Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/opOjkF9DWfMeWuMosqstp3x80fY.roa
File: opOjkF9DWfMeWuMosqstp3x80fY.roa (raw, json)
Hash identifier: LiI+TBG9FEKiQXsFHcM4Pgr7JU7wENF5JDrg6pj+Dzg=
Subject key identifier: A2:93:A3:90:5F:43:59:F3:1E:5A:E3:28:B2:AB:2D:A7:7C:7C:D1:F6
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0183FCAABF3119040E4D4F2AF23D2D1D179B
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/opOjkF9DWfMeWuMosqstp3x80fY.roa
Signing time: Fri 21 Oct 2022 22:29:51 +0000
ROA not before: Fri 21 Oct 2022 22:29:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.36.0/22 maxlen: 22
77.37.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fc:aa:bf:31:19:04:0e:4d:4f:2a:f2:3d:2d:1d:17:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Oct 21 22:29:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a293a3905f4359f31e5ae328b2ab2da77c7cd1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:04:40:80:18:84:81:9a:3a:ef:4c:13:83:38:
1d:35:85:ff:97:90:11:36:9f:ed:f4:8d:9e:5b:d1:
b4:11:47:56:b0:a3:f3:41:31:a0:c0:d2:7a:24:af:
b4:72:2f:d5:e6:82:7a:70:4a:ae:5f:25:fd:76:58:
77:30:6b:a0:dd:2d:5c:00:6f:8f:b2:1b:31:57:d3:
82:98:7d:ef:d9:db:97:57:08:7d:91:a9:dc:bf:1d:
01:16:fd:34:3e:fb:12:e3:75:65:56:44:3a:0f:45:
e8:61:cc:46:6a:f4:68:21:6b:be:e0:71:63:60:e0:
7d:5c:95:1d:1c:4c:76:c2:f3:9a:d0:3c:92:6e:bb:
bc:6d:65:70:42:5c:39:77:d0:61:89:3b:a1:d8:3f:
35:e5:0f:48:98:23:39:33:31:cb:ec:45:9b:3b:6c:
36:62:ea:f4:9a:6d:18:75:9d:6d:71:fc:09:3c:3e:
6f:68:2e:5d:af:58:fe:a2:2f:e5:2f:54:0b:e3:3c:
ac:64:d0:af:d0:dc:ac:67:2a:63:ec:ce:47:0a:86:
62:64:4e:a7:00:b9:f5:ca:e1:ec:ac:fc:8b:0e:ba:
28:e4:f0:77:d0:d7:62:f0:6f:73:95:a4:d7:ef:57:
1a:fd:ac:50:ab:23:a3:df:8f:08:4d:92:67:02:f8:
52:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:93:A3:90:5F:43:59:F3:1E:5A:E3:28:B2:AB:2D:A7:7C:7C:D1:F6
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/opOjkF9DWfMeWuMosqstp3x80fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.36.0/22
77.37.44.0/22
Signature Algorithm: sha256WithRSAEncryption
23:13:c4:83:d3:cf:42:e4:7a:09:59:71:bc:f5:87:70:15:07:
55:0c:74:86:91:b0:aa:55:50:f9:29:97:7c:0d:e1:31:b9:63:
e0:bf:93:2e:c7:ad:37:67:81:3d:46:0f:3f:55:15:cc:a8:32:
a3:36:ab:ba:22:e2:e2:ed:d2:62:ab:63:25:3f:57:31:40:71:
d2:b6:21:24:43:67:be:da:e6:6e:38:0e:01:b4:c7:b2:38:28:
82:0c:96:41:19:f2:89:1c:93:17:74:43:06:83:f0:14:6b:c8:
91:90:8c:10:ad:db:03:2e:2e:fa:83:cf:a1:4b:e7:85:81:f5:
f5:e5:46:66:cd:72:2b:a3:b5:ef:26:15:33:48:d3:e6:f9:27:
bb:78:90:24:38:ac:16:50:67:74:d7:03:46:bd:49:40:e5:b9:
42:fb:95:21:d0:17:e6:51:d1:4d:d6:f0:6a:b8:1e:fc:13:a8:
7c:c7:68:fc:41:8c:8c:81:38:68:5e:24:57:0c:38:40:b0:4a:
ae:55:2f:91:ef:7f:1a:db:d9:d5:b0:eb:bb:c3:03:a0:05:67:
a7:7b:83:3b:9f:15:cd:bf:6a:cd:d6:7f:88:1a:40:af:3f:6c:
a8:72:3e:c2:6d:61:fc:de:cd:04:84:96:cb:25:5e:87:75:d1:
bd:9a:05:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:35:37 2025 by rpki-client