Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/4HaWESwfa2mGrNxLIKm144aPTtQ.roa
File: 4HaWESwfa2mGrNxLIKm144aPTtQ.roa (raw, json)
Hash identifier: vPt8OR/JvJZO/BYF7gG/t0Crg3uTFASdIgn3uxNrgrE=
Subject key identifier: E0:76:96:11:2C:1F:6B:69:86:AC:DC:4B:20:A9:B5:E3:86:8F:4E:D4
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0183A6DDACBD50E7A7EABA0FAE14AEB4F05C
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/4HaWESwfa2mGrNxLIKm144aPTtQ.roa
Signing time: Wed 05 Oct 2022 06:38:09 +0000
ROA not before: Wed 05 Oct 2022 06:38:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62336
IP address blocks: 93.127.224.0/19 maxlen: 19
77.37.98.0/23 maxlen: 23
77.37.100.0/22 maxlen: 22
185.171.78.0/23 maxlen: 23
185.171.76.0/23 maxlen: 23
93.127.128.0/19 maxlen: 19
77.37.106.0/23 maxlen: 23
77.37.4.0/23 maxlen: 23
77.37.108.0/22 maxlen: 22
93.127.240.0/20 maxlen: 20
93.127.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a6:dd:ac:bd:50:e7:a7:ea:ba:0f:ae:14:ae:b4:f0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Oct 5 06:38:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e07696112c1f6b6986acdc4b20a9b5e3868f4ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6b:07:d8:ab:07:9a:69:c0:b5:96:58:78:da:
47:08:74:78:18:07:f1:e9:af:25:69:ab:75:01:9a:
5e:91:d6:28:b8:e7:6b:88:87:5e:34:1b:94:93:39:
7a:85:e4:41:f3:0a:13:5f:f3:f3:03:af:90:6b:e6:
49:e6:bd:b9:56:e7:ae:69:2b:f0:fb:05:03:8a:d2:
be:06:8e:53:5a:02:f5:57:5f:d1:d2:e0:c2:cd:f1:
8d:f4:db:e4:31:45:e2:07:a4:bf:42:64:9a:71:cc:
78:ca:0f:45:bf:48:de:22:af:6b:21:7c:e3:35:38:
62:df:c8:a3:98:dc:88:72:9e:ba:a7:8c:0f:8a:06:
e6:db:58:49:95:54:6b:57:33:f4:4a:8d:10:a8:de:
88:0a:95:34:7f:d4:2f:30:d9:e1:25:37:ba:eb:67:
07:63:a8:17:fe:7c:8b:c2:ad:80:30:64:83:44:9f:
90:c9:aa:71:4f:2d:55:71:de:48:6c:18:dd:76:dd:
4e:2d:71:97:b1:b9:e8:93:ae:fe:ce:93:40:5a:dd:
8d:55:1c:f1:41:f6:f1:38:be:3f:c4:c4:97:51:2f:
71:45:d4:af:9f:7f:f9:3c:a7:7d:b4:eb:07:10:d1:
d1:39:40:59:c7:9f:ef:72:ac:5c:29:59:51:70:bf:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:76:96:11:2C:1F:6B:69:86:AC:DC:4B:20:A9:B5:E3:86:8F:4E:D4
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/4HaWESwfa2mGrNxLIKm144aPTtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.4.0/23
77.37.98.0-77.37.103.255
77.37.106.0-77.37.111.255
93.127.128.0/19
93.127.224.0/19
185.171.76.0/22
Signature Algorithm: sha256WithRSAEncryption
55:37:f0:a1:23:71:c5:46:62:1f:d0:76:e2:c8:c5:8e:3c:25:
d2:8b:53:ae:fe:76:6a:dd:41:6b:6a:36:1e:82:9e:23:2f:b5:
e4:b5:d7:63:91:c0:72:9d:9a:c1:bf:fd:0b:f8:5c:d5:4f:c8:
c6:1c:cb:b9:f9:83:65:e3:3b:ed:0b:53:96:a6:b3:0f:b1:5b:
77:32:eb:03:4f:fa:d7:61:f9:91:aa:53:ec:66:43:5d:25:88:
0f:d6:63:2e:e3:6d:8e:3a:a4:35:a1:02:3f:a4:20:5f:b3:b4:
15:90:dc:6a:d2:7e:7e:a5:f3:8d:9d:44:6e:7b:82:47:4c:11:
05:41:f3:de:25:15:c7:57:e3:9d:e2:ed:c7:b1:b7:87:40:dc:
a6:6d:3c:cc:6c:a0:f5:42:87:84:0b:c0:95:14:b2:95:3c:69:
0e:93:22:a5:1b:68:84:20:55:21:bf:6d:7a:6d:fc:cb:fb:dd:
e8:c9:11:b3:53:ef:b8:11:66:6a:b8:14:ad:b0:92:03:e1:7b:
bc:de:06:82:2f:24:44:24:84:9d:2c:28:78:90:29:77:96:6c:
6f:c5:79:17:a1:9f:b4:69:d7:a8:aa:5f:ca:b5:89:6b:c2:b0:
08:b6:75:dc:a5:f7:7a:d8:c0:69:ca:04:23:47:3b:db:43:57:
1a:d7:a2:55
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYOm3ay9UOen6roPrhSutPBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjIxMDA1MDYzODA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDc2OTYxMTJjMWY2YjY5ODZhY2RjNGIyMGE5YjVlMzg2OGY0ZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42sH2KsHmmnAtZZYeNpHCHR4GAfx
6a8laat1AZpekdYouOdriIdeNBuUkzl6heRB8woTX/PzA6+Qa+ZJ5r25VueuaSvw
+wUDitK+Bo5TWgL1V1/R0uDCzfGN9NvkMUXiB6S/QmSaccx4yg9Fv0jeIq9rIXzj
NThi38ijmNyIcp66p4wPigbm21hJlVRrVzP0So0QqN6ICpU0f9QvMNnhJTe662cH
Y6gX/nyLwq2AMGSDRJ+QyapxTy1Vcd5IbBjddt1OLXGXsbnok67+zpNAWt2NVRzx
QfbxOL4/xMSXUS9xRdSvn3/5PKd9tOsHENHROUBZx5/vcqxcKVlRcL+RmQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFOB2lhEsH2tphqzcSyCpteOGj07UMB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvNEhhV0VTd2ZhMm1Hck54TElLbTE0NGFQVHRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQBTSUEMAwD
BAFNJWIDBANNJWAwDAMEAU0lagMEBE0lYAMEBV1/gAMEBV1/4AMEArmrTDANBgkq
hkiG9w0BAQsFAAOCAQEAVTfwoSNxxUZiH9B24sjFjjwl0otTrv52at1Ba2o2HoKe
Iy+15LXXY5HAcp2awb/9C/hc1U/IxhzLufmDZeM77QtTlqazD7FbdzLrA0/612H5
kapT7GZDXSWID9ZjLuNtjjqkNaECP6QgX7O0FZDcatJ+fqXzjZ1EbnuCR0wRBUHz
3iUVx1fjneLtx7G3h0Dcpm08zGyg9UKHhAvAlRSylTxpDpMipRtohCBVIb9tem38
y/vd6MkRs1PvuBFmargUrbCSA+F7vN4Ggi8kRCSEnSwoeJApd5Zsb8V5F6GftGnX
qKpfyrWJa8KwCLZ13KX3etjAacoEI0c720NXGteiVQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net