Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/fIsfmLnr_w2LCa-W9JFfz1bavck.roa
File: fIsfmLnr_w2LCa-W9JFfz1bavck.roa (raw, json)
Hash identifier: awolv9QzMx/fIIyt9ekcO6gN2FzZ5y/I3e3t34eXyhI=
Subject key identifier: 7C:8B:1F:98:B9:EB:FF:0D:8B:09:AF:96:F4:91:5F:CF:56:DA:BD:C9
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA4CC58DEC7D5694E1FA027428BA91
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/fIsfmLnr_w2LCa-W9JFfz1bavck.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62336
IP address blocks: 77.37.4.0/23 maxlen: 23
77.37.98.0/23 maxlen: 23
77.37.100.0/22 maxlen: 22
77.37.106.0/23 maxlen: 23
77.37.108.0/22 maxlen: 22
93.127.224.0/19 maxlen: 19
93.127.248.0/21 maxlen: 21
185.171.76.0/23 maxlen: 23
185.171.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4c:c5:8d:ec:7d:56:94:e1:fa:02:74:28:ba:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c8b1f98b9ebff0d8b09af96f4915fcf56dabdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:e6:58:6d:f0:15:30:fa:55:75:8e:52:24:
cd:46:5c:c3:e0:fc:d1:83:d9:2c:bb:eb:b6:e8:50:
e5:d8:79:3b:87:62:82:6c:6c:69:2d:c5:d5:e4:0d:
6f:1d:e6:0d:0d:70:da:81:b2:25:43:6f:a3:40:b0:
e0:32:ab:54:a7:69:57:d0:f9:ff:d1:17:b6:ef:a0:
a4:b9:95:fc:97:88:16:61:02:79:1e:b9:ec:e3:6b:
14:cf:a3:d7:0e:0d:f5:24:05:1e:f1:61:cd:64:e4:
32:44:15:bd:c4:c5:85:83:97:47:b7:b1:c7:4a:33:
f6:0e:2f:9a:97:21:5b:b2:da:0b:a1:eb:26:ee:ad:
6e:92:8d:1e:56:92:56:78:19:3e:9c:3a:70:40:8c:
15:4e:06:a1:8b:02:37:32:08:55:db:07:23:46:e8:
d6:c6:fe:0d:71:f2:55:b8:86:20:7b:b3:88:9f:19:
95:4b:19:9c:42:d4:7a:c2:01:45:46:22:a0:f4:37:
b0:d4:89:06:6c:e4:89:d1:c0:df:14:70:94:7b:81:
57:69:02:14:8e:32:19:d0:7f:9d:a4:3e:34:96:d5:
7e:c4:f4:9f:9a:4f:46:56:3b:77:bb:2f:fa:9e:6c:
2f:df:c9:3f:89:8c:f5:a7:74:49:13:11:71:9f:80:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:1F:98:B9:EB:FF:0D:8B:09:AF:96:F4:91:5F:CF:56:DA:BD:C9
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/fIsfmLnr_w2LCa-W9JFfz1bavck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.4.0/23
77.37.98.0-77.37.103.255
77.37.106.0-77.37.111.255
93.127.224.0/19
185.171.76.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:01:57:d2:87:1c:be:99:cb:d6:29:6b:c4:e1:4a:32:25:89:
7a:cd:97:3d:64:59:54:c0:a3:f0:83:c1:bf:c1:52:ca:e4:f7:
8d:ad:ad:10:1a:04:e0:cf:01:df:03:e1:bf:e1:19:e8:5b:9c:
35:0e:42:eb:7a:69:c9:29:4c:b1:5e:fa:16:66:58:85:9d:ed:
8a:f7:5a:27:41:86:47:b4:eb:b6:7d:0a:ae:55:05:2d:bc:e8:
99:ee:c5:dc:94:e9:e5:bd:62:f0:b5:cd:10:2e:95:e9:f2:ce:
8d:74:26:c1:28:fa:d0:43:84:0a:35:ea:75:5b:87:10:e8:f4:
42:03:0f:9b:b8:49:16:1a:fe:68:cb:02:1d:29:09:4d:b7:95:
ee:af:c6:0a:59:f3:09:e2:a7:3a:77:8c:15:40:1d:57:dd:65:
e9:eb:2d:80:75:f8:e7:6a:a3:cf:95:e7:69:6b:2f:92:32:29:
b7:6f:bd:13:46:82:f5:73:ae:e2:6b:c2:8a:94:b9:24:02:c9:
ca:99:eb:28:10:66:ab:cd:1f:3b:ca:fb:27:03:75:c2:65:bf:
a8:59:94:00:89:24:66:93:fc:75:98:85:c5:3b:cd:13:f6:71:
9d:59:02:04:eb:a2:53:ea:78:ca:89:d3:3f:24:13:cd:5b:8a:
5d:5f:07:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:06:55 2025 by rpki-client