Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/z9qnEbA97eI3zhaS-5vhS7ZFaTM.roa
File: z9qnEbA97eI3zhaS-5vhS7ZFaTM.roa (raw, json)
Hash identifier: hwyAGFOP9cd/QbnmxYakw0WcEkgs/JuEB6zKzvyMvsw=
Subject key identifier: CF:DA:A7:11:B0:3D:ED:E2:37:CE:16:92:FB:9B:E1:4B:B6:45:69:33
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0183AC6B463D5EB38B8BEF7BCCC4E3096850
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/z9qnEbA97eI3zhaS-5vhS7ZFaTM.roa
Signing time: Thu 06 Oct 2022 08:30:54 +0000
ROA not before: Thu 06 Oct 2022 08:30:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213202
IP address blocks: 77.37.96.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:6b:46:3d:5e:b3:8b:8b:ef:7b:cc:c4:e3:09:68:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Oct 6 08:30:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfdaa711b03dede237ce1692fb9be14bb6456933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:b7:71:71:2a:80:ad:4b:4a:c9:ee:41:fa:
70:20:c5:6b:e3:89:bc:97:8a:29:5f:95:c7:54:93:
fa:28:f6:88:0c:01:0a:d3:eb:a2:4b:e7:fe:bb:f8:
db:14:90:79:21:1c:f8:20:78:03:b1:5b:8c:db:2f:
07:f0:a6:e8:cd:4f:a2:88:88:a7:a4:2d:94:51:87:
5a:58:d3:15:e0:bd:ae:68:ab:b8:d9:c3:40:62:54:
b2:05:bc:b5:19:74:f0:a8:59:e3:30:95:a7:25:bb:
31:bb:69:51:61:0c:13:e7:88:4c:50:a9:b0:2b:04:
e2:89:1d:12:c8:48:1c:a0:8c:3d:9c:c6:60:95:4b:
f3:0f:9d:52:33:9f:96:5f:0d:17:a5:3f:e7:11:6f:
d9:39:10:7f:1a:b4:85:fb:c4:ec:90:99:e9:42:f7:
4a:dc:43:07:5f:30:76:6e:16:1f:66:89:b6:ff:8b:
08:66:04:1d:a6:84:59:1f:ca:52:22:09:ae:c8:8e:
ff:f6:42:72:38:d6:c6:b2:21:4d:a4:b5:e1:6b:e0:
15:4f:d2:e7:2b:57:6f:03:c0:39:16:8e:c0:23:56:
6f:57:fb:74:46:a9:d7:9a:8c:66:99:7e:25:1f:69:
f3:d7:b1:3b:81:95:b3:2f:a2:14:e5:02:76:ad:62:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DA:A7:11:B0:3D:ED:E2:37:CE:16:92:FB:9B:E1:4B:B6:45:69:33
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/z9qnEbA97eI3zhaS-5vhS7ZFaTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.96.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:fc:35:6c:a3:2b:63:5a:50:9e:bc:68:c7:a4:e4:a0:d7:aa:
26:28:0b:4c:ad:bf:97:a0:64:69:8f:e2:21:41:5e:d8:f7:29:
e8:3f:1c:d2:fa:8c:1c:71:7f:ad:58:ae:4d:ba:bb:8d:41:51:
23:1e:3f:08:64:28:03:9f:ca:10:c1:5a:3e:4f:e0:6b:bb:69:
a8:60:4a:45:56:8a:77:1a:b4:a4:42:18:26:f2:d5:23:6a:69:
86:3a:91:dd:b5:3a:53:d2:9f:f7:db:69:f8:72:7f:f4:22:2a:
af:c2:39:80:76:26:58:56:b2:d9:eb:e8:ee:29:aa:b8:94:6b:
b6:93:24:8b:5f:77:c1:c0:cc:9f:e7:aa:3b:4c:4d:8f:58:a4:
a7:ba:a6:e6:3a:5a:44:4b:5c:3b:ee:22:75:3c:f7:68:17:82:
7f:5d:82:25:a6:eb:43:3b:06:cc:e0:14:2a:ab:50:50:e5:81:
a6:14:f6:ed:52:10:89:90:bc:43:3f:0f:68:c2:a7:b5:89:75:
2e:6d:20:f8:5d:c2:43:b0:0d:10:91:15:b6:df:9c:4d:9c:4d:
85:5c:41:81:ea:ec:ca:92:63:bd:06:96:e1:e4:b1:8a:a6:dc:
9c:ce:31:e4:c5:56:e2:dc:46:3c:0d:4a:1a:62:68:5a:5a:b1:
49:53:b4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:40:29 2025 by rpki-client