Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/ccyDjSVyC2BTaG6phI6iperUiI8.roa
File: ccyDjSVyC2BTaG6phI6iperUiI8.roa (raw, json)
Hash identifier: RZORlTNxLvkEZf/WEEvSQyPBG326lkzVwhQGqVWU7k8=
Subject key identifier: 71:CC:83:8D:25:72:0B:60:53:68:6E:A9:84:8E:A2:A5:EA:D4:88:8F
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0184FA42EC7478CBC4345703350540923D6C
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/ccyDjSVyC2BTaG6phI6iperUiI8.roa
Signing time: Sat 10 Dec 2022 04:20:00 +0000
ROA not before: Sat 10 Dec 2022 04:20:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 77.37.92.0/24 maxlen: 24
77.37.95.0/24 maxlen: 24
77.37.9.0/24 maxlen: 24
93.127.164.0/24 maxlen: 24
93.127.171.0/24 maxlen: 24
77.37.40.0/24 maxlen: 24
77.37.43.0/24 maxlen: 24
93.127.179.0/24 maxlen: 24
77.37.58.0/24 maxlen: 24
93.127.190.0/24 maxlen: 24
93.127.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fa:42:ec:74:78:cb:c4:34:57:03:35:05:40:92:3d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Dec 10 04:20:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71cc838d25720b6053686ea9848ea2a5ead4888f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:a2:96:70:7e:fe:d6:58:a8:2b:fb:12:c7:
f1:03:20:60:99:7e:4a:fe:3f:dc:11:29:63:01:14:
92:1f:d5:df:05:39:3f:ec:59:aa:aa:db:74:fd:c4:
51:4c:ab:08:bf:48:4e:40:58:25:b6:61:7e:97:4f:
2c:db:92:4e:a6:1d:89:b6:e5:11:b6:3f:e9:62:b6:
b2:d2:1e:b7:40:96:12:cb:e5:69:0b:08:41:c8:f8:
5b:2e:17:eb:8b:31:e9:9d:9d:dd:21:52:5d:5c:4a:
47:82:be:8a:0b:1e:d3:7f:03:19:02:3b:32:43:4e:
c0:aa:c3:83:5b:1a:1a:98:14:b5:61:98:b4:c1:df:
8f:fe:aa:61:34:b5:c1:ae:33:50:33:d5:c1:be:64:
11:14:6e:4d:6a:3d:0b:51:67:b6:e0:f3:41:76:f5:
43:34:52:dc:88:1e:e6:00:91:c4:b3:e0:2e:cf:21:
bd:1b:e1:67:93:e0:e6:3a:00:00:70:97:9a:e2:69:
cf:2c:02:38:ba:9e:44:6f:ba:cb:20:bb:f6:e7:95:
02:27:50:b4:0e:5c:08:02:45:cb:38:21:1b:1c:a9:
d2:86:b3:5d:78:53:cd:71:62:ea:ef:fb:2a:1f:b2:
2c:cb:9d:35:1e:e6:87:12:e1:61:7b:2b:35:45:6c:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CC:83:8D:25:72:0B:60:53:68:6E:A9:84:8E:A2:A5:EA:D4:88:8F
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/ccyDjSVyC2BTaG6phI6iperUiI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.9.0/24
77.37.40.0/24
77.37.43.0/24
77.37.58.0/24
77.37.92.0/24
77.37.95.0/24
93.127.164.0/24
93.127.171.0/24
93.127.179.0/24
93.127.190.0/23
Signature Algorithm: sha256WithRSAEncryption
78:ec:ac:18:4c:f9:ef:f4:37:22:e2:c3:b3:f4:f2:5b:2a:3d:
ab:4b:a4:b1:8b:ee:16:e2:9d:19:30:d7:6a:60:73:81:27:f0:
21:19:90:7e:62:c4:b8:0d:85:66:03:d7:be:e2:46:6b:ea:4f:
9e:55:5d:5c:6b:ac:0f:98:78:39:06:ec:dc:96:b8:ac:45:05:
43:60:5c:92:c3:29:8f:7b:49:03:78:53:ea:85:5c:c7:c1:e0:
75:b3:25:9a:bf:f9:a7:0f:ac:d5:14:50:a5:05:1f:f4:90:10:
71:d0:2a:3f:55:f6:f3:e7:ec:73:84:f7:04:62:15:f6:fb:7e:
b2:28:fa:a4:f1:73:77:a5:e4:39:f3:08:35:f9:b0:ca:5d:03:
c6:37:98:a9:28:a6:d3:7e:db:32:6e:39:48:7b:83:67:05:f1:
36:f0:d1:ad:a1:e3:3d:87:c8:19:b1:50:71:2d:2a:b8:5b:72:
d0:58:92:88:73:f5:ca:64:a2:ca:f3:0a:06:41:f9:85:89:7b:
3f:7c:2b:9f:2c:23:87:36:59:f4:b2:3f:68:7f:bb:88:67:d7:
6a:92:e2:ab:7d:07:90:0a:e5:99:9c:c5:34:42:d6:da:75:eb:
65:7b:11:84:72:e5:3b:f0:fb:e7:8d:bd:9c:5a:84:4d:d9:f7:
04:1d:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:33:40 2025 by rpki-client