Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/lrd9WI8vZ16ZVWUe1G-OQ0J9B9E.roa
File: lrd9WI8vZ16ZVWUe1G-OQ0J9B9E.roa (raw, json)
Hash identifier: FK0b7Zt/rogY37Z6NQR2DfmcQzXNVZFhAEgOm9VInm8=
Subject key identifier: 96:B7:7D:58:8F:2F:67:5E:99:55:65:1E:D4:6F:8E:43:42:7D:07:D1
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01859B17B09EFF8ADFF681766BF36157ACDC
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/lrd9WI8vZ16ZVWUe1G-OQ0J9B9E.roa
Signing time: Tue 10 Jan 2023 09:51:39 +0000
ROA not before: Tue 10 Jan 2023 09:51:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.71.0/24 maxlen: 24
77.37.72.0/22 maxlen: 24
93.127.223.0/24 maxlen: 24
77.37.95.0/24 maxlen: 24
77.37.32.0/24 maxlen: 24
77.37.44.0/24 maxlen: 24
77.37.48.0/22 maxlen: 24
93.127.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:17:b0:9e:ff:8a:df:f6:81:76:6b:f3:61:57:ac:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 10 09:51:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96b77d588f2f675e9955651ed46f8e43427d07d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d3:aa:d2:ce:c9:45:a5:5b:bd:1d:c2:bf:ff:
96:a1:5b:b4:01:51:8a:d1:cb:2f:93:5c:54:fb:ef:
b1:9b:a2:ad:56:32:c7:96:25:53:6b:5e:c8:97:b7:
1e:03:3e:86:2f:c2:0b:7f:ea:d2:27:60:17:62:a6:
48:05:b9:1c:6d:82:1a:c2:8f:8a:75:23:d6:9c:5d:
b1:e8:d1:72:88:66:57:ab:d2:b3:95:83:83:e2:5c:
8a:fc:df:68:83:27:83:6e:d8:86:32:8b:0e:97:05:
69:c1:d2:79:a7:39:b4:f6:62:e9:6b:f9:b1:ef:67:
23:48:be:dc:cd:e8:ee:9d:4f:a6:60:50:67:6e:d6:
b0:25:3a:91:ec:98:c7:88:27:7c:55:23:91:c9:a1:
93:60:cd:83:57:74:da:67:bd:81:28:67:55:e1:36:
ba:84:16:f7:95:3d:7c:b2:cd:e7:18:23:77:89:ab:
b6:d0:8b:5c:b1:8b:81:50:79:db:0b:69:db:38:25:
c3:7e:29:00:6e:4c:29:46:88:de:10:d3:94:b5:7c:
01:ba:e4:6d:e4:0d:43:43:ba:fe:af:81:82:53:15:
67:67:bb:5a:ee:8d:02:ef:75:d7:0a:a1:4e:97:a4:
2b:dc:23:cd:e4:d8:30:4b:1a:34:be:fd:f5:0c:52:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B7:7D:58:8F:2F:67:5E:99:55:65:1E:D4:6F:8E:43:42:7D:07:D1
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/lrd9WI8vZ16ZVWUe1G-OQ0J9B9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.32.0/24
77.37.44.0/24
77.37.48.0/22
77.37.71.0-77.37.75.255
77.37.95.0/24
93.127.187.0/24
93.127.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:6a:b5:b5:f2:b5:a8:73:e2:ec:e1:54:1e:51:7f:7e:dc:7e:
44:72:6c:27:0c:68:bd:a6:34:bb:23:0c:a7:88:a3:80:14:61:
4c:4d:92:4a:6a:bd:f4:35:2b:f9:d4:f8:91:b6:db:91:8e:34:
68:94:52:3e:82:6f:05:05:82:a6:b5:af:ab:40:74:6e:aa:c4:
39:82:2b:3c:3c:64:c8:24:d4:7d:b6:c8:52:ac:52:93:30:53:
45:aa:ec:4b:88:31:06:8c:69:08:8d:3d:50:e3:a1:6c:71:fe:
f3:d2:6f:be:14:ae:79:74:4c:c7:d8:14:14:34:bf:4a:24:1c:
ac:d6:2d:3b:ff:93:31:a3:33:03:5c:bc:bc:00:d4:02:7a:10:
fa:8b:af:02:ae:bb:70:18:e4:f5:cc:33:6a:1d:7d:20:1c:5c:
e5:73:de:da:74:a8:e7:db:83:8e:b3:eb:10:da:82:ce:12:7b:
ac:7c:4d:a1:dc:80:cb:90:87:af:c4:75:02:72:53:df:ce:7d:
ed:3c:43:c3:81:09:72:04:8a:22:a9:fa:c0:35:9e:9d:4c:93:
85:d8:7d:b7:3d:b3:de:b3:83:f0:7f:98:60:f8:8a:0a:3f:3f:
7a:90:47:b1:9a:68:b5:1e:18:a4:a4:80:2d:ae:9a:03:d5:23:
4c:20:92:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:41:42 2025 by rpki-client