Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/YYl25MRMEtrL3LdiMJGOHBBFAlQ.roa
File: YYl25MRMEtrL3LdiMJGOHBBFAlQ.roa (raw, json)
Hash identifier: igx9VBzRCZ5AoYiv7+cotjWXTYhn3AbOqRrnl79nWhw=
Subject key identifier: 61:89:76:E4:C4:4C:12:DA:CB:DC:B7:62:30:91:8E:1C:10:45:02:54
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 018558661031D38D38BF5045FDADB3A34D5C
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/YYl25MRMEtrL3LdiMJGOHBBFAlQ.roa
Signing time: Wed 28 Dec 2022 11:02:41 +0000
ROA not before: Wed 28 Dec 2022 11:02:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 77.37.33.0/24 maxlen: 24
93.127.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:66:10:31:d3:8d:38:bf:50:45:fd:ad:b3:a3:4d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Dec 28 11:02:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=618976e4c44c12dacbdcb76230918e1c10450254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:d8:cb:13:5b:0a:2a:69:19:07:79:8c:83:
52:10:57:4b:40:fd:3e:92:97:b5:45:cf:d6:c8:3c:
97:4d:f5:30:f4:c5:a4:7f:d5:db:b2:51:16:a4:35:
8f:52:ac:af:fc:5a:0a:cb:64:78:54:c9:de:ff:b3:
42:2c:75:b7:4e:28:a8:91:c8:da:bc:00:26:63:fa:
2b:15:e1:a8:0c:ad:23:3c:4c:f8:e4:55:28:b9:60:
77:f6:e3:57:e3:c8:df:13:81:01:df:b3:59:98:46:
16:e6:15:e1:2f:39:11:11:ae:5c:fb:3d:92:48:0f:
07:90:9e:ad:33:48:a0:92:e6:6b:e4:17:d7:00:ed:
55:ef:a2:21:9f:60:81:d5:77:e6:05:f4:b3:11:0c:
79:c4:ed:3e:0e:b0:8b:c8:9d:52:86:2c:45:9a:98:
0b:ce:ae:b0:54:e7:5c:18:c8:dd:5e:bf:ed:0c:0b:
32:73:78:1a:df:20:ec:6d:ae:82:4c:d7:5d:44:a7:
32:bf:f6:75:15:fc:ee:5a:88:8c:90:b1:35:bd:56:
cf:e5:52:06:a1:30:09:bd:37:3d:1c:6e:4e:f9:62:
d9:ae:ec:5d:61:a4:a8:7e:94:6b:b8:04:a1:46:b4:
1b:ac:66:95:e6:88:42:88:aa:8b:46:f7:98:75:2f:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:89:76:E4:C4:4C:12:DA:CB:DC:B7:62:30:91:8E:1C:10:45:02:54
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/YYl25MRMEtrL3LdiMJGOHBBFAlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.33.0/24
93.127.170.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e5:ed:4a:bd:b0:bc:9a:44:60:76:41:ca:8f:a7:f1:ed:19:
fa:33:0f:9a:1c:d9:81:8d:a0:46:98:e1:09:f2:ea:f4:15:ac:
b8:62:6a:c7:79:96:32:70:3d:67:1c:3e:e0:e9:04:ba:13:ae:
1f:9e:d8:b9:47:a6:f1:ff:56:e6:6e:e2:c3:ef:93:06:1f:62:
74:33:b0:2f:da:f3:44:ce:67:67:4a:ef:7d:b6:f6:9e:d6:8f:
fa:41:84:16:36:ad:98:6b:6d:9c:2f:e6:ff:ae:52:37:01:30:
76:8a:2b:93:fc:7c:62:38:54:11:88:49:36:38:d4:ae:9f:25:
7c:39:e5:94:b0:e7:93:c4:62:e5:06:bb:d5:cd:f9:dc:21:37:
20:0e:d9:17:a2:41:aa:62:12:aa:e9:32:69:8f:32:2a:2f:e3:
a1:28:eb:6c:4d:8e:2b:ec:4a:8a:d1:8c:69:e2:2b:7c:a0:ca:
a0:09:7c:4f:9e:62:e5:89:c5:89:93:32:90:b9:15:60:e8:1d:
13:b1:88:e7:d0:cf:8e:80:04:ff:e1:f7:d8:a4:97:15:5d:b4:
79:92:0b:e8:da:9a:5f:00:88:94:20:18:1f:d8:53:ef:64:92:
90:38:f6:22:1d:38:4e:45:c1:83:fc:3a:31:c2:4e:eb:d5:bd:
9a:20:6f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:37:49 2025 by rpki-client