Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/BMC8HkKCotWLiq3xUMCZbuFrLjw.roa
File: BMC8HkKCotWLiq3xUMCZbuFrLjw.roa (raw, json)
Hash identifier: 7J0FftiRehaFAV4r93nX/3px+l3vrAr0TsCFlOljZnA=
Subject key identifier: 04:C0:BC:1E:42:82:A2:D5:8B:8A:AD:F1:50:C0:99:6E:E1:6B:2E:3C
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 33B07FF6
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/BMC8HkKCotWLiq3xUMCZbuFrLjw.roa
Signing time: Sat 01 Jan 2022 14:55:14 +0000
ROA not before: Sat 01 Jan 2022 14:55:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62336
IP address blocks: 93.127.224.0/19 maxlen: 19
77.37.98.0/23 maxlen: 23
77.37.100.0/22 maxlen: 22
185.171.78.0/23 maxlen: 23
185.171.76.0/23 maxlen: 23
77.37.106.0/23 maxlen: 23
77.37.4.0/23 maxlen: 23
77.37.108.0/22 maxlen: 22
93.127.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867205110 (0x33b07ff6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 1 14:55:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04c0bc1e4282a2d58b8aadf150c0996ee16b2e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:09:b0:93:66:5a:a7:56:68:5e:ef:9e:0c:23:
30:af:9c:22:09:d2:bb:f0:1e:26:7b:6f:3a:3c:0e:
20:c3:e5:bd:56:6b:9d:dc:b3:25:cc:14:dc:b4:28:
69:b1:a3:68:65:71:91:f1:02:82:fe:70:13:82:ed:
df:0f:17:25:af:d2:78:e8:ee:29:c8:aa:7b:ef:f6:
a3:6d:2c:4f:0f:8c:22:70:36:d9:04:53:c3:62:10:
5a:54:ae:c8:c5:13:82:b6:f0:5b:2c:8c:44:4a:df:
a9:fb:b5:b0:cf:49:96:55:03:73:42:5e:c0:63:4a:
1f:fd:7d:ed:1f:05:1e:85:fe:69:59:42:0e:a7:bf:
63:ef:42:8a:c5:4e:d4:02:1e:bc:f9:b7:94:42:c6:
03:91:14:3c:6a:0e:82:b6:9e:94:9f:ce:ba:5a:8e:
82:15:60:53:7e:84:f2:2e:55:c2:15:c7:54:3f:dc:
3b:1d:89:4f:1d:88:d1:0c:17:e0:66:48:04:97:c2:
02:09:7b:66:03:fb:10:dd:f7:d1:71:95:fc:17:24:
45:e2:45:8b:7d:de:f1:b5:22:4a:9c:62:6d:73:af:
e5:bd:14:1b:97:7f:e7:7c:05:4a:54:9b:e8:84:f5:
08:23:2c:b2:a1:c8:47:e9:b0:f5:83:f1:5b:22:e9:
b0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C0:BC:1E:42:82:A2:D5:8B:8A:AD:F1:50:C0:99:6E:E1:6B:2E:3C
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/BMC8HkKCotWLiq3xUMCZbuFrLjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.4.0/23
77.37.98.0-77.37.103.255
77.37.106.0-77.37.111.255
93.127.224.0/19
185.171.76.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:c3:af:de:11:70:3b:01:9f:af:a2:3e:56:73:bf:17:82:e6:
49:ea:29:c3:a7:81:04:0c:14:59:5c:e7:6b:b9:c7:26:cb:ce:
04:a6:0d:62:aa:b4:61:59:8d:94:c3:af:5e:73:1f:26:f8:49:
5d:1a:51:74:ed:21:20:8b:45:20:16:4c:16:3c:54:5f:7a:9b:
5e:48:fe:57:1b:6f:f1:58:07:42:41:20:da:0c:7d:92:f1:21:
de:a2:ec:3a:9b:a4:f1:ac:7c:e8:0b:f6:aa:84:68:29:77:d3:
b0:27:10:af:2f:7f:42:e7:5f:fa:de:95:ae:38:50:b4:6f:22:
ab:06:4e:b1:fe:7f:6f:e8:db:a2:df:60:34:1c:c1:bb:d4:ac:
05:10:0e:b5:b7:38:c8:a4:48:e3:fc:27:08:27:f2:34:f5:1d:
03:b7:99:eb:dd:8a:2d:fb:38:2f:2b:45:2b:7c:50:ab:b0:5b:
5d:4e:83:dc:87:69:35:94:14:8b:ac:f2:14:6f:eb:fc:67:3c:
73:7b:85:70:ab:48:73:17:3c:ba:98:e0:53:a1:a6:d3:69:9e:
93:cb:27:9f:c2:bd:b9:e0:af:d1:40:cf:0c:0c:5d:cc:3b:8e:
bf:dc:bb:c0:54:4c:9e:cb:51:2f:1c:86:2e:e4:f6:25:a8:80:
41:90:f2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net