Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/VjphB7lx8kNaitW1MTiTQNzZC_Y.roa
File: VjphB7lx8kNaitW1MTiTQNzZC_Y.roa (raw, json)
Hash identifier: P31WaCHNJJOTjoHZRMOn+TtBmCAJEE9z51IB+xAS2ow=
Subject key identifier: 56:3A:61:07:B9:71:F2:43:5A:8A:D5:B5:31:38:93:40:DC:D9:0B:F6
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 018570705E2A1AD82B06B72B29DC2B7D0785
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/VjphB7lx8kNaitW1MTiTQNzZC_Y.roa
Signing time: Mon 02 Jan 2023 03:04:50 +0000
ROA not before: Mon 02 Jan 2023 03:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 77.37.33.0/24 maxlen: 24
93.127.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5e:2a:1a:d8:2b:06:b7:2b:29:dc:2b:7d:07:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 2 03:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=563a6107b971f2435a8ad5b531389340dcd90bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cd:5a:bb:13:c8:16:4a:e1:f5:5b:06:54:a9:
38:d6:b0:10:cd:cd:7f:56:93:70:68:04:d9:b4:b9:
12:21:19:4c:1c:35:b8:56:fe:97:62:ea:93:66:e5:
29:22:8d:c8:b2:6f:c3:cc:da:88:99:2f:a9:ff:de:
99:c3:db:93:b7:84:1e:50:01:70:b9:1a:5d:8f:c5:
4f:28:27:34:c0:0b:14:b2:81:54:07:cc:00:f7:b5:
cc:bb:06:08:57:72:09:e1:ab:dd:e1:ab:07:92:cd:
b8:fc:03:dc:54:b7:2a:62:ee:56:a2:bb:cf:a4:11:
d5:f0:55:17:af:8e:92:7e:fa:93:96:f0:85:2c:7d:
76:9b:a9:b9:bc:e5:d5:62:08:ef:a5:31:a5:1e:f4:
f5:76:6a:c2:6f:a5:8c:20:4e:ed:a1:e0:7c:c4:64:
02:41:da:ad:b5:03:52:43:19:99:93:a7:8e:dc:43:
c3:d3:58:26:36:36:27:95:9b:26:b9:cd:ae:6c:c9:
15:bd:60:86:55:9f:09:be:73:cc:28:6b:63:0c:68:
ab:ff:20:80:1f:82:87:00:fe:6b:cc:ad:68:5e:d8:
5e:d4:1f:f2:a8:13:b6:f3:62:4c:92:04:52:55:bd:
b3:82:05:f2:d7:92:ca:45:20:de:3b:f8:db:61:95:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3A:61:07:B9:71:F2:43:5A:8A:D5:B5:31:38:93:40:DC:D9:0B:F6
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/VjphB7lx8kNaitW1MTiTQNzZC_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.33.0/24
93.127.170.0/24
Signature Algorithm: sha256WithRSAEncryption
04:5f:aa:bd:74:fc:12:8e:9f:aa:98:1d:06:2d:38:a4:d9:fa:
05:9d:68:58:15:3d:e7:b3:2c:79:f6:a9:1e:ad:11:d4:d6:4f:
16:5a:25:97:cc:15:3a:92:95:8e:0c:53:d3:f7:c1:41:d5:2e:
48:1e:71:de:92:6f:d7:45:ad:bf:4f:22:ce:99:97:70:e4:86:
c8:f0:0d:27:83:13:ef:9f:6a:7b:06:fa:a2:c3:9d:04:55:bc:
4a:82:2b:fe:7b:83:5d:c9:b8:87:27:fb:ab:ab:67:55:c5:56:
16:88:96:d0:fd:77:bf:bb:e4:64:73:b2:89:d9:ad:1e:31:5c:
39:fe:f7:cf:6b:be:99:16:78:b7:c4:ae:2a:89:f4:05:ac:11:
2e:8a:34:41:72:25:a0:85:27:e6:f1:ec:5f:70:5c:9a:47:86:
69:16:24:c9:87:b0:e8:75:b5:20:45:35:56:bb:b9:43:2f:36:
71:e9:f7:e2:5f:19:87:06:c9:f5:07:c9:7a:5f:54:d7:53:39:
e9:5f:14:7a:9f:a0:4e:7c:44:83:62:87:d3:88:42:4d:4f:df:
91:40:f5:9c:e7:36:69:e9:b9:fd:c8:e1:0a:cb:78:ef:74:b7:
c0:8e:cf:c4:94:7e:35:31:4c:21:51:de:d2:b0:d5:b9:a6:c4:
24:22:1b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:37:48 2025 by rpki-client