:bc:cb:50:35:96:58:45:92:
fc:b3:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:32:40 2025 by rpki-client