Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/hsWUy63PvfGK5-Zeq1B_AyZ4kLQ.roa
File: hsWUy63PvfGK5-Zeq1B_AyZ4kLQ.roa (raw, json)
Hash identifier: n9vuJEBhIFtJNHu6vIxfIvZKPyUOVJebsDZ38r4+74U=
Subject key identifier: 86:C5:94:CB:AD:CF:BD:F1:8A:E7:E6:5E:AB:50:7F:03:26:78:90:B4
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0184E11260DDB7159A7668044D30114D1EC1
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/hsWUy63PvfGK5-Zeq1B_AyZ4kLQ.roa
Signing time: Mon 05 Dec 2022 06:56:28 +0000
ROA not before: Mon 05 Dec 2022 06:56:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.71.0/24 maxlen: 24
77.37.72.0/22 maxlen: 24
77.37.84.0/22 maxlen: 24
77.37.44.0/22 maxlen: 22
93.127.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:12:60:dd:b7:15:9a:76:68:04:4d:30:11:4d:1e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Dec 5 06:56:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86c594cbadcfbdf18ae7e65eab507f03267890b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:68:17:87:4e:85:2f:9b:20:5a:81:1d:41:bd:
06:43:45:5e:77:8b:d6:ab:68:df:11:c2:47:76:3a:
9f:20:f8:bf:9b:55:c8:33:d3:28:cc:86:67:7a:2d:
df:a9:00:31:ca:ec:5e:5e:04:e5:79:26:71:6c:15:
62:45:a3:a8:b9:e3:8e:08:07:a0:18:1f:0c:82:f2:
b6:4d:2b:7f:4d:09:44:cd:5d:1c:16:cc:92:a1:89:
36:a5:bd:9b:f2:89:27:8a:9c:56:39:42:c4:f0:28:
17:69:1d:8e:3e:2d:32:14:67:35:c1:3a:93:28:f6:
c4:04:db:2f:16:4f:48:cd:97:d5:f0:be:19:4e:fd:
83:32:4e:4e:94:4c:1b:5f:9d:06:da:b8:3a:88:71:
2b:3c:b8:ab:c7:80:e1:1f:2b:ef:ac:68:1e:e4:e6:
1b:d0:79:8d:ba:4d:82:45:4d:9c:26:a8:5f:19:89:
9b:f7:24:2c:15:46:94:82:43:50:43:8f:dc:56:35:
02:9d:e6:56:9d:29:5e:de:86:d5:67:b9:40:e1:53:
9a:09:b7:ce:ca:c7:e3:64:3c:54:0c:c8:49:2e:44:
e2:3c:a6:2a:b0:c8:87:fd:3e:35:ae:47:b9:7d:a5:
c4:c0:03:33:cc:47:29:95:5f:c8:62:3a:7a:10:44:
b6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C5:94:CB:AD:CF:BD:F1:8A:E7:E6:5E:AB:50:7F:03:26:78:90:B4
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/hsWUy63PvfGK5-Zeq1B_AyZ4kLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.44.0/22
77.37.71.0-77.37.75.255
77.37.84.0/22
93.127.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:14:f2:0e:18:64:15:5e:83:b2:dc:df:65:46:09:57:d3:71:
5b:87:88:9e:a3:d2:f9:dd:65:a4:e1:64:15:4c:68:c4:e0:bb:
fe:94:ad:0f:87:57:76:68:9a:2c:c7:04:30:af:f7:d4:2d:d7:
96:ae:d9:2c:9d:72:fe:77:cc:9a:f8:f0:67:78:d4:57:3d:1a:
88:2b:01:db:0c:27:f0:e1:fe:a3:a0:4c:42:30:e7:0d:0f:10:
a7:84:ff:d4:d0:8d:58:c8:93:c5:cb:7f:70:0c:ed:5f:0e:98:
a4:3a:3e:95:2e:4e:b5:2f:67:49:b0:3a:b0:66:d3:7e:1b:55:
ad:ac:94:26:8e:aa:06:5c:55:67:cd:7b:15:7e:48:be:f5:d9:
46:6a:b6:6a:35:6b:3c:81:51:f5:08:9a:2d:47:a9:c7:37:ae:
05:f9:92:0b:15:3f:f8:0a:34:55:97:b8:37:6d:25:9b:2c:68:
47:ad:04:68:5a:22:6f:49:53:ce:47:4f:b1:cf:67:82:ac:3e:
f3:ee:32:54:33:3e:c7:73:ed:04:81:89:4c:f3:27:de:1a:ce:
1e:7c:02:12:70:96:55:a7:0d:1f:42:16:b5:66:7a:f7:15:9f:
04:08:d1:e5:e7:26:4c:67:ba:a3:cd:86:f8:fa:d1:be:5c:de:
85:cd:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:39:27 2025 by rpki-client