Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/YnhYfzESlSV-GpG_AVcHm-DtNnA.roa
File: YnhYfzESlSV-GpG_AVcHm-DtNnA.roa (raw, json)
Hash identifier: DcMKqC+lFFF9M9CPp+BKLrj/XuQZ4LgMDbxH8YpcLrQ=
Subject key identifier: 62:78:58:7F:31:12:95:25:7E:1A:91:BF:01:57:07:9B:E0:ED:36:70
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 018479EF1C0C91413BDC0B5781026C100C66
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/YnhYfzESlSV-GpG_AVcHm-DtNnA.roa
Signing time: Tue 15 Nov 2022 06:17:04 +0000
ROA not before: Tue 15 Nov 2022 06:17:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 77.37.92.0/24 maxlen: 24
77.37.95.0/24 maxlen: 24
77.37.9.0/24 maxlen: 24
93.127.164.0/24 maxlen: 24
93.127.169.0/24 maxlen: 24
93.127.171.0/24 maxlen: 24
77.37.40.0/24 maxlen: 24
93.127.179.0/24 maxlen: 24
77.37.58.0/24 maxlen: 24
93.127.190.0/24 maxlen: 24
93.127.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:79:ef:1c:0c:91:41:3b:dc:0b:57:81:02:6c:10:0c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Nov 15 06:17:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6278587f311295257e1a91bf0157079be0ed3670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:da:e0:cd:e8:cb:d5:b2:2e:93:e9:38:9e:8c:
7e:68:74:67:ca:ff:be:7f:02:6c:03:86:06:15:c4:
10:b8:53:2e:ec:bb:07:ff:27:d0:75:cf:14:16:0d:
a8:e5:24:04:b7:93:60:40:38:ae:81:60:e6:04:f0:
6a:44:89:eb:6a:80:a5:96:72:ed:c4:66:24:f6:1b:
84:4a:16:d1:cf:5e:6e:f7:bb:23:99:9f:20:16:80:
f2:4d:1b:04:d3:f4:3d:4f:b1:9a:ac:3b:d3:0f:bd:
50:3b:87:3f:14:cc:98:b5:e4:24:80:b0:18:b6:8c:
b2:43:00:90:04:f3:71:2f:3a:66:a0:dc:61:be:78:
c9:ff:99:c3:61:5f:d5:f4:b4:bc:e9:16:96:2f:40:
70:e7:e3:46:62:91:1f:40:6f:c9:0f:85:3f:5b:43:
48:94:bf:6c:f3:50:ba:9c:b9:83:23:96:41:15:36:
c7:8f:f7:d9:0e:6c:90:a6:36:23:8c:01:af:b7:4e:
23:24:f6:23:7b:82:3b:96:7e:ef:bf:d0:4e:35:49:
d2:62:c6:df:79:c8:79:5a:7d:5a:11:c9:86:aa:f1:
d2:b8:ab:7a:23:e4:87:a2:40:4b:34:a1:c9:81:58:
37:15:5f:10:ad:c8:99:14:df:5d:89:34:ec:6a:28:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:78:58:7F:31:12:95:25:7E:1A:91:BF:01:57:07:9B:E0:ED:36:70
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/YnhYfzESlSV-GpG_AVcHm-DtNnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.9.0/24
77.37.40.0/24
77.37.58.0/24
77.37.92.0/24
77.37.95.0/24
93.127.164.0/24
93.127.169.0/24
93.127.171.0/24
93.127.179.0/24
93.127.190.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:d4:5e:d9:1e:1a:93:b2:bb:c7:55:31:d8:5c:b8:56:49:d7:
02:1d:75:08:44:3e:b6:70:23:2f:c9:7f:0c:a5:1d:20:60:cc:
c0:86:33:d3:8c:76:84:5b:14:bf:e2:e6:3e:90:a4:06:9f:d5:
2c:fd:8f:ee:c2:4d:ab:65:f2:02:3d:d7:6f:c7:a2:0e:06:ac:
dd:b6:c6:ed:2a:df:4f:77:f2:f5:d9:c6:88:84:87:0e:82:88:
3b:12:ec:24:45:58:ba:4e:a9:6d:04:85:6a:ae:0e:0b:04:84:
03:45:5c:f7:11:53:eb:ff:48:a6:7b:6a:92:31:ac:bf:ca:4e:
9e:da:ce:c4:2f:67:b7:08:ba:eb:e4:81:b5:69:aa:20:b6:f0:
5d:57:56:06:b1:de:59:9c:c5:77:54:15:ad:11:b6:af:76:46:
14:27:1c:51:65:9c:1c:55:80:44:ed:f3:ba:7b:2d:ff:83:ab:
34:ac:a9:68:16:c9:87:b3:f5:b7:d2:ca:8a:b9:e8:a0:da:e7:
fd:bb:81:8f:6f:f5:d4:12:6e:2c:a0:9f:58:3a:55:4a:7c:0d:
be:5e:d6:d3:4e:9b:dc:ce:04:ad:2e:e5:58:e8:ba:69:d4:16:
0e:58:8f:23:74:5c:16:83:99:98:64:7b:55:db:0a:6a:df:ee:
fd:73:ff:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net