Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/R4fDpIfOQICceBFxo8-dWBlLHl8.roa
File: R4fDpIfOQICceBFxo8-dWBlLHl8.roa (raw, json)
Hash identifier: 2gTWrS7/+7HA9wjgHjJiTBzS0tldhPaQEEZOHnKkSpg=
Subject key identifier: 47:87:C3:A4:87:CE:40:80:9C:78:11:71:A3:CF:9D:58:19:4B:1E:5F
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01847C90EEE9D6BBC21F91045FFEA52A9A96
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/R4fDpIfOQICceBFxo8-dWBlLHl8.roa
Signing time: Tue 15 Nov 2022 18:33:03 +0000
ROA not before: Tue 15 Nov 2022 18:33:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.71.0/24 maxlen: 24
77.37.72.0/22 maxlen: 24
77.37.84.0/22 maxlen: 24
77.37.36.0/22 maxlen: 22
77.37.44.0/22 maxlen: 22
93.127.184.0/22 maxlen: 24
93.127.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7c:90:ee:e9:d6:bb:c2:1f:91:04:5f:fe:a5:2a:9a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Nov 15 18:33:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4787c3a487ce40809c781171a3cf9d58194b1e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:1f:73:e9:dd:b2:0b:4c:b5:06:ff:a1:03:
38:77:b0:f5:78:36:eb:b2:3c:0a:2f:7e:93:99:c7:
bc:5a:0b:f8:31:05:2b:11:77:7e:6d:38:b7:d0:fd:
ca:0b:d1:f9:33:01:a9:46:dc:92:4a:7f:3a:6d:cd:
f0:8f:37:14:5a:1f:a2:df:07:6d:61:55:ff:38:83:
81:d1:c3:d1:22:8a:df:f9:5e:94:a2:9c:e2:bf:a0:
50:e3:1c:d3:24:a3:e9:40:73:7e:9c:83:87:b0:74:
db:3c:ee:7c:2e:7e:8c:95:cd:00:ed:9e:28:7a:a1:
9c:a1:e4:4c:0c:aa:88:8d:54:4f:aa:22:f5:82:df:
9e:fd:19:93:d9:c5:92:fc:59:6c:9f:86:3a:a1:e0:
64:08:9b:41:7d:39:d8:f3:08:d7:85:3d:07:51:8b:
33:7e:79:c1:2e:ee:cd:de:cd:11:5c:4c:e6:d9:ba:
07:c5:7c:75:cf:d2:a4:d7:f8:f8:c3:b3:d3:34:e5:
8f:ed:6d:d1:4e:06:eb:cf:ac:41:f4:30:98:f0:61:
2d:07:34:b5:53:a7:b6:fe:16:94:e2:4d:47:d0:42:
a5:fd:a7:7e:9e:38:55:03:14:42:4b:11:74:22:d7:
61:58:33:b2:cd:c3:ea:0c:2f:3e:f9:40:04:30:8a:
f4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:87:C3:A4:87:CE:40:80:9C:78:11:71:A3:CF:9D:58:19:4B:1E:5F
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/R4fDpIfOQICceBFxo8-dWBlLHl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.36.0/22
77.37.44.0/22
77.37.71.0-77.37.75.255
77.37.84.0/22
93.127.180.0-93.127.187.255
Signature Algorithm: sha256WithRSAEncryption
b4:75:b7:38:81:38:6d:de:75:77:7a:d1:5a:af:0f:09:88:74:
87:0a:40:dc:3e:70:91:d8:9b:5a:53:46:f0:0e:90:1f:84:e1:
49:d7:4e:ac:62:eb:a9:7d:9d:84:f6:5b:f7:2c:8f:95:7e:71:
5c:d7:40:ac:71:2f:f6:5b:40:5f:8b:7c:ba:f1:a6:c7:cc:ee:
f3:6e:b9:e5:be:e4:16:65:52:85:90:61:26:9a:93:7b:e8:2c:
20:2c:c3:db:2c:87:74:b9:b3:6d:a8:40:ed:ae:d9:11:70:18:
ef:09:4a:da:b8:06:e4:c4:30:51:90:28:12:c8:f9:e0:1a:09:
1e:8e:03:69:fe:77:6c:ed:e4:06:5d:2e:bd:b8:50:39:d2:66:
de:f6:16:47:5c:3f:20:b7:47:91:23:b4:3c:5b:53:a9:06:42:
ec:3c:2d:0a:6e:d7:b7:a6:b1:dc:d0:72:ef:67:11:7d:b0:54:
19:fd:d8:a2:4a:f2:fd:71:a2:80:f1:a1:ac:e5:57:69:2c:98:
9d:55:6c:32:1d:0f:fa:b7:18:4a:ee:de:88:cd:2d:66:42:9f:
14:8b:56:78:fd:97:f6:6b:50:6a:bf:db:db:61:85:cf:ec:1f:
e2:98:c9:d1:72:28:56:bc:76:57:d1:c9:62:f0:26:37:63:48:
c7:fa:15:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net