Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/flKy51hJw-RuvIckJm2G_GHnwDw.roa
File: flKy51hJw-RuvIckJm2G_GHnwDw.roa (raw, json)
Hash identifier: 83HsMqaFMA64mzygxPiNnF4fscHtj1w3um4FJczJr4g=
Subject key identifier: 7E:52:B2:E7:58:49:C3:E4:6E:BC:87:24:26:6D:86:FC:61:E7:C0:3C
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 0184E684BB913606AF37B210589BAAC51494
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/flKy51hJw-RuvIckJm2G_GHnwDw.roa
Signing time: Tue 06 Dec 2022 08:19:29 +0000
ROA not before: Tue 06 Dec 2022 08:19:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 77.37.71.0/24 maxlen: 24
77.37.72.0/22 maxlen: 24
77.37.84.0/22 maxlen: 24
77.37.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:84:bb:91:36:06:af:37:b2:10:58:9b:aa:c5:14:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Dec 6 08:19:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e52b2e75849c3e46ebc8724266d86fc61e7c03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:d4:7c:f6:83:0c:8b:c9:a2:93:c3:9d:d3:
51:97:00:ee:24:c4:70:3b:5a:51:19:f6:80:4d:5b:
a7:bf:61:84:76:b4:cc:6e:0d:9e:e7:b7:58:41:b0:
c6:0c:fb:d9:44:75:d5:0c:ee:e9:6a:e8:b9:0d:c1:
08:6d:a3:60:02:6c:82:c0:05:2d:7d:a4:da:ec:2b:
2d:67:47:43:e7:af:44:8c:bb:4f:c8:53:d2:eb:bd:
be:77:cd:35:36:57:97:17:dd:96:f4:a3:1f:5f:36:
d4:e6:25:f6:c0:9c:c9:95:e1:a5:87:b1:f8:1f:4e:
aa:50:42:62:46:63:f6:a5:85:81:d1:32:74:f6:87:
77:c1:d5:bf:5d:ff:0a:76:e5:97:b8:3e:57:9a:bd:
74:d6:cf:f5:75:0e:78:e9:0c:db:28:68:ce:ef:34:
44:72:e5:66:20:af:6f:10:84:e8:42:2c:bd:af:da:
0b:40:57:fe:b3:be:42:d0:72:93:14:e7:2d:86:b5:
d3:e8:b8:a2:23:90:a7:78:63:ef:40:76:2a:16:3e:
e0:52:1a:7b:c2:b5:e2:d9:78:66:01:eb:26:93:9e:
02:22:02:06:11:4b:f1:19:bc:22:e4:9d:16:86:2e:
38:74:9d:3d:f0:3b:a1:23:17:70:68:cd:57:a5:17:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:52:B2:E7:58:49:C3:E4:6E:BC:87:24:26:6D:86:FC:61:E7:C0:3C
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/flKy51hJw-RuvIckJm2G_GHnwDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.44.0/22
77.37.71.0-77.37.75.255
77.37.84.0/22
Signature Algorithm: sha256WithRSAEncryption
83:55:14:df:2e:37:72:30:5f:f9:c7:52:7b:57:51:5d:1d:c8:
d0:4f:69:8e:04:96:e9:b7:5a:45:a9:23:4d:45:64:97:b0:70:
70:a5:c7:f4:69:94:d6:08:24:6d:cf:4a:c5:0c:73:ba:45:c7:
69:75:c6:db:2f:97:95:b7:49:06:19:c0:a0:f5:ba:a3:a6:57:
8f:e9:c9:2f:cf:9c:9c:d3:c8:15:59:25:2b:3f:ec:af:a8:02:
b2:20:97:f5:64:ef:f8:c4:ee:e7:aa:78:3d:1c:ff:09:8f:d9:
a4:dd:15:ed:77:84:1e:ad:63:f4:3b:b1:f4:6f:3f:bf:3c:c9:
36:3b:8f:d5:a2:a3:c6:83:17:f6:71:ff:5a:c6:21:ee:2c:cb:
b1:6c:cf:09:6a:dd:0c:fc:1a:b4:63:68:be:f7:d9:65:be:57:
26:a6:50:a8:57:ba:cb:4a:e6:d2:24:68:fe:cc:52:ce:1d:90:
00:1a:d0:c3:24:a3:94:6c:01:de:23:71:dc:e5:54:c7:90:49:
7d:55:1a:ec:8a:a8:fd:3a:39:ce:18:0d:34:97:6c:94:17:69:
a6:5e:01:40:f0:21:7b:c6:f9:6b:ac:c8:95:23:af:8a:d0:56:
f8:4b:e4:56:dc:14:a7:5b:40:34:a6:7d:af:2a:7d:f9:fd:db:
f1:c9:5b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net