Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/YI38fqSgXexEl9V1GnAIw1iXuAc.roa
File: YI38fqSgXexEl9V1GnAIw1iXuAc.roa (raw, json)
Hash identifier: P7BxZuiH0KC0n7Sxk7Xtd9RuoRP7m5ENI1tOo7+T7O0=
Subject key identifier: 60:8D:FC:7E:A4:A0:5D:EC:44:97:D5:75:1A:70:08:C3:58:97:B8:07
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 018534474C375AAF378FF739F4F305B4E6FC
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/YI38fqSgXexEl9V1GnAIw1iXuAc.roa
Signing time: Wed 21 Dec 2022 10:42:45 +0000
ROA not before: Wed 21 Dec 2022 10:42:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.71.0/24 maxlen: 24
77.37.72.0/22 maxlen: 24
77.37.84.0/22 maxlen: 24
77.37.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:47:4c:37:5a:af:37:8f:f7:39:f4:f3:05:b4:e6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Dec 21 10:42:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=608dfc7ea4a05dec4497d5751a7008c35897b807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:b4:c3:8d:0f:d4:46:d6:0f:70:48:b2:7f:
69:4e:d5:83:3f:94:ce:82:c9:96:f6:a7:9b:67:b9:
6a:4e:ad:dc:10:95:8d:48:4b:25:8b:fa:a1:e2:86:
18:80:9e:7f:6a:27:e7:93:af:a4:11:cf:19:ec:87:
db:ce:e3:66:4c:a4:e8:fd:d3:f6:52:e8:e9:9a:de:
52:8a:2a:29:75:bd:aa:70:21:28:ec:70:a9:9e:69:
d6:e4:5d:06:5b:98:78:12:91:51:de:1b:c7:6b:40:
8c:ad:39:09:a9:4b:f3:fe:72:64:17:f1:56:26:af:
62:59:48:66:59:c7:e9:a8:53:23:2d:5a:28:7f:75:
41:9e:e6:f1:02:a0:b6:c8:72:47:7f:75:6b:34:93:
37:fd:5a:db:18:ae:b7:47:97:6a:ff:a9:68:80:35:
a5:6b:76:2a:56:77:95:f6:27:30:45:f3:ab:0b:4d:
b9:18:e2:cc:45:1d:ad:c8:58:54:45:93:5a:7e:73:
73:62:b6:86:1e:09:01:67:13:0f:ee:42:40:69:2c:
83:94:42:95:1d:e1:26:72:61:76:69:4a:1f:17:a8:
b8:67:2b:f3:90:ea:93:7b:aa:b3:4b:a3:56:5a:58:
91:e3:7e:8f:5e:2a:9b:7f:e6:87:4e:9c:be:2a:da:
5a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8D:FC:7E:A4:A0:5D:EC:44:97:D5:75:1A:70:08:C3:58:97:B8:07
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/YI38fqSgXexEl9V1GnAIw1iXuAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.48.0/22
77.37.71.0-77.37.75.255
77.37.84.0/22
Signature Algorithm: sha256WithRSAEncryption
af:f5:02:8e:64:4d:46:5f:a7:c7:ba:d8:05:e9:ab:76:38:2f:
85:90:53:3d:e4:f5:0f:cc:4a:24:7e:78:12:87:ec:54:81:c2:
cb:09:e6:51:ae:82:6d:11:5a:2c:40:3d:c0:84:05:a9:53:75:
fa:5d:8c:93:74:f3:e5:92:e4:fc:d5:4a:eb:a0:38:a4:1e:03:
f1:b0:fc:cc:31:42:55:16:46:61:be:10:5e:a7:e9:56:23:ab:
81:c8:31:cf:fc:fb:40:95:8a:95:52:01:31:a4:aa:b6:2f:89:
c8:a0:db:c1:49:2d:d9:9d:eb:c1:5d:a0:ca:a8:6d:dd:6c:2b:
89:d0:06:90:0c:8a:19:ba:0e:b4:1c:b4:6e:c1:c9:30:3e:7c:
ce:cb:14:e7:9c:65:0a:8e:44:86:34:79:44:13:04:f1:a1:13:
83:f6:12:cf:06:5f:3f:eb:92:bd:d6:30:d9:8f:d5:cc:a4:f8:
c4:63:04:ae:c4:f8:d8:fb:e9:fc:a8:14:84:09:5b:46:37:57:
6d:4c:21:24:0d:39:37:e0:c3:a7:5f:07:e5:66:ea:7a:ad:06:
db:fd:34:35:3a:98:94:2b:82:2e:d7:74:f6:0b:20:72:3b:e2:
0d:3b:f7:47:ca:b8:95:77:ec:55:54:e9:4c:a8:db:b4:75:98:
f3:2c:93:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:35:30 2025 by rpki-client