Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/XEDdL0KkIiylHnY5cIppXwq-J4c.roa
File: XEDdL0KkIiylHnY5cIppXwq-J4c.roa (raw, json)
Hash identifier: zzO6cS6xARAKz5upFVS9advhmwk2W4S9W8ahCS/TKfw=
Subject key identifier: 5C:40:DD:2F:42:A4:22:2C:A5:1E:76:39:70:8A:69:5F:0A:BE:27:87
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0184AB58232A51C37D704A0001A2BC8C06E0
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/XEDdL0KkIiylHnY5cIppXwq-J4c.roa
Signing time: Thu 24 Nov 2022 20:33:10 +0000
ROA not before: Thu 24 Nov 2022 20:33:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 77.37.92.0/24 maxlen: 24
77.37.95.0/24 maxlen: 24
77.37.9.0/24 maxlen: 24
93.127.164.0/24 maxlen: 24
93.127.169.0/24 maxlen: 24
93.127.171.0/24 maxlen: 24
77.37.40.0/24 maxlen: 24
77.37.43.0/24 maxlen: 24
93.127.179.0/24 maxlen: 24
77.37.58.0/24 maxlen: 24
93.127.190.0/24 maxlen: 24
93.127.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ab:58:23:2a:51:c3:7d:70:4a:00:01:a2:bc:8c:06:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Nov 24 20:33:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c40dd2f42a4222ca51e7639708a695f0abe2787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:a0:b1:e6:71:e5:30:bf:9f:9b:e8:69:30:
ff:b2:df:e1:34:68:33:39:7e:f2:6d:6b:51:37:1f:
66:67:3b:1c:d7:68:a7:88:82:e8:95:6f:2e:e9:98:
e4:c1:e5:e3:92:02:99:91:f1:9d:74:89:33:07:17:
60:53:7b:57:0b:4d:b1:eb:12:14:bd:31:64:ba:0b:
4c:1e:ba:94:de:8e:20:17:83:8c:5c:a8:57:ea:36:
6a:3d:55:fd:c8:37:06:aa:2d:96:68:dc:13:a9:2c:
e3:50:ef:3a:db:4d:b4:87:81:05:da:51:cd:04:95:
eb:ce:a0:92:c0:5a:b4:35:5b:03:33:57:86:99:98:
ee:4c:83:82:d4:fe:26:3a:ef:b5:e0:c3:90:f4:ab:
e2:ab:32:5b:5c:55:17:ad:f4:bf:dd:d5:32:3f:db:
90:36:b8:3d:f3:f6:3c:92:73:89:0d:87:eb:fd:32:
ee:90:3e:4a:b6:a7:44:aa:87:1d:55:05:42:b5:ef:
12:5c:1e:8e:09:0b:a4:5b:07:7c:7e:58:f8:bb:55:
86:c4:77:6e:de:a3:6a:f8:89:44:8e:45:1e:56:10:
87:93:7e:91:0e:34:bb:6e:b7:dd:15:b5:42:9b:2b:
7b:37:cd:29:cd:70:83:7f:be:10:8c:99:e4:96:54:
67:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:40:DD:2F:42:A4:22:2C:A5:1E:76:39:70:8A:69:5F:0A:BE:27:87
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/XEDdL0KkIiylHnY5cIppXwq-J4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.9.0/24
77.37.40.0/24
77.37.43.0/24
77.37.58.0/24
77.37.92.0/24
77.37.95.0/24
93.127.164.0/24
93.127.169.0/24
93.127.171.0/24
93.127.179.0/24
93.127.190.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:3a:ec:b3:dd:fe:9e:53:b7:e8:f9:c1:1d:fe:5c:7b:ac:51:
1d:2e:b8:fc:77:bf:ac:ed:f0:ea:cd:d4:c9:9d:48:31:c5:a9:
ad:43:eb:96:5c:e0:fd:a2:ed:f0:a8:bc:6c:05:0c:2f:0b:f5:
20:c7:39:d7:3f:44:60:a8:0c:3f:3c:67:9f:0e:c0:af:00:23:
87:29:f5:7b:17:bd:36:a8:86:be:70:a0:85:a5:b3:b6:8e:03:
d5:f3:a9:1d:99:ac:42:14:2e:34:1a:c6:f2:a1:ca:ce:9e:98:
c5:49:56:bc:ec:63:a5:00:1c:34:6a:b6:ba:0f:6d:f7:a9:4e:
27:f8:7b:74:2e:10:c6:d9:7a:3f:32:bd:a5:ec:7b:e4:69:cb:
cd:d8:cd:33:6b:0c:fe:d1:02:10:cf:1b:8a:c0:b9:6c:8a:9e:
e9:91:6d:5b:42:04:70:a5:aa:9a:fd:9b:99:66:de:17:c6:78:
eb:a9:eb:4d:45:ba:b4:27:52:24:3d:1e:5a:e6:7f:1d:5a:eb:
e8:c1:8d:80:f7:6f:fe:12:0f:21:7a:41:bb:d7:ed:b4:b3:5e:
2e:1d:b6:5f:a5:f5:2e:e0:df:6f:fd:34:29:b9:f6:12:cb:71:
49:0c:06:dd:00:b7:3c:a5:d4:d6:57:07:0f:ae:99:b4:c8:21:
bd:36:bf:e3
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYSrWCMqUcN9cEoAAaK8jAbgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjIxMTI0MjAzMzEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzQwZGQyZjQyYTQyMjJjYTUxZTc2Mzk3MDhhNjk1ZjBhYmUyNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE2gseZx5TC/n5voaTD/st/hNGgz
OX7ybWtRNx9mZzsc12iniILolW8u6ZjkweXjkgKZkfGddIkzBxdgU3tXC02x6xIU
vTFkugtMHrqU3o4gF4OMXKhX6jZqPVX9yDcGqi2WaNwTqSzjUO862020h4EF2lHN
BJXrzqCSwFq0NVsDM1eGmZjuTIOC1P4mOu+14MOQ9KviqzJbXFUXrfS/3dUyP9uQ
Nrg98/Y8knOJDYfr/TLukD5KtqdEqocdVQVCte8SXB6OCQukWwd8flj4u1WGxHdu
3qNq+IlEjkUeVhCHk36RDjS7brfdFbVCmyt7N80pzXCDf74QjJnkllRnZQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFFxA3S9CpCIspR52OXCKaV8KvieHMB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvWEVEZEwwS2tJaXlsSG5ZNWNJcHBYd3EtSjRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQATSUJAwQA
TSUoAwQATSUrAwQATSU6AwQATSVcAwQATSVfAwQAXX+kAwQAXX+pAwQAXX+rAwQA
XX+zAwQBXX++MA0GCSqGSIb3DQEBCwUAA4IBAQB9Ouyz3f6eU7fo+cEd/lx7rFEd
Lrj8d7+s7fDqzdTJnUgxxamtQ+uWXOD9ou3wqLxsBQwvC/UgxznXP0RgqAw/PGef
DsCvACOHKfV7F702qIa+cKCFpbO2jgPV86kdmaxCFC40GsbyocrOnpjFSVa87GOl
ABw0ara6D233qU4n+Ht0LhDG2Xo/Mr2l7HvkacvN2M0zawz+0QIQzxuKwLlsip7p
kW1bQgRwpaqa/ZuZZt4XxnjrqetNRbq0J1IkPR5a5n8dWuvowY2A92/+Eg8hekG7
1+20s14uHbZfpfUu4N9v/TQpufYSy3FJDAbdALc8pdTWVwcPrpm0yCG9Nr/j
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:37:40 2025 by rpki-client