Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/yrcKp_wF-oUfuqJle26-CxjrgSo.roa
File: yrcKp_wF-oUfuqJle26-CxjrgSo.roa (raw, json)
Hash identifier: JhkK+MnfsPgeWyFmUhRUiCVRynJWpb/8lI7if7teFDA=
Subject key identifier: CA:B7:0A:A7:FC:05:FA:85:1F:BA:A2:65:7B:6E:BE:0B:18:EB:81:2A
Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial: 019087B8445EE50DCC30BD40FEBF5B85FE62
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/yrcKp_wF-oUfuqJle26-CxjrgSo.roa
Signing time: Sat 06 Jul 2024 11:05:18 +0000
ROA not before: Sat 06 Jul 2024 11:05:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60976
IP address blocks: 31.214.168.0/21 maxlen: 21
31.214.168.0/24 maxlen: 24
31.214.169.0/24 maxlen: 24
31.214.170.0/24 maxlen: 24
31.214.171.0/24 maxlen: 24
31.214.172.0/24 maxlen: 24
31.214.173.0/24 maxlen: 24
31.214.174.0/24 maxlen: 24
31.214.175.0/24 maxlen: 24
31.214.248.0/21 maxlen: 21
31.214.248.0/24 maxlen: 24
31.214.249.0/24 maxlen: 24
31.214.250.0/24 maxlen: 24
31.214.251.0/24 maxlen: 24
31.214.252.0/24 maxlen: 24
31.214.253.0/24 maxlen: 24
31.214.254.0/24 maxlen: 24
31.214.255.0/24 maxlen: 24
37.10.109.0/24 maxlen: 24
37.228.136.0/22 maxlen: 22
37.228.136.0/24 maxlen: 24
37.228.137.0/24 maxlen: 24
37.228.138.0/24 maxlen: 24
37.228.139.0/24 maxlen: 24
82.99.215.0/24 maxlen: 24
82.99.216.0/22 maxlen: 22
82.99.216.0/24 maxlen: 24
82.99.217.0/24 maxlen: 24
82.99.218.0/24 maxlen: 24
82.99.219.0/24 maxlen: 24
82.99.238.0/24 maxlen: 24
82.99.242.0/24 maxlen: 24
82.99.243.0/24 maxlen: 24
82.99.244.0/24 maxlen: 24
95.156.236.0/24 maxlen: 24
95.156.237.0/24 maxlen: 24
95.156.252.0/22 maxlen: 22
95.156.252.0/24 maxlen: 24
95.156.253.0/24 maxlen: 24
95.156.254.0/24 maxlen: 24
95.156.255.0/24 maxlen: 24
109.230.200.0/24 maxlen: 24
109.230.204.0/22 maxlen: 22
109.230.204.0/24 maxlen: 24
109.230.205.0/24 maxlen: 24
109.230.206.0/24 maxlen: 24
109.230.207.0/24 maxlen: 24
109.230.221.0/24 maxlen: 24
109.230.223.0/24 maxlen: 24
109.230.242.0/24 maxlen: 24
109.230.251.0/24 maxlen: 24
134.255.200.0/21 maxlen: 21
134.255.200.0/24 maxlen: 24
134.255.201.0/24 maxlen: 24
134.255.202.0/24 maxlen: 24
134.255.203.0/24 maxlen: 24
134.255.204.0/24 maxlen: 24
134.255.205.0/24 maxlen: 24
134.255.206.0/24 maxlen: 24
134.255.207.0/24 maxlen: 24
185.13.228.0/22 maxlen: 22
185.13.228.0/24 maxlen: 24
185.13.229.0/24 maxlen: 24
185.13.230.0/24 maxlen: 24
185.13.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:87:b8:44:5e:e5:0d:cc:30:bd:40:fe:bf:5b:85:fe:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
Validity
Not Before: Jul 6 11:05:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cab70aa7fc05fa851fbaa2657b6ebe0b18eb812a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:6f:8d:f1:d9:b4:01:62:d8:94:1b:6f:0d:
0c:aa:da:52:b7:50:8d:35:1e:10:29:83:54:41:f4:
67:55:88:a5:5b:36:b2:63:0a:96:b1:56:9b:37:f0:
e8:d3:d1:8a:1a:24:fd:22:e6:24:58:8f:60:09:0e:
cb:ef:0b:6b:cb:f7:54:5d:ba:76:91:f6:99:1e:97:
8f:59:98:aa:f8:14:6f:b1:b5:7f:3f:9e:41:7c:ba:
7a:0f:78:2f:56:0f:95:fd:c2:33:48:9d:23:fa:db:
d9:13:e6:b9:36:d0:3e:10:1f:15:41:3c:7e:9b:6a:
81:5a:32:00:58:02:ae:bd:80:05:63:b0:92:63:7a:
60:53:39:4a:ed:af:d7:12:c4:c8:9f:e5:42:46:a8:
81:73:ec:10:b7:33:46:cc:2d:f3:ce:a5:32:25:fe:
73:63:1e:cf:be:12:e3:d5:e9:42:f8:20:32:79:cf:
45:89:f4:78:b6:1e:b2:3a:87:2e:ba:e9:29:37:51:
30:8a:41:98:83:34:d0:44:dc:72:ca:f6:40:9e:bf:
dd:5e:35:e4:87:8d:3b:a0:dd:91:4a:09:6f:b9:16:
86:d9:a0:4a:41:7c:a9:dd:0b:4c:26:a1:fc:bb:86:
32:37:5e:7b:4f:bb:4b:b0:64:36:e0:a7:7f:5e:4f:
cd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B7:0A:A7:FC:05:FA:85:1F:BA:A2:65:7B:6E:BE:0B:18:EB:81:2A
X509v3 Authority Key Identifier:
keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/yrcKp_wF-oUfuqJle26-CxjrgSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.168.0/21
31.214.248.0/21
37.10.109.0/24
37.228.136.0/22
82.99.215.0-82.99.219.255
82.99.238.0/24
82.99.242.0-82.99.244.255
95.156.236.0/23
95.156.252.0/22
109.230.200.0/24
109.230.204.0/22
109.230.221.0/24
109.230.223.0/24
109.230.242.0/24
109.230.251.0/24
134.255.200.0/21
185.13.228.0/22
Signature Algorithm: sha256WithRSAEncryption
23:e9:87:b4:66:49:66:e8:9c:54:fc:2d:d9:54:46:4e:ed:ca:
46:19:a7:45:55:99:3b:c9:dd:a0:68:82:6c:9a:f8:6a:80:ac:
26:d4:f9:1b:b1:89:e9:9a:28:45:4b:b3:19:55:38:00:7a:f8:
57:12:b8:91:bb:c4:95:b9:7f:d5:40:61:5a:02:35:94:32:8d:
7a:6e:f3:13:4c:ef:51:71:71:5c:7c:14:f2:a8:7e:2a:e6:cb:
ba:25:fa:2f:88:a3:1e:30:ec:85:b2:73:34:88:fb:36:af:a5:
d5:d7:a5:ee:4d:5d:88:de:1c:57:b8:9a:2f:99:ad:77:dc:b8:
cd:5f:7d:8a:d6:02:e1:a8:75:1c:fa:f1:40:dd:1c:6b:a4:97:
1a:d9:e5:67:84:13:28:4c:32:bc:6b:35:5d:f9:fc:1f:6e:5f:
dc:41:e3:0d:01:42:bf:87:76:74:4f:1c:58:9e:11:38:34:8f:
61:f2:9e:29:7a:ae:80:7a:40:ad:d8:38:3f:cc:06:a0:d6:88:
01:31:5c:e0:19:79:0a:ea:09:08:74:85:4c:46:d5:a3:46:1d:
82:a7:02:c1:69:84:29:3b:49:2d:1d:0e:95:27:49:11:23:2f:
82:7e:18:0e:84:c8:39:59:7a:5c:cc:a6:eb:09:86:63:f8:94:
d1:09:48:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 04:40:43 2024 by rpki-client on console.sobornost.net