Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/ZW2BoNltCVkvM-RD2VJD39hrK0E.roa
File: ZW2BoNltCVkvM-RD2VJD39hrK0E.roa (raw, json)
Hash identifier: et7Q9suytj5Bq/aJeB7Pawrw54k9oTZlPfZUjevU7jg=
Subject key identifier: 65:6D:81:A0:D9:6D:09:59:2F:33:E4:43:D9:52:43:DF:D8:6B:2B:41
Certificate issuer: /CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Certificate serial: 0191335F893293F4FA46A2B4628E1970270A
Authority key identifier: D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/ZW2BoNltCVkvM-RD2VJD39hrK0E.roa
Signing time: Thu 08 Aug 2024 19:03:04 +0000
ROA not before: Thu 08 Aug 2024 19:03:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200428
IP address blocks: 77.93.90.0/24 maxlen: 24
77.93.93.0/24 maxlen: 24
77.93.94.0/24 maxlen: 24
77.93.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:33:5f:89:32:93:f4:fa:46:a2:b4:62:8e:19:70:27:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Validity
Not Before: Aug 8 19:03:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=656d81a0d96d09592f33e443d95243dfd86b2b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:9b:bd:94:c7:53:c0:8b:17:d6:f6:13:5a:
3c:cc:64:35:d3:ac:4f:b2:05:fb:d0:97:16:e5:b9:
85:31:78:2c:92:81:2a:8c:77:2f:81:2b:0c:2b:83:
ad:25:80:15:02:34:11:b1:13:68:f1:d4:ee:94:04:
53:d9:1c:5a:9a:8b:a0:38:8f:d2:81:5b:be:f2:7f:
87:7e:01:92:54:ad:b8:02:d7:d4:65:26:40:8b:40:
d6:16:76:95:04:12:ca:a5:93:26:c7:fe:79:ec:f0:
dc:0d:a6:78:11:e1:76:fa:d8:75:c6:c8:70:ec:8c:
17:4e:4b:ef:69:bc:23:2c:d5:a1:2a:df:82:2c:d9:
ba:a1:e6:64:d8:dc:72:3b:eb:27:0e:1e:df:f7:e7:
6a:c1:5a:59:a2:2a:ae:09:41:34:82:15:b3:ec:d3:
b6:b2:25:d4:7a:47:f1:30:00:4e:05:27:8f:2d:5d:
de:9b:3c:34:39:0a:93:4d:00:8e:84:0f:f2:b0:7d:
02:59:fe:a1:71:c9:02:3e:78:c4:f9:c2:d8:61:9f:
35:6a:52:9d:67:d6:00:e8:18:5a:43:7e:43:d5:75:
00:ba:6b:0e:85:2c:29:1e:87:ad:38:8d:ee:b0:24:
e2:b3:7e:c5:cf:6d:f5:f0:28:00:6a:23:79:e4:71:
b6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6D:81:A0:D9:6D:09:59:2F:33:E4:43:D9:52:43:DF:D8:6B:2B:41
X509v3 Authority Key Identifier:
keyid:D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/ZW2BoNltCVkvM-RD2VJD39hrK0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.90.0/24
77.93.93.0-77.93.95.255
Signature Algorithm: sha256WithRSAEncryption
2f:9b:bc:43:c8:22:a4:fb:74:08:da:09:2b:3f:8e:4e:db:3a:
ab:23:52:61:94:a7:57:01:fe:47:68:6a:55:93:d2:d5:20:36:
f3:7c:7f:70:2e:cb:4c:ed:36:f3:37:7e:3a:81:37:54:d8:75:
f7:0d:bf:2b:c2:65:32:5d:07:c0:9a:5c:21:0a:37:0f:f5:de:
80:06:2c:ad:ec:25:4c:a0:c9:17:20:24:e4:47:9c:48:be:ce:
a3:6c:1a:60:cc:e5:6c:13:88:93:be:f2:70:f2:04:75:9e:11:
fe:69:aa:6e:ae:79:ec:3a:04:14:8f:41:68:de:60:eb:5e:79:
f3:c0:b0:34:21:84:c3:23:4b:de:7c:77:d3:bf:79:ba:a1:68:
6d:ca:d6:21:b6:c3:c7:10:b9:1e:4a:f5:87:17:7a:e1:1c:06:
60:6b:b7:32:4a:7d:2c:0b:79:03:2e:f4:d8:d1:8f:a5:ea:41:
9d:66:12:4b:bb:52:a7:9f:b3:e1:a9:ed:39:b4:b0:b3:69:39:
34:ac:ea:00:15:df:10:2a:cd:3b:c8:f0:29:47:4a:f1:cd:75:
18:51:da:35:66:7a:dc:51:6d:c6:11:dd:1c:73:68:6a:a0:65:
bc:eb:71:4c:8e:88:c0:96:4f:f3:eb:64:5b:e5:ab:d0:15:43:
49:29:de:99
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:16:02 2024 by rpki-client on console.sobornost.net