Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/5T6yZ3kavaYQCq0EsPU3t7ZJBhE.roa
File: 5T6yZ3kavaYQCq0EsPU3t7ZJBhE.roa (raw, json)
Hash identifier: WNjNBd1ngk14spPKZaHvtN8eXSnShc6ubOtdS+ThCnM=
Subject key identifier: E5:3E:B2:67:79:1A:BD:A6:10:0A:AD:04:B0:F5:37:B7:B6:49:06:11
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0185707058D53CD248384E314C67078D2B21
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/5T6yZ3kavaYQCq0EsPU3t7ZJBhE.roa
Signing time: Mon 02 Jan 2023 03:04:48 +0000
ROA not before: Mon 02 Jan 2023 03:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.71.0/24 maxlen: 24
77.37.72.0/22 maxlen: 24
77.37.84.0/22 maxlen: 24
93.127.223.0/24 maxlen: 24
77.37.32.0/24 maxlen: 24
77.37.44.0/24 maxlen: 24
77.37.48.0/22 maxlen: 24
93.127.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:58:d5:3c:d2:48:38:4e:31:4c:67:07:8d:2b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 2 03:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e53eb267791abda6100aad04b0f537b7b6490611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f5:a0:8f:82:9a:b0:79:c2:2d:2d:e1:df:43:
7b:ce:ce:7a:71:30:af:2d:e1:ad:7a:7c:13:05:5e:
dc:cf:01:e9:bf:09:20:8f:37:73:ee:e4:37:ff:1a:
b5:91:01:92:ae:95:4a:50:28:d9:3f:be:2a:f9:f6:
dc:b8:c7:80:de:1a:85:33:4e:7b:fd:59:7c:ca:62:
be:21:81:2f:59:6d:31:52:ba:05:1f:ca:b0:45:fd:
5b:97:bd:80:61:09:e8:00:00:7e:70:e2:c1:07:80:
d3:77:82:55:fe:16:e0:af:a0:4c:13:ba:4b:42:b7:
ff:62:38:ef:26:3f:3b:07:6d:2a:89:94:83:48:f2:
fe:3e:32:d7:27:db:e3:36:6c:c9:f3:2e:e2:63:1e:
ce:00:3b:ce:c9:14:a2:41:13:9f:f6:03:c8:69:4f:
5a:66:db:0c:66:10:f2:7e:86:d9:5e:12:fb:5b:1f:
20:81:b4:08:ca:af:6c:c6:a6:c5:8c:60:54:5d:7d:
e2:99:7a:a0:7f:1d:69:2a:55:18:90:72:ef:09:8d:
5b:bb:6d:1d:2f:1f:0d:94:3e:27:42:e2:c4:8a:b7:
65:bf:8d:e4:26:3d:b2:c0:86:04:85:5a:d8:04:57:
df:f3:df:ca:cb:77:cd:25:a2:43:3f:fa:83:30:ff:
e1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3E:B2:67:79:1A:BD:A6:10:0A:AD:04:B0:F5:37:B7:B6:49:06:11
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/5T6yZ3kavaYQCq0EsPU3t7ZJBhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.32.0/24
77.37.44.0/24
77.37.48.0/22
77.37.71.0-77.37.75.255
77.37.84.0/22
93.127.187.0/24
93.127.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:bc:05:29:e2:09:7d:9d:2b:f1:30:a7:b6:24:c9:58:4a:6c:
91:a0:b5:d2:11:c1:a4:e9:cb:aa:16:c8:a1:69:1f:26:a2:00:
53:71:fe:f4:df:af:3e:ba:c3:71:9f:89:29:1a:10:2b:2d:31:
ef:82:b7:b3:13:a3:10:12:14:16:44:1c:0b:87:13:c8:6d:73:
87:6e:e7:0d:10:20:e1:61:1a:80:a1:69:c5:56:fd:ef:d0:68:
b2:96:e1:28:1c:48:0c:05:bd:cc:4d:16:40:cc:3c:9a:c6:e4:
32:98:87:cb:2d:d9:43:4f:09:74:f2:aa:a4:b1:44:ec:b2:74:
bd:63:89:ac:59:dd:20:1c:72:bf:0d:c5:bb:0c:a6:61:fd:88:
66:88:a6:1e:a7:18:39:06:1f:92:02:a0:d4:c3:91:2d:19:b6:
fb:a1:35:74:97:2e:23:88:fe:91:be:43:80:26:44:a4:ed:ec:
33:70:4e:51:41:7a:5e:60:7e:a7:2d:84:26:35:fa:2d:52:77:
62:15:02:2c:78:b7:46:ee:39:dd:3c:b2:02:7c:da:8e:b8:6e:
8b:5e:f8:ee:58:ea:87:80:72:f7:29:c6:db:eb:88:d6:bf:0f:
c2:29:12:21:ce:69:41:d6:47:aa:29:c6:97:3e:0c:57:7f:e9:
ac:92:49:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net