Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/RfR7j6G5_sJS8OQZgHHxWIOrWik.roa
File: RfR7j6G5_sJS8OQZgHHxWIOrWik.roa (raw, json)
Hash identifier: T0T9mP/ka5CUHkp2wc/nbDQJWHODztCrXchcrAu3muA=
Subject key identifier: 45:F4:7B:8F:A1:B9:FE:C2:52:F0:E4:19:80:71:F1:58:83:AB:5A:29
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 018450DA3B29191C0D43433896411C632C57
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/RfR7j6G5_sJS8OQZgHHxWIOrWik.roa
Signing time: Mon 07 Nov 2022 06:49:50 +0000
ROA not before: Mon 07 Nov 2022 06:49:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.36.0/22 maxlen: 22
77.37.44.0/22 maxlen: 22
93.127.184.0/22 maxlen: 24
93.127.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:50:da:3b:29:19:1c:0d:43:43:38:96:41:1c:63:2c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Nov 7 06:49:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45f47b8fa1b9fec252f0e4198071f15883ab5a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:43:c3:27:fd:3c:75:25:f0:70:9d:b9:02:
b0:3a:53:b4:44:88:76:19:1e:92:56:7a:40:49:c3:
20:62:e4:33:e4:2a:bc:e4:97:b2:ef:c2:cf:df:8c:
17:65:25:09:8b:1f:4e:c7:d5:cd:b6:3f:b8:d8:1b:
17:20:eb:59:8c:4c:3e:95:41:1a:07:fe:9a:11:fa:
6e:ff:57:9d:7d:8b:29:b3:42:0d:c3:41:a9:26:a4:
a3:28:58:c0:26:23:1d:b9:cc:80:d0:d6:0a:20:26:
bf:ae:4b:9c:fd:e1:cf:5f:55:b4:13:2e:83:d2:ef:
7b:9a:f6:b1:c0:8c:ff:6d:18:c5:23:57:27:b1:7a:
10:c8:01:30:9a:ab:93:b0:95:3b:98:83:bf:8d:ed:
de:7e:ca:24:68:56:b1:13:ff:55:4c:15:32:ba:be:
b4:50:2d:e8:58:80:8e:4e:ce:6c:eb:2b:0c:9d:27:
f2:61:13:a6:37:dc:76:a0:23:6a:a4:84:f5:2c:12:
60:2b:28:bc:a8:60:4a:ea:8b:1b:1f:37:ee:bb:24:
91:3f:fc:46:e3:5a:8c:c0:9b:cd:dd:ed:f7:4c:db:
70:9a:2e:10:53:06:14:87:e8:d0:72:bd:2e:b1:54:
b8:23:81:c2:b1:74:a3:46:f7:ec:bb:59:10:03:15:
11:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F4:7B:8F:A1:B9:FE:C2:52:F0:E4:19:80:71:F1:58:83:AB:5A:29
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/RfR7j6G5_sJS8OQZgHHxWIOrWik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.36.0/22
77.37.44.0/22
93.127.180.0-93.127.187.255
Signature Algorithm: sha256WithRSAEncryption
87:cd:41:39:37:dc:2a:66:4e:a9:c4:3b:ab:69:d9:ce:1f:f0:
65:60:4f:d8:7c:b2:4d:3f:f3:10:50:ea:26:9d:c8:e0:3e:eb:
61:6c:14:7e:5b:84:18:56:de:79:5f:d3:bb:d0:71:f9:03:2e:
d9:cc:ab:82:95:1a:72:43:d6:26:17:44:67:84:6c:ea:62:34:
f0:26:f2:c4:76:85:9f:42:b9:3f:04:92:b7:01:49:12:a5:26:
0b:d0:ac:a3:7d:08:ee:3b:0c:67:5e:17:7e:4b:d7:b1:21:a8:
28:52:2c:32:8a:d5:06:55:dd:9f:fb:d3:06:0a:c4:8c:f7:3a:
2d:96:72:0b:a4:d6:f9:71:e7:f6:6c:f8:ee:4a:11:dd:72:41:
02:d1:b5:5b:9c:15:12:e2:82:49:f3:9f:7c:4b:22:98:d1:80:
5b:1d:60:db:29:9f:45:57:4f:f4:ad:3a:40:33:2e:d0:36:b7:
f6:ec:38:73:bd:21:5d:38:ef:5b:49:34:3f:0b:96:2a:95:4d:
a7:60:2e:f8:2f:33:ea:a1:06:dd:38:4a:ff:c2:82:c4:8e:4b:
e9:fe:bc:55:ef:3c:29:48:da:0e:59:d8:00:6e:26:df:64:df:
d8:f9:43:0c:a7:ad:70:11:42:7e:3e:f1:6f:02:9c:8b:48:a5:
b6:36:12:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net