Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/iC2kGpKF5AQvksG5mHT7Hq805Oo.roa
File: iC2kGpKF5AQvksG5mHT7Hq805Oo.roa (raw, json)
Hash identifier: bpW5OiGY0KDJgKbj+Rvm5HyB0NS8InFvsPEZGNGc2hE=
Subject key identifier: 88:2D:A4:1A:92:85:E4:04:2F:92:C1:B9:98:74:FB:1E:AF:34:E4:EA
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 018570705F33ACE94312E5CE723DEB1412BD
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/iC2kGpKF5AQvksG5mHT7Hq805Oo.roa
Signing time: Mon 02 Jan 2023 03:04:50 +0000
ROA not before: Mon 02 Jan 2023 03:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 77.37.9.0/24 maxlen: 24
93.127.166.0/24 maxlen: 24
77.37.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5f:33:ac:e9:43:12:e5:ce:72:3d:eb:14:12:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 2 03:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=882da41a9285e4042f92c1b99874fb1eaf34e4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2c:f5:a2:49:a6:e4:68:b1:4a:95:09:de:e1:
59:c7:29:fb:dd:6c:d3:b8:4c:2e:aa:ad:fb:cb:bc:
8d:e3:97:f4:8e:c7:11:61:e2:63:ea:07:71:3d:8d:
1f:43:2c:81:4a:63:6f:40:2d:89:0e:ab:de:fb:73:
1b:11:f0:8c:e1:26:cd:c5:e8:2f:0c:d5:0a:02:3f:
89:09:69:b8:6f:06:81:60:70:eb:81:cb:6d:35:54:
9d:46:a7:63:0a:73:20:39:1d:b8:ac:78:e4:48:60:
74:14:79:28:03:63:56:48:4c:b5:43:66:60:b1:19:
18:14:fc:f5:ed:b4:54:11:5f:bf:ea:6b:a8:88:8e:
77:01:62:5c:31:ea:b5:19:c9:de:62:8a:3b:1a:8b:
59:e0:33:b7:1d:ca:73:cb:f7:b8:a2:f9:26:55:cc:
94:ba:e3:42:8a:5a:c1:8b:ff:f8:b3:98:25:7b:16:
da:a1:b1:f4:f8:68:5d:e8:03:84:ae:f0:5b:cf:c9:
08:5a:9d:80:5d:80:a5:fd:07:45:6a:59:d1:ed:6c:
36:86:0d:d1:b2:07:9d:c3:ae:5e:99:e6:b2:eb:82:
8a:7b:af:7e:db:d4:37:c2:73:47:c4:2e:95:49:bd:
e3:c8:e8:be:41:fd:0b:a1:22:e7:5c:3a:6e:ff:37:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2D:A4:1A:92:85:E4:04:2F:92:C1:B9:98:74:FB:1E:AF:34:E4:EA
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/iC2kGpKF5AQvksG5mHT7Hq805Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.9.0/24
77.37.38.0/24
93.127.166.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d7:5f:ca:c8:e7:f5:82:37:4d:f0:91:f4:52:3e:37:fa:bb:
56:a6:7d:99:dd:27:b1:30:1a:c1:54:a8:a6:d0:2c:61:b4:a7:
e0:a9:5e:d7:73:c6:40:72:fc:f7:59:09:cb:fe:b5:7c:7a:55:
b7:62:7f:98:e9:0c:58:2a:86:dd:a9:03:2f:41:86:67:40:50:
f8:2b:b3:8e:57:fb:19:d9:8c:82:b9:19:9e:0c:2d:36:9e:26:
e4:86:7f:63:26:fe:69:b3:0b:c9:f3:3a:e2:05:c3:e5:14:74:
78:ab:1c:3e:0a:b2:07:49:5a:66:12:db:58:0c:dc:c6:63:f0:
bb:46:6c:d9:52:8f:a9:5b:51:c8:62:ab:17:64:5c:22:01:5f:
79:fa:ad:a2:14:91:ea:cb:a4:ec:db:10:48:01:bc:b0:9b:f8:
70:d0:7b:ec:6b:0c:a1:0b:18:5e:c6:31:9e:6a:be:cd:05:87:
8b:86:38:34:1c:2e:bf:50:b2:53:94:cc:c8:d4:05:c0:06:8e:
ec:8c:96:2b:e4:1d:dd:49:f7:f1:1e:93:85:fa:d9:69:d6:28:
5a:75:20:41:45:e0:f3:b1:01:b8:de:ee:5d:00:d2:7e:dd:31:
e8:22:8a:6c:09:e9:c8:66:25:5a:15:5b:60:c8:6a:57:e8:2f:
b1:7d:be:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:39:47 2025 by rpki-client