Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Ss9RlqDkzv8jkAb18m_t5WGwqss.roa
File: Ss9RlqDkzv8jkAb18m_t5WGwqss.roa (raw, json)
Hash identifier: wPmk8V9mCwddhONRDf7hCc7REcr9hNOg4ahkzgyYSA0=
Subject key identifier: 4A:CF:51:96:A0:E4:CE:FF:23:90:06:F5:F2:6F:ED:E5:61:B0:AA:CB
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01847867429806F647C3AE32CAC343E3BFD5
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Ss9RlqDkzv8jkAb18m_t5WGwqss.roa
Signing time: Mon 14 Nov 2022 23:09:03 +0000
ROA not before: Mon 14 Nov 2022 23:09:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 77.37.92.0/24 maxlen: 24
77.37.95.0/24 maxlen: 24
77.37.9.0/24 maxlen: 24
93.127.164.0/24 maxlen: 24
93.127.169.0/24 maxlen: 24
93.127.171.0/24 maxlen: 24
77.37.40.0/24 maxlen: 24
93.127.179.0/24 maxlen: 24
77.37.58.0/24 maxlen: 24
93.127.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:78:67:42:98:06:f6:47:c3:ae:32:ca:c3:43:e3:bf:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Nov 14 23:09:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4acf5196a0e4ceff239006f5f26fede561b0aacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f2:87:17:5c:d8:1c:bc:41:dd:c3:2d:96:e0:
38:af:88:85:31:24:c6:a1:0c:02:2e:e3:fa:05:a5:
b0:03:90:11:03:cb:c2:69:4a:da:7c:7c:46:7e:eb:
03:98:68:61:9c:de:55:bc:d8:f9:dc:da:01:53:84:
8d:3a:03:57:8f:16:e3:f4:53:6b:78:2d:bb:ea:4a:
f2:b1:01:d5:00:19:aa:c9:e2:c2:49:b4:fc:a0:97:
ee:0d:b1:07:f8:21:7e:a1:a8:c6:6c:ca:aa:36:34:
61:8f:d5:95:59:5f:23:53:26:cd:5e:9e:40:f2:3e:
a1:63:a8:81:48:78:38:66:1d:bc:03:fb:d9:55:99:
de:08:7a:08:0d:a8:e4:e8:52:83:9d:5f:bb:db:5f:
78:8f:50:b9:92:a9:74:2a:75:30:6f:a0:11:b5:e9:
8e:40:56:37:c0:d2:df:5f:ef:e8:f1:82:ce:de:1c:
09:62:13:16:a3:83:f7:88:59:19:36:42:d2:ab:2c:
45:c5:04:a8:38:24:9f:3b:9d:95:36:4f:0c:7e:69:
a6:da:52:86:b4:2f:18:f8:5d:25:95:0e:e0:35:dc:
68:6d:09:9b:0a:af:b9:32:1e:4d:50:c6:cd:ea:d5:
60:cf:96:70:ac:a7:72:10:11:c6:77:04:ab:b0:86:
3a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CF:51:96:A0:E4:CE:FF:23:90:06:F5:F2:6F:ED:E5:61:B0:AA:CB
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Ss9RlqDkzv8jkAb18m_t5WGwqss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.9.0/24
77.37.40.0/24
77.37.58.0/24
77.37.92.0/24
77.37.95.0/24
93.127.164.0/24
93.127.169.0/24
93.127.171.0/24
93.127.179.0/24
93.127.191.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0e:9f:8a:5f:21:cd:e7:7e:fd:3f:b5:9f:7b:c4:2d:19:be:
32:78:a6:25:bd:28:d3:55:de:bb:1a:c3:f0:64:0b:2f:29:71:
34:5b:94:5f:a4:bc:1d:65:bc:58:dc:32:69:8c:18:de:44:46:
ca:47:38:81:4f:fe:93:18:a2:f7:e5:bc:08:34:26:68:02:4f:
a0:49:28:f1:2f:f8:55:ed:9a:62:5f:b7:0c:90:b2:5e:d0:97:
ed:ba:60:81:10:79:9e:d4:42:de:bb:2c:98:fe:c8:fd:2d:53:
85:8e:cf:74:56:c0:ab:5b:c4:82:9b:8d:66:94:a4:ea:94:7a:
59:6c:06:1e:e9:9d:ff:bc:23:25:7f:d4:4f:29:cd:cb:ff:27:
42:f5:3c:10:a5:5f:68:c3:0d:6e:78:5e:cc:69:9c:aa:c5:86:
b0:2f:c6:04:2b:33:fa:cd:b0:a6:90:d2:17:d6:aa:ac:f3:c8:
ae:b9:d3:8c:4d:12:98:d7:17:a8:48:f1:49:3f:df:88:b2:e9:
41:08:ff:7a:07:ef:1e:d3:dc:62:25:2d:93:f9:3f:5f:03:7a:
9f:2a:4d:1d:4b:8d:1f:e2:76:f7:57:cf:c5:4e:d2:3c:7c:3f:
2a:4d:76:8b:d5:8e:26:04:0e:0c:e8:24:d1:3c:0c:30:09:77:
4f:2a:7b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net