Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/2wAiVeYALBC4GCa7OGyOqrBCGaI.roa
File: 2wAiVeYALBC4GCa7OGyOqrBCGaI.roa (raw, json)
Hash identifier: v4As5QU8V51pNwwK0TYXck7ArDBPd/d5FOXKt2zd56k=
Subject key identifier: DB:00:22:55:E6:00:2C:10:B8:18:26:BB:38:6C:8E:AA:B0:42:19:A2
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 018455B5841BB58FED497C423CBC9ACE1978
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/2wAiVeYALBC4GCa7OGyOqrBCGaI.roa
Signing time: Tue 08 Nov 2022 05:27:49 +0000
ROA not before: Tue 08 Nov 2022 05:27:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.84.0/22 maxlen: 24
77.37.36.0/22 maxlen: 22
77.37.44.0/22 maxlen: 22
93.127.184.0/22 maxlen: 24
93.127.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:55:b5:84:1b:b5:8f:ed:49:7c:42:3c:bc:9a:ce:19:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Nov 8 05:27:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db002255e6002c10b81826bb386c8eaab04219a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3a:ee:8e:e0:74:d7:7d:95:1c:21:c5:78:4d:
1e:c5:c9:f9:e7:e1:2c:8e:63:eb:65:eb:d1:70:5b:
13:5f:ea:2a:0c:d3:77:51:e2:1e:07:f4:86:18:3c:
77:d7:15:51:10:62:79:3d:ef:c9:0f:51:6b:05:22:
ad:1c:f3:ee:d9:12:90:62:d7:d3:ed:9a:f5:d3:53:
f0:da:d8:25:e1:52:d6:dc:af:a5:5a:ae:dd:60:6c:
32:89:75:5f:9e:85:f5:ea:e2:9c:01:68:25:6a:66:
be:df:ae:e2:dc:c5:ee:b2:91:e8:5c:cd:7d:fa:f7:
50:21:f5:55:8d:c8:e7:c0:fc:1b:cf:e4:ad:24:79:
5c:70:b6:04:e3:3e:e6:48:c8:a6:4a:0a:41:30:72:
5e:ce:1c:e6:1b:a0:20:bb:d7:22:2b:8f:da:aa:30:
05:ab:f8:fa:0a:f2:a5:d8:86:68:0f:ba:33:5e:d9:
3a:14:52:90:9b:89:5d:1f:81:a7:f5:69:b1:f3:72:
9b:58:b2:49:83:8e:7f:b3:c6:82:81:e0:02:95:af:
27:1d:ba:cc:2e:c0:17:af:b4:de:0b:f1:71:3f:85:
b3:4c:79:c0:96:fe:d2:e4:f1:3c:62:30:6d:f4:da:
36:72:73:63:76:f3:bc:0e:e5:29:08:7d:9f:37:5e:
d3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:00:22:55:E6:00:2C:10:B8:18:26:BB:38:6C:8E:AA:B0:42:19:A2
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/2wAiVeYALBC4GCa7OGyOqrBCGaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.36.0/22
77.37.44.0/22
77.37.84.0/22
93.127.180.0-93.127.187.255
Signature Algorithm: sha256WithRSAEncryption
4d:6a:20:75:69:51:40:7e:8b:35:b5:06:fd:04:de:cb:83:d2:
fc:63:9e:89:93:ff:1f:c8:35:c8:8d:4a:f4:49:4b:92:ad:27:
48:77:fe:60:d8:46:81:95:2e:dd:d5:74:0c:36:85:7a:a0:06:
a6:48:4e:c2:d9:bf:e6:4f:4c:7a:a2:8d:0f:32:e5:44:71:b2:
70:74:e7:ab:3b:b2:f5:9f:64:db:a5:e2:a3:63:3f:68:9d:86:
e2:d7:f8:51:0a:73:58:37:a4:7e:09:52:7c:55:b5:c3:e9:9c:
0d:1a:59:62:00:75:9f:90:69:cc:05:6f:b5:ba:44:7d:cc:45:
cb:c2:ac:42:9b:de:f6:f9:02:30:1a:2c:a4:0e:6b:e0:aa:38:
13:c8:39:ca:42:07:c9:b5:8d:f2:6e:16:c1:42:d0:e5:c1:12:
e4:18:5d:46:9b:f8:82:c7:39:65:60:ad:1b:ab:5f:81:2e:99:
9d:a6:4c:a1:da:6d:17:a2:15:09:26:6c:3e:d0:48:a3:b5:ea:
53:0f:fc:d2:8b:05:d2:6f:a3:dc:a4:76:ac:4e:79:84:17:3f:
2b:62:e1:ba:a7:e2:a9:d3:fe:35:0f:25:c0:b1:fe:6d:10:a1:
88:c9:4e:8f:3b:8b:f7:55:6c:27:b8:e3:83:ca:c4:8c:e9:f6:
41:af:e0:c8
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYRVtYQbtY/tSXxCPLyazhl4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjIxMTA4MDUyNzQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjAwMjI1NWU2MDAyYzEwYjgxODI2YmIzODZjOGVhYWIwNDIxOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizrujuB0132VHCHFeE0excn55+Es
jmPrZevRcFsTX+oqDNN3UeIeB/SGGDx31xVREGJ5Pe/JD1FrBSKtHPPu2RKQYtfT
7Zr101Pw2tgl4VLW3K+lWq7dYGwyiXVfnoX16uKcAWglama+367i3MXuspHoXM19
+vdQIfVVjcjnwPwbz+StJHlccLYE4z7mSMimSgpBMHJezhzmG6Agu9ciK4/aqjAF
q/j6CvKl2IZoD7ozXtk6FFKQm4ldH4Gn9Wmx83KbWLJJg45/s8aCgeACla8nHbrM
LsAXr7TeC/FxP4WzTHnAlv7S5PE8YjBt9No2cnNjdvO8DuUpCH2fN17T2QIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFNsAIlXmACwQuBgmuzhsjqqwQhmiMB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvMndBaVZlWUFMQkM0R0NhN09HeU9xckJDR2FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCTSUkAwQC
TSUsAwQCTSVUMAwDBAJdf7QDBAJdf7gwDQYJKoZIhvcNAQELBQADggEBAE1qIHVp
UUB+izW1Bv0E3suD0vxjnomT/x/INciNSvRJS5KtJ0h3/mDYRoGVLt3VdAw2hXqg
BqZITsLZv+ZPTHqijQ8y5URxsnB056s7svWfZNul4qNjP2idhuLX+FEKc1g3pH4J
UnxVtcPpnA0aWWIAdZ+QacwFb7W6RH3MRcvCrEKb3vb5AjAaLKQOa+CqOBPIOcpC
B8m1jfJuFsFC0OXBEuQYXUab+ILHOWVgrRurX4EumZ2mTKHabReiFQkmbD7QSKO1
6lMP/NKLBdJvo9ykdqxOeYQXPyti4bqn4qnT/jUPJcCx/m0QoYjJTo87i/dVbCe4
44PKxIzp9kGv4Mg=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net