Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/i5SSpnm3yD_2qlKiJGNntgZU03g.roa
File: i5SSpnm3yD_2qlKiJGNntgZU03g.roa (raw, json)
Hash identifier: ncoCDwDHg5rm5lUJiGIAE2+szLl+kPIga6hBjZf/LrY=
Subject key identifier: 8B:94:92:A6:79:B7:C8:3F:F6:AA:52:A2:24:63:67:B6:06:54:D3:78
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01857702FAC9A16CA9D673FB4948F1E9C534
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/i5SSpnm3yD_2qlKiJGNntgZU03g.roa
Signing time: Tue 03 Jan 2023 09:42:41 +0000
ROA not before: Tue 03 Jan 2023 09:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 77.37.37.0/24 maxlen: 24
77.37.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:02:fa:c9:a1:6c:a9:d6:73:fb:49:48:f1:e9:c5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 3 09:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b9492a679b7c83ff6aa52a2246367b60654d378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:a7:18:78:f3:99:62:9e:59:bf:69:f9:42:
07:0a:06:de:02:94:f9:a7:ae:e5:c0:a3:6a:2b:0e:
25:6d:4e:2a:46:1a:05:b5:44:2d:21:11:8c:c1:74:
9d:14:5e:ce:53:de:0b:37:62:ab:cf:94:30:62:95:
46:3c:c3:3f:c9:53:f7:22:b4:4f:0a:02:1a:ea:c5:
e4:d1:fa:2f:2e:8d:90:6d:96:e7:cf:0d:2f:f3:fb:
06:2d:b1:a9:4b:a9:11:5f:e6:e2:c0:67:59:b2:82:
c9:19:76:2d:8e:81:58:f3:d2:ef:b3:a9:fb:15:88:
25:bb:29:e5:02:7a:a5:9d:0c:20:a9:b4:44:fa:bf:
34:71:b9:6a:ee:bf:3f:62:d3:94:42:69:0a:08:8e:
d9:91:03:b2:7f:fd:03:87:ef:a2:c8:5e:42:f9:74:
64:d4:d9:5e:82:1c:04:77:92:06:6a:b0:b0:f1:c8:
15:49:bd:51:fe:7a:f4:8c:3a:29:5c:4d:f2:21:e4:
de:4f:c1:d9:e4:f2:0c:f8:47:b1:a3:e4:b6:4d:8a:
e7:20:aa:1c:4d:3d:d2:c8:41:76:c5:82:f9:95:b8:
eb:bf:0f:09:8f:5f:86:06:08:37:12:be:f9:70:c6:
cf:39:b2:1d:2c:54:4c:ed:d3:1c:2b:5c:38:3c:e6:
8d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:94:92:A6:79:B7:C8:3F:F6:AA:52:A2:24:63:67:B6:06:54:D3:78
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/i5SSpnm3yD_2qlKiJGNntgZU03g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.37.0/24
77.37.57.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:62:4a:a2:42:1e:f6:06:16:93:3e:33:c4:44:62:48:be:33:
9a:7d:09:4b:de:03:83:d1:67:01:b4:5e:54:7d:f1:11:28:45:
0d:e8:13:36:49:45:1c:c8:26:b2:6e:c9:63:a0:33:79:4e:c5:
7c:ac:a3:c2:3e:2d:7b:2c:30:81:69:71:46:76:0a:77:62:95:
04:00:e1:da:0b:64:1a:e6:02:4c:ef:1c:d4:ff:81:3e:05:e8:
12:d6:74:07:a7:cf:ad:11:92:cd:34:be:5e:a7:a2:bd:61:e7:
36:06:24:e0:91:bc:b9:73:04:b5:74:6d:6d:33:d3:20:fe:83:
c8:92:56:18:2f:c8:59:92:20:6a:5e:80:fa:f8:f8:ff:ab:d0:
5b:b2:83:ed:b4:f9:b2:85:1f:69:67:ad:48:2d:9f:50:2d:fa:
ca:83:34:bc:1c:fd:06:b4:78:d1:62:9d:70:a7:e9:2f:15:90:
5d:97:da:6c:da:78:0c:9a:73:79:5e:05:fa:b7:e2:8a:61:ec:
77:ab:16:ec:c4:a0:a4:a9:44:e0:e0:7e:1d:56:f1:9d:b5:fd:
1c:c9:3d:1e:e7:f7:39:a3:60:af:1b:ae:fd:78:b1:5d:76:15:
d3:32:20:e6:95:59:8c:a8:38:67:f6:a7:b5:71:24:a7:85:d3:
7a:75:9b:d2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYV3AvrJoWyp1nP7SUjx6cU0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjMwMTAzMDk0MjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Yjk0OTJhNjc5YjdjODNmZjZhYTUyYTIyNDYzNjdiNjA2NTRkMzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWWnGHjzmWKeWb9p+UIHCgbeApT5
p67lwKNqKw4lbU4qRhoFtUQtIRGMwXSdFF7OU94LN2Krz5QwYpVGPMM/yVP3IrRP
CgIa6sXk0fovLo2QbZbnzw0v8/sGLbGpS6kRX+biwGdZsoLJGXYtjoFY89Lvs6n7
FYgluynlAnqlnQwgqbRE+r80cblq7r8/YtOUQmkKCI7ZkQOyf/0Dh++iyF5C+XRk
1NleghwEd5IGarCw8cgVSb1R/nr0jDopXE3yIeTeT8HZ5PIM+Eexo+S2TYrnIKoc
TT3SyEF2xYL5lbjrvw8Jj1+GBgg3Er75cMbPObIdLFRM7dMcK1w4POaNpwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIuUkqZ5t8g/9qpSoiRjZ7YGVNN4MB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvaTVTU3BubTN5RF8ycWxLaUpHTm50Z1pVMDNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATSUlAwQA
TSU5MA0GCSqGSIb3DQEBCwUAA4IBAQCuYkqiQh72BhaTPjPERGJIvjOafQlL3gOD
0WcBtF5UffERKEUN6BM2SUUcyCaybsljoDN5TsV8rKPCPi17LDCBaXFGdgp3YpUE
AOHaC2Qa5gJM7xzU/4E+BegS1nQHp8+tEZLNNL5ep6K9Yec2BiTgkby5cwS1dG1t
M9Mg/oPIklYYL8hZkiBqXoD6+Pj/q9BbsoPttPmyhR9pZ61ILZ9QLfrKgzS8HP0G
tHjRYp1wp+kvFZBdl9ps2ngMmnN5XgX6t+KKYex3qxbsxKCkqUTg4H4dVvGdtf0c
yT0e5/c5o2CvG679eLFddhXTMiDmlVmMqDhn9qe1cSSnhdN6dZvS
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:34:45 2025 by rpki-client