Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/zR72SGzI50sIWW13nVxcz0Rh1Kc.roa
File: zR72SGzI50sIWW13nVxcz0Rh1Kc.roa (raw, json)
Hash identifier: ex6bJ45ZW2M9dgiQN5BUM3LWj8+bHawX4rZIdVZk/PY=
Subject key identifier: CD:1E:F6:48:6C:C8:E7:4B:08:59:6D:77:9D:5C:5C:CF:44:61:D4:A7
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 01845E67FBEDED7B92A1F5F73BFCCFF9515A
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/zR72SGzI50sIWW13nVxcz0Rh1Kc.roa
Signing time: Wed 09 Nov 2022 21:59:43 +0000
ROA not before: Wed 09 Nov 2022 21:59:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 77.37.92.0/24 maxlen: 24
77.37.95.0/24 maxlen: 24
93.127.164.0/24 maxlen: 24
93.127.171.0/24 maxlen: 24
77.37.40.0/24 maxlen: 24
77.37.58.0/24 maxlen: 24
93.127.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5e:67:fb:ed:ed:7b:92:a1:f5:f7:3b:fc:cf:f9:51:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Nov 9 21:59:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd1ef6486cc8e74b08596d779d5c5ccf4461d4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:b5:cb:5b:34:bf:a0:56:26:d5:65:c8:a2:
c5:a3:10:cd:4d:41:1d:c8:16:08:cb:b4:a5:4b:0a:
a2:af:67:14:74:f4:9b:fe:b3:ec:e7:e3:47:20:c7:
f5:91:ea:00:7e:07:18:10:1d:6a:62:8e:8f:84:79:
a7:2e:88:b3:ce:9c:77:3a:55:e6:c9:ae:32:31:ed:
69:4e:c5:30:c9:9e:0a:51:49:c5:23:1f:a9:18:d2:
5e:fe:3c:1e:b1:8b:31:27:29:6f:b6:3f:e5:9b:fd:
62:da:2a:8d:90:c9:0d:c7:7a:d0:fe:f8:95:62:05:
e7:a6:18:84:c1:cf:d6:42:27:d6:a6:81:d1:eb:a4:
db:d9:a0:17:a5:d1:60:82:50:ab:75:69:64:74:65:
7a:5b:2d:69:39:de:f4:65:25:37:54:4a:ac:7f:f9:
b4:83:8b:9d:4d:8d:0a:10:a1:77:7e:2a:36:91:0e:
fa:63:46:7c:40:14:33:69:6d:2d:75:22:23:cb:ec:
82:9e:b4:58:d0:ae:18:58:b1:c3:53:fe:06:1f:b0:
e9:12:dd:12:8f:06:27:a7:8d:7e:cb:6a:a4:a5:27:
68:16:c6:a2:57:03:09:d7:86:cd:8f:00:8a:7f:15:
0a:4c:47:b9:7d:6f:c5:ac:06:12:3c:05:ce:80:48:
6b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1E:F6:48:6C:C8:E7:4B:08:59:6D:77:9D:5C:5C:CF:44:61:D4:A7
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/zR72SGzI50sIWW13nVxcz0Rh1Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.40.0/24
77.37.58.0/24
77.37.92.0/24
77.37.95.0/24
93.127.164.0/24
93.127.171.0/24
93.127.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:ad:a5:b6:83:d2:9e:30:91:e0:2a:d0:da:77:e0:9b:49:a8:
1d:c8:37:df:5d:81:d9:42:63:73:ba:f3:fe:6b:22:c0:cb:72:
db:2f:df:cc:23:23:7f:1a:74:e5:22:86:16:57:44:39:63:57:
c2:02:a5:70:82:1d:7a:5f:74:91:52:88:ea:ba:ec:78:25:09:
64:d7:cf:13:a0:e4:b8:5b:b1:b1:01:7f:5f:1f:3b:c6:16:a3:
37:66:02:5c:92:89:e6:8e:38:70:3f:2b:32:d1:b3:93:91:f7:
6e:04:a7:36:e9:76:27:56:0d:99:d6:08:54:a6:05:e4:21:61:
ea:3e:c5:92:e3:1c:cd:96:26:17:7e:e3:a9:03:25:23:1a:ac:
c5:c1:ef:f1:dd:25:01:e3:1d:cb:20:34:a7:43:29:f2:c2:23:
9a:e2:64:36:c4:b9:e9:8f:9b:99:60:89:51:13:37:63:c9:83:
bf:cb:8c:1d:c6:70:77:f0:8b:9e:7f:d6:1b:a6:57:19:06:11:
0a:cd:45:ba:88:bb:9f:f6:d5:46:c3:8d:c6:4f:48:11:f4:76:
1b:d5:cc:47:45:27:51:24:d8:aa:77:d2:fd:43:a5:29:f5:71:
3a:e2:49:83:ad:c6:7e:95:3c:7a:8d:d6:b8:8c:9f:08:e5:6d:
32:c9:32:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:05 2023 by rpki-client on console.sobornost.net