Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/gnrMW6XL7499WexrCL7qzbnvVcA.roa
File: gnrMW6XL7499WexrCL7qzbnvVcA.roa (raw, json)
Hash identifier: KlmBV49LIG9LD5dkpDDW0jci+zrEw1pf7S2sOFH42hk=
Subject key identifier: 82:7A:CC:5B:A5:CB:EF:8F:7D:59:EC:6B:08:BE:EA:CD:B9:EF:55:C0
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0185392C1F79587306D2222F6743B6C19D9B
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/gnrMW6XL7499WexrCL7qzbnvVcA.roa
Signing time: Thu 22 Dec 2022 09:31:11 +0000
ROA not before: Thu 22 Dec 2022 09:31:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 93.127.165.0/24 maxlen: 24
77.37.37.0/24 maxlen: 24
77.37.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:39:2c:1f:79:58:73:06:d2:22:2f:67:43:b6:c1:9d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Dec 22 09:31:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=827acc5ba5cbef8f7d59ec6b08beeacdb9ef55c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:64:49:b4:61:46:7f:79:61:9a:e6:59:d4:
c2:fe:fd:b6:d8:29:63:6d:b1:e8:8e:c7:1e:40:9b:
db:c3:43:3d:86:ad:b2:a5:79:67:b7:65:44:b1:41:
5f:39:bd:9d:be:11:db:d4:b7:82:6f:93:dc:b7:a3:
5e:69:5d:ae:50:20:9b:f1:b8:20:f2:20:46:3e:65:
c7:34:46:5a:50:30:03:a7:a3:9d:99:be:42:3d:3c:
fc:bc:a9:1b:0b:b8:6a:e2:78:6b:0d:f3:dc:fa:8e:
7b:f7:55:88:e2:dd:7e:c4:93:8b:7a:3b:82:3e:99:
67:8c:c8:4a:f4:58:b0:24:09:cb:03:9a:99:cf:f7:
36:47:d8:14:9f:2a:e6:20:9a:7e:d4:ae:28:8f:2d:
52:34:50:a1:26:6b:8d:44:71:bc:b1:5c:3e:34:25:
21:49:b3:fb:87:3a:bb:b9:e7:a5:f2:fb:59:8a:6c:
34:c7:69:88:aa:48:2f:8f:30:e6:07:1e:e7:d7:b6:
37:f7:63:73:96:ec:fb:f1:40:8b:2a:da:63:96:bb:
cc:32:52:7a:91:f6:00:bb:f2:ba:a3:83:c2:05:fd:
e7:99:18:cb:1d:2e:ad:7f:d7:7c:6d:74:c0:7f:fe:
69:07:96:fe:3e:24:8b:20:de:7c:67:98:ea:ca:83:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7A:CC:5B:A5:CB:EF:8F:7D:59:EC:6B:08:BE:EA:CD:B9:EF:55:C0
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/gnrMW6XL7499WexrCL7qzbnvVcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.37.0/24
77.37.57.0/24
93.127.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:e0:65:7b:0e:b1:3d:a0:36:58:c0:33:c0:27:8b:81:d4:ab:
6f:b5:46:57:27:9a:bd:98:bf:de:fb:3f:05:71:16:cf:ec:53:
69:40:69:94:a7:84:1b:98:3d:03:92:2a:de:d6:ea:5c:45:53:
0e:c6:92:be:b9:1c:e9:16:0d:64:4a:77:65:ef:55:f3:94:c6:
24:47:b9:a5:50:90:d1:c5:a9:f7:7f:c4:85:6f:dd:a8:40:47:
f4:78:03:77:6f:a0:95:c1:90:6b:3d:e7:0c:01:8d:cc:67:66:
c8:33:2b:2d:e1:04:9d:66:e9:a5:94:9b:9d:f8:dd:8d:0c:d7:
79:b1:0f:bb:7f:f4:8c:e2:42:82:11:4b:c9:0d:06:4f:2f:c9:
a8:6e:03:70:87:85:9d:30:9c:70:92:04:0d:47:4c:77:39:d0:
e4:aa:db:9a:c1:83:d2:71:e3:92:8c:a3:c0:91:20:13:30:77:
98:1f:30:e3:99:8c:9d:05:0d:90:9d:d2:ef:5e:ac:69:29:1b:
26:88:66:9d:65:46:03:8d:98:0e:15:5b:d4:4a:f8:cf:b5:f4:
a3:6b:88:83:b7:7e:ed:ae:a9:c8:87:a5:75:25:31:43:6b:e9:
24:36:b6:29:1e:fa:50:d7:c2:a8:6d:ac:05:95:6d:a3:00:7d:
5e:3d:8b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:35:43 2025 by rpki-client