Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/kb0Jq6_qbhPM68TujiLJR3ngVQ8.roa
File: kb0Jq6_qbhPM68TujiLJR3ngVQ8.roa (raw, json)
Hash identifier: zGOW52/UqzR4md6XgfP8CLvZOTX7ioo4cWuhGF3Oqp8=
Subject key identifier: 91:BD:09:AB:AF:EA:6E:13:CC:EB:C4:EE:8E:22:C9:47:79:E0:55:0F
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 33AF1F7D
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/kb0Jq6_qbhPM68TujiLJR3ngVQ8.roa
Signing time: Sat 01 Jan 2022 14:55:13 +0000
ROA not before: Sat 01 Jan 2022 14:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8893
IP address blocks: 93.127.224.0/19 maxlen: 19
185.171.76.0/23 maxlen: 23
185.171.78.0/23 maxlen: 23
77.37.108.0/22 maxlen: 22
77.37.106.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867114877 (0x33af1f7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 1 14:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91bd09abafea6e13ccebc4ee8e22c94779e0550f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:59:f7:0a:da:43:b2:00:65:14:d0:66:c0:
35:ca:9a:65:4f:b8:04:43:cc:c4:4a:82:23:8e:6c:
3a:17:97:91:d6:02:2f:48:19:1c:28:a5:2f:78:82:
bd:f1:f6:86:6d:35:ac:62:9c:bd:11:e6:d8:9d:c8:
56:8f:cf:53:6a:d8:9d:30:c7:ae:3b:65:1e:7e:66:
5f:88:fd:30:52:23:b9:da:7d:b4:4b:40:b7:a8:b1:
a1:7d:b4:ac:46:13:24:32:d2:9f:19:b9:07:05:10:
6c:69:0c:74:aa:58:60:b1:90:74:41:f7:98:68:eb:
1c:e9:4d:27:a6:70:b2:f0:fe:03:d4:c2:99:9f:2d:
2b:39:1a:42:1e:83:50:3a:40:96:42:81:d9:8a:e4:
4c:30:cd:1e:f0:63:48:2a:d1:4a:0d:9a:34:04:7c:
e4:15:83:e6:39:b1:1d:a2:df:ad:04:05:7e:8a:f9:
1b:eb:51:dd:6c:aa:08:35:68:f0:fa:6d:c0:5f:86:
e3:05:6d:d1:51:eb:a9:d9:5c:3c:ff:a3:15:b0:34:
60:c7:74:a8:4e:08:ab:bd:9e:9c:9e:15:01:77:f1:
72:da:c9:b6:08:58:76:0a:2e:a7:94:f6:fc:52:94:
5f:e1:15:c0:89:10:b8:20:50:fc:0a:9c:ac:40:69:
1c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BD:09:AB:AF:EA:6E:13:CC:EB:C4:EE:8E:22:C9:47:79:E0:55:0F
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/kb0Jq6_qbhPM68TujiLJR3ngVQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.106.0-77.37.111.255
93.127.224.0/19
185.171.76.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:83:a9:ae:f7:cd:0c:91:90:be:ed:16:fb:51:eb:3c:61:45:
35:05:b1:1c:d2:04:3c:b5:db:81:9c:c5:1a:e4:67:34:93:2d:
72:82:8e:a3:4e:bb:29:eb:c7:7d:3c:19:e4:a4:a4:3e:70:d2:
9f:b1:cf:3b:1a:9b:ee:e6:0f:90:1c:72:05:1b:e9:8b:6e:1e:
62:44:17:22:31:df:33:af:b8:e4:cf:60:68:5a:f5:f6:30:7a:
b6:b0:f7:6b:70:7c:50:64:14:bd:ef:c7:b3:35:85:ae:bb:6c:
33:1d:ea:63:67:75:ce:e6:c3:8c:87:e3:2c:e3:29:33:58:92:
06:dd:71:e5:55:11:76:4d:59:9c:d9:16:4d:ea:f4:1e:60:d3:
82:8c:f4:da:73:2b:92:9d:54:86:04:88:68:f1:6d:cc:62:24:
72:37:8c:f7:34:be:28:a6:a5:17:42:8e:52:c4:58:4a:cb:c3:
e1:52:92:38:7c:66:6e:f6:1a:04:69:4c:06:db:67:7b:9c:1a:
d9:14:30:24:d6:15:7c:6f:a6:26:2d:76:64:df:2d:c8:64:db:
62:b5:ff:33:7a:1f:eb:f5:a9:40:7b:f8:6a:26:f0:0e:03:26:
7b:b6:a7:86:9f:c0:2f:7f:cd:c2:17:1a:5b:eb:89:92:ad:5c:
b4:37:2a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:37:39 2025 by rpki-client