Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/z-tiL1vMwC2S041G6fwHHJ-BzsQ.roa
File: z-tiL1vMwC2S041G6fwHHJ-BzsQ.roa (raw, json)
Hash identifier: DW+zcWZcd+1lffn81/GdJR36OSvozjCQrNS7MIhhy/U=
Subject key identifier: CF:EB:62:2F:5B:CC:C0:2D:92:D3:8D:46:E9:FC:07:1C:9F:81:CE:C4
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 018553A8113B9B0657B01974084D6FECD0B9
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/z-tiL1vMwC2S041G6fwHHJ-BzsQ.roa
Signing time: Tue 27 Dec 2022 12:56:41 +0000
ROA not before: Tue 27 Dec 2022 12:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.71.0/24 maxlen: 24
77.37.72.0/22 maxlen: 24
77.37.84.0/22 maxlen: 24
93.127.223.0/24 maxlen: 24
77.37.32.0/24 maxlen: 24
77.37.48.0/22 maxlen: 24
93.127.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:a8:11:3b:9b:06:57:b0:19:74:08:4d:6f:ec:d0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Dec 27 12:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfeb622f5bccc02d92d38d46e9fc071c9f81cec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3a:5c:f4:ca:13:8f:28:9d:fd:36:e0:79:3f:
90:b4:ae:82:ce:62:69:d9:ac:bd:55:bf:0b:c6:e7:
4a:3c:06:65:5a:99:8d:ba:bf:1f:b0:cf:57:47:57:
4a:d7:49:2e:4c:fe:d4:3e:b7:ab:1f:d2:1a:4c:08:
ab:55:65:c5:02:1a:a8:99:53:d3:d9:14:25:91:01:
b4:38:c3:e5:c8:ab:c0:e6:18:e2:f3:39:91:d3:5d:
5a:7c:dc:f1:8e:36:c0:c2:c4:f9:08:68:4c:e3:4b:
3a:a6:d6:ad:3e:69:33:98:a4:4c:2b:f6:e2:a6:d3:
15:8e:c4:d8:a7:2a:32:24:43:39:c8:7d:69:a3:11:
77:5b:05:ea:05:3a:86:00:4b:b6:0c:49:d7:dc:4a:
a7:da:28:8f:01:e9:ca:49:15:bb:1f:72:16:b3:8a:
eb:dd:c9:3a:93:bb:ed:6c:51:35:40:f9:71:0c:d0:
4c:1b:ca:85:19:88:a1:c0:68:43:50:26:ca:56:50:
55:c6:05:3d:99:dd:d7:f8:aa:2d:5a:a2:8b:3d:8c:
bd:e0:41:d5:3e:fe:af:65:09:b7:70:db:b9:4d:ba:
5f:d3:64:ea:55:ec:22:6c:19:01:c3:31:cd:d8:e6:
61:9d:b8:6d:47:21:be:e2:76:70:65:11:30:e4:b9:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EB:62:2F:5B:CC:C0:2D:92:D3:8D:46:E9:FC:07:1C:9F:81:CE:C4
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/z-tiL1vMwC2S041G6fwHHJ-BzsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.32.0/24
77.37.48.0/22
77.37.71.0-77.37.75.255
77.37.84.0/22
93.127.187.0/24
93.127.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:85:ba:1b:d1:ac:89:20:ee:97:54:15:b2:b1:d0:4b:80:e0:
b5:ed:46:7e:fe:a2:ff:d2:3c:97:62:a9:07:3c:33:49:8b:d7:
28:6b:b6:6e:87:1b:16:c4:95:41:bc:b2:81:c1:8b:59:c3:30:
7c:b3:c1:7b:02:e9:12:fd:26:88:49:81:3b:ba:1d:9c:d0:2d:
ce:d4:e0:de:c1:e7:d8:d2:95:8e:9d:53:c4:c1:4e:62:74:03:
c2:82:4f:01:49:b2:d0:c5:c2:70:2d:f0:d3:cd:8b:a6:67:36:
e1:83:c2:ea:0c:6c:66:f1:98:68:43:5f:73:94:56:f4:26:57:
ff:48:ed:17:52:94:62:75:b2:9c:06:90:70:e9:25:4d:ff:15:
79:e0:02:01:9c:16:d4:52:16:79:0d:ea:62:c4:16:44:86:7c:
7a:d5:4b:ef:3d:3a:bc:b8:9a:c3:03:7a:5a:f5:b4:74:99:19:
72:09:0b:7b:3f:31:48:7e:70:9d:f1:71:34:79:f1:e7:b7:42:
44:58:4b:e7:7b:79:94:ec:87:32:ee:b6:75:2c:75:80:bc:c7:
d2:a6:3f:90:bc:10:19:81:e9:dd:a0:c9:7f:d1:7c:a9:a6:ce:
0b:9d:4e:15:48:7b:42:41:d8:fe:ac:60:b7:40:54:69:38:44:
64:49:06:4f
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYVTqBE7mwZXsBl0CE1v7NC5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjIxMjI3MTI1NjQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmViNjIyZjViY2NjMDJkOTJkMzhkNDZlOWZjMDcxYzlmODFjZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjpc9MoTjyid/TbgeT+QtK6CzmJp
2ay9Vb8LxudKPAZlWpmNur8fsM9XR1dK10kuTP7UPrerH9IaTAirVWXFAhqomVPT
2RQlkQG0OMPlyKvA5hji8zmR011afNzxjjbAwsT5CGhM40s6ptatPmkzmKRMK/bi
ptMVjsTYpyoyJEM5yH1poxF3WwXqBTqGAEu2DEnX3Eqn2iiPAenKSRW7H3IWs4rr
3ck6k7vtbFE1QPlxDNBMG8qFGYihwGhDUCbKVlBVxgU9md3X+KotWqKLPYy94EHV
Pv6vZQm3cNu5Tbpf02TqVewibBkBwzHN2OZhnbhtRyG+4nZwZREw5LmgjwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFM/rYi9bzMAtktONRun8Bxyfgc7EMB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvei10aUwxdk13QzJTMDQxRzZmd0hISi1CenNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQATSUgAwQC
TSUwMAwDBABNJUcDBAJNJUgDBAJNJVQDBABdf7sDBABdf98wDQYJKoZIhvcNAQEL
BQADggEBABqFuhvRrIkg7pdUFbKx0EuA4LXtRn7+ov/SPJdiqQc8M0mL1yhrtm6H
GxbElUG8soHBi1nDMHyzwXsC6RL9JohJgTu6HZzQLc7U4N7B59jSlY6dU8TBTmJ0
A8KCTwFJstDFwnAt8NPNi6ZnNuGDwuoMbGbxmGhDX3OUVvQmV/9I7RdSlGJ1spwG
kHDpJU3/FXngAgGcFtRSFnkN6mLEFkSGfHrVS+89Ory4msMDelr1tHSZGXIJC3s/
MUh+cJ3xcTR58ee3QkRYS+d7eZTshzLutnUsdYC8x9KmP5C8EBmB6d2gyX/RfKmm
zgudThVIe0JB2P6sYLdAVGk4RGRJBk8=
-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:44 2025 by rpki-client