Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/imuVBnCxl1dUD94GaEo-LxdI8zg.roa
File: imuVBnCxl1dUD94GaEo-LxdI8zg.roa (raw, json)
Hash identifier: kAg1zGFTVC1fPgWvzcbaeWrRlha4pkNoIKHduO5SlEc=
Subject key identifier: 8A:6B:95:06:70:B1:97:57:54:0F:DE:06:68:4A:3E:2F:17:48:F3:38
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0184786833217FF951A74BAAEBAE538CAC19
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/imuVBnCxl1dUD94GaEo-LxdI8zg.roa
Signing time: Mon 14 Nov 2022 23:10:05 +0000
ROA not before: Mon 14 Nov 2022 23:10:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.71.0/24 maxlen: 24
77.37.84.0/22 maxlen: 24
77.37.36.0/22 maxlen: 22
77.37.44.0/22 maxlen: 22
93.127.184.0/22 maxlen: 24
93.127.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:78:68:33:21:7f:f9:51:a7:4b:aa:eb:ae:53:8c:ac:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Nov 14 23:10:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a6b950670b19757540fde06684a3e2f1748f338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:49:9e:7b:39:6e:3d:cb:38:5d:d2:31:85:
4e:b0:ec:dc:f2:03:4f:7b:3d:ce:00:db:1b:05:49:
33:c8:fe:85:23:4e:4d:7f:22:05:25:2d:f7:6d:ce:
a9:e3:eb:5e:fe:42:46:71:a2:cd:e9:c2:f1:ec:cf:
d1:9f:03:7c:1f:7d:09:a2:e5:22:c6:d4:f7:d6:b8:
84:23:4e:0a:95:3d:18:bc:09:8e:1b:b8:c6:b3:27:
20:87:55:5a:1a:7c:b0:b4:0e:ba:fe:39:d7:1b:36:
88:bf:1a:c3:b5:cc:51:49:52:ee:c2:6e:20:17:2b:
dd:1a:c6:5f:81:03:6a:17:37:a5:96:3a:03:91:71:
9d:f5:6a:a7:13:1e:aa:83:d4:7f:1f:36:3d:b2:b5:
e2:bd:ed:46:25:20:48:c7:a0:8c:71:ef:8f:14:a2:
f2:3b:d3:dc:5e:67:76:75:e8:c5:9a:75:e0:ca:ba:
37:4a:6c:5f:e7:49:be:07:2b:8c:e5:cf:37:39:d3:
3e:12:44:d4:bb:8a:8b:eb:6b:14:44:ce:2a:df:5e:
68:13:bd:4c:b6:28:41:ca:a4:74:a2:d6:fb:e6:2c:
7a:2a:92:15:d8:14:59:69:2d:15:08:7c:11:db:7b:
43:57:9d:6a:17:72:f4:06:df:1d:12:19:c2:2b:38:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6B:95:06:70:B1:97:57:54:0F:DE:06:68:4A:3E:2F:17:48:F3:38
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/imuVBnCxl1dUD94GaEo-LxdI8zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.36.0/22
77.37.44.0/22
77.37.71.0/24
77.37.84.0/22
93.127.180.0-93.127.187.255
Signature Algorithm: sha256WithRSAEncryption
18:7e:d1:9b:5f:ca:46:95:87:57:63:0d:8c:74:01:89:6f:0e:
8b:15:3b:cb:f5:ac:26:ee:e0:fc:0e:d9:70:6d:99:a0:a5:ec:
d9:d9:e6:65:df:9f:30:da:88:cb:43:fc:8c:02:54:10:e0:e6:
f6:8d:40:1b:4e:fd:0a:ad:54:b7:a9:55:ce:e5:9f:40:85:78:
39:66:bf:06:da:38:1c:0e:ed:3e:19:2d:0b:cb:88:c0:67:f3:
16:b3:48:76:bd:2f:1c:48:f7:b5:74:ba:aa:fa:04:31:1c:22:
ba:c7:17:73:6a:e5:b7:de:45:04:2e:d6:b7:b0:a5:87:a2:29:
1a:ce:4c:0c:81:e3:56:ee:1d:82:c5:52:c7:3e:c8:0f:e3:0f:
3a:55:25:2d:18:90:a6:64:81:96:aa:80:f3:c3:32:be:9a:2b:
ff:d0:d8:81:03:57:33:b0:93:2f:df:d9:e2:87:6a:81:b3:11:
55:5f:7b:5a:5e:07:5d:ef:9f:ab:04:5b:d3:c9:0f:51:24:64:
bd:6c:f8:5c:dc:25:bd:eb:20:cd:c2:c7:45:24:f9:48:2c:27:
88:76:84:fd:0a:a3:62:0a:fe:7e:e4:f7:30:fb:94:b6:f3:25:
5d:33:4b:19:2c:27:06:24:1a:1b:72:cc:f8:f3:84:b4:f7:8b:
88:49:0f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:34:38 2025 by rpki-client