Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/vOd_ebzIEpUX17SFYHLlz-vvZ-0.roa
File: vOd_ebzIEpUX17SFYHLlz-vvZ-0.roa (raw, json)
Hash identifier: djBeaxvxCAjvZOMLMKHzWeAqIJCOR2ZTKUThINHLUo8=
Subject key identifier: BC:E7:7F:79:BC:C8:12:95:17:D7:B4:85:60:72:E5:CF:EB:EF:67:ED
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 018437055F671C42922BAD7215FD8E8436EB
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/vOd_ebzIEpUX17SFYHLlz-vvZ-0.roa
Signing time: Wed 02 Nov 2022 06:26:49 +0000
ROA not before: Wed 02 Nov 2022 06:26:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 77.37.92.0/24 maxlen: 24
77.37.95.0/24 maxlen: 24
93.127.164.0/24 maxlen: 24
77.37.40.0/24 maxlen: 24
77.37.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:05:5f:67:1c:42:92:2b:ad:72:15:fd:8e:84:36:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Nov 2 06:26:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bce77f79bcc8129517d7b4856072e5cfebef67ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:b5:99:98:45:34:5d:68:89:d9:88:ea:c5:
89:80:93:28:63:e5:c6:f5:4c:de:78:1a:f0:58:b6:
64:51:80:47:10:2c:82:39:50:0c:08:97:8e:a5:0e:
ba:d2:5a:10:34:1a:ea:0c:b1:08:c7:86:56:91:a5:
22:77:ef:00:07:4f:2c:2b:b7:92:de:dc:28:17:c7:
84:c4:36:10:3c:31:15:e2:1a:b9:ab:c4:44:97:60:
c1:87:a2:75:21:5d:9f:2e:88:37:52:b9:f4:15:5a:
8d:c9:c1:dd:dc:d4:7d:6b:a6:35:d8:ba:b8:6e:45:
dc:b0:e2:62:1e:30:ff:d1:3b:4c:84:7c:f5:99:2b:
0c:dc:b1:7c:90:67:49:e7:2e:1f:d3:0a:d2:e5:6d:
d6:01:95:a1:21:09:6d:b7:84:6b:b7:5a:bb:a4:7f:
2d:4c:ee:8b:a6:dd:6a:e4:5b:22:21:28:5b:07:20:
69:50:3a:af:48:6b:c4:a9:2e:8e:a3:e2:5a:0d:f4:
15:fc:62:df:13:23:82:3a:57:24:94:d5:36:c5:31:
c5:10:1f:4a:db:02:3e:04:6e:49:67:ee:85:19:48:
18:5d:ed:2a:50:b5:18:39:b7:8a:89:2d:82:33:32:
83:c5:98:56:70:54:a0:27:ca:ec:24:58:29:2d:00:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E7:7F:79:BC:C8:12:95:17:D7:B4:85:60:72:E5:CF:EB:EF:67:ED
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/vOd_ebzIEpUX17SFYHLlz-vvZ-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.40.0/24
77.37.58.0/24
77.37.92.0/24
77.37.95.0/24
93.127.164.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:da:c8:d9:5e:0b:67:55:20:93:b9:04:4f:cc:6e:c7:5f:83:
dd:cd:b7:42:1a:b8:5c:e9:83:17:60:bc:f1:d2:92:b8:60:de:
7d:59:7b:e6:d9:91:54:9e:64:5b:7c:ec:f9:5d:da:b5:0c:0b:
f4:c9:ba:5b:8f:f8:fe:65:cb:74:58:d1:12:ed:0d:cb:ef:df:
11:1b:c8:df:26:18:84:19:6b:c9:f0:01:2f:23:4c:f9:2b:32:
c6:ea:7a:8c:6a:47:d7:39:77:e7:cb:40:55:0b:74:ff:d5:27:
31:09:b6:b2:d6:6f:f7:83:55:5c:cd:b1:a3:22:b8:4e:07:f0:
46:eb:80:ab:42:b6:76:ac:dc:59:f6:40:79:40:29:5d:22:43:
a9:4e:8c:7e:c1:d3:af:ee:56:b8:0e:25:64:5a:90:5f:57:38:
f5:15:48:74:77:1e:4b:4f:22:7b:95:8a:29:45:0f:80:7e:1b:
8b:91:20:30:b9:20:8d:ba:73:fc:e5:dc:c5:eb:41:7c:13:45:
25:b9:97:fe:dd:39:a5:d1:eb:3b:05:c9:8e:dd:62:7d:b4:98:
87:7d:27:d3:28:47:a2:a5:6e:01:c3:f2:d7:25:a8:15:88:ca:
94:f0:85:47:dc:2e:8e:f9:74:19:5f:30:83:e9:66:1c:db:31:
c3:57:0d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:31:25 2025 by rpki-client