Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/vtcNCbJLT7_qeVrZ2d10lm_Jv3I.roa
File: vtcNCbJLT7_qeVrZ2d10lm_Jv3I.roa (raw, json)
Hash identifier: WhUSyIRKwaAfuyiPpA3y2B4Oz7WAEJUdegLVQwdQAf0=
Subject key identifier: BE:D7:0D:09:B2:4B:4F:BF:EA:79:5A:D9:D9:DD:74:96:6F:C9:BF:72
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01855C316FACF3D093C8B9C21584F7640469
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/vtcNCbJLT7_qeVrZ2d10lm_Jv3I.roa
Signing time: Thu 29 Dec 2022 04:43:41 +0000
ROA not before: Thu 29 Dec 2022 04:43:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.71.0/24 maxlen: 24
77.37.72.0/22 maxlen: 24
77.37.84.0/22 maxlen: 24
93.127.223.0/24 maxlen: 24
77.37.32.0/24 maxlen: 24
77.37.44.0/24 maxlen: 24
77.37.48.0/22 maxlen: 24
93.127.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5c:31:6f:ac:f3:d0:93:c8:b9:c2:15:84:f7:64:04:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Dec 29 04:43:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bed70d09b24b4fbfea795ad9d9dd74966fc9bf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:8e:94:31:b8:d5:89:c2:77:e0:a7:a7:e6:
be:a4:6d:60:db:c7:78:a4:5c:83:ce:bd:a9:9d:2d:
70:0a:0f:58:5d:af:bd:ae:2d:81:36:a5:9d:c7:6e:
1f:c5:da:3c:d7:6a:8c:6c:c3:39:e2:db:65:f6:de:
0a:bc:87:9d:36:a9:93:27:a5:0a:a8:c6:47:e7:65:
87:ba:e0:c4:8f:21:de:86:9d:a2:21:68:c0:13:c2:
27:24:b5:29:98:30:41:87:09:36:a1:39:b5:3a:bf:
25:40:4f:70:d5:9b:84:bd:89:a8:e4:6c:b3:8d:39:
90:5c:ca:69:e4:79:14:e1:d7:50:af:a9:bf:74:16:
a2:71:ce:43:c5:8f:5e:4d:d8:65:b1:96:ba:71:df:
24:ca:92:89:5d:ca:ce:6e:9b:95:5e:54:60:e3:68:
6a:97:46:c9:96:1a:95:9b:06:4b:c2:66:e2:64:17:
71:5c:5e:cd:59:9b:4f:ac:0e:cc:01:97:83:e3:91:
e4:81:34:a6:84:d0:5d:d5:a5:1c:20:40:9c:98:ba:
02:1d:38:07:b3:76:7f:55:17:b5:fe:83:12:d5:7d:
09:c2:56:39:cb:fa:b1:ec:15:3a:81:83:2f:69:05:
aa:b7:58:34:d0:14:61:9d:4b:76:05:95:b6:d2:7a:
82:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D7:0D:09:B2:4B:4F:BF:EA:79:5A:D9:D9:DD:74:96:6F:C9:BF:72
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/vtcNCbJLT7_qeVrZ2d10lm_Jv3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.32.0/24
77.37.44.0/24
77.37.48.0/22
77.37.71.0-77.37.75.255
77.37.84.0/22
93.127.187.0/24
93.127.223.0/24
Signature Algorithm: sha256WithRSAEncryption
44:7e:c8:7b:7a:d3:87:51:e3:ed:77:ca:e9:c3:51:62:a0:6f:
cd:52:54:bf:e0:10:0c:62:2b:4b:79:cc:ba:ff:a0:a7:4e:6e:
ef:31:97:76:3c:f8:a8:91:be:ec:a3:80:4d:4b:b9:66:01:f8:
96:80:73:b6:47:26:fd:f8:e5:3a:1b:9a:15:61:6d:29:06:10:
c5:31:c6:08:99:23:ec:59:70:52:71:37:c7:53:5f:0d:71:b3:
0d:5c:a4:22:52:9c:a8:15:4f:1c:a1:a2:e2:7a:f6:4e:98:60:
a5:74:18:93:17:c1:2c:b2:23:14:e8:e6:e4:4c:b9:0a:87:f0:
1b:ff:39:44:31:ae:c4:68:22:af:5e:76:b2:d5:71:fc:4a:2b:
60:77:d1:aa:f4:7b:e0:8f:5a:65:e1:97:0b:ce:42:4c:f5:b2:
f6:00:7a:bd:aa:b0:aa:98:38:f6:7c:0c:05:48:f3:fb:38:93:
8c:a0:24:16:e7:07:2d:ba:b9:61:c5:de:e7:08:4c:fe:04:b2:
92:9d:ef:09:9b:43:50:8a:26:d9:ce:ac:ae:fa:5a:4b:1d:0a:
69:3a:1e:67:a8:2e:df:55:2a:e7:ea:cc:9e:e7:da:24:70:df:
63:82:02:03:5b:f9:eb:34:09:e0:36:9a:2b:e9:be:a3:54:35:
08:07:4e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:30:37 2025 by rpki-client