Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/pY5WnxBboj4uvuH7ko_3hA0DHzs.roa
File: pY5WnxBboj4uvuH7ko_3hA0DHzs.roa (raw, json)
Hash identifier: lDOI1jxtcpQNa1tGOLVShut6rbU8MsYUTIs7IEUewrg=
Subject key identifier: A5:8E:56:9F:10:5B:A2:3E:2E:BE:E1:FB:92:8F:F7:84:0D:03:1F:3B
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01832BF7313D92E213079A8AD671D2B7DF34
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/pY5WnxBboj4uvuH7ko_3hA0DHzs.roa
Signing time: Sun 11 Sep 2022 09:52:43 +0000
ROA not before: Sun 11 Sep 2022 09:52:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.176.54.0/24 maxlen: 24
193.176.55.0/24 maxlen: 24
45.154.106.0/23 maxlen: 24
91.199.168.0/24 maxlen: 24
141.98.156.0/23 maxlen: 24
147.78.122.0/23 maxlen: 24
147.78.120.0/23 maxlen: 24
45.149.186.0/23 maxlen: 24
45.149.184.0/23 maxlen: 24
45.158.10.0/23 maxlen: 24
45.158.8.0/23 maxlen: 24
45.153.4.0/23 maxlen: 23
195.206.230.0/24 maxlen: 24
195.206.231.0/24 maxlen: 24
176.105.226.0/23 maxlen: 24
176.105.224.0/23 maxlen: 24
195.206.234.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
45.142.236.0/23 maxlen: 24
45.142.238.0/23 maxlen: 24
193.111.116.0/24 maxlen: 24
193.111.117.0/24 maxlen: 24
45.158.170.0/23 maxlen: 24
45.158.168.0/23 maxlen: 24
193.151.182.0/23 maxlen: 24
193.151.180.0/23 maxlen: 24
195.20.98.0/24 maxlen: 24
194.104.156.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
194.105.21.0/24 maxlen: 24
152.89.248.0/23 maxlen: 24
152.89.250.0/23 maxlen: 24
193.29.96.0/23 maxlen: 24
193.29.98.0/23 maxlen: 24
194.147.4.0/23 maxlen: 24
194.147.6.0/23 maxlen: 24
194.5.146.0/23 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2b:f7:31:3d:92:e2:13:07:9a:8a:d6:71:d2:b7:df:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 11 09:52:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a58e569f105ba23e2ebee1fb928ff7840d031f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:c7:61:ce:48:68:34:e7:03:c0:07:5b:be:
b7:e4:1f:ba:a0:97:d1:e4:af:b7:b4:69:d5:ff:c7:
c5:d4:0a:87:12:fe:86:e8:5c:3e:6b:b7:a1:e5:b0:
29:ec:bd:ae:68:bd:ae:e7:65:6c:8d:90:fc:0e:43:
9d:43:92:00:f0:4e:7f:e7:1c:26:7f:59:ad:15:60:
14:0b:d2:9c:38:e9:dc:58:de:22:9e:16:93:83:df:
8a:40:8c:f8:30:e9:c2:f0:1f:de:94:7e:0a:23:15:
08:a4:74:f3:fe:bd:b4:00:fb:71:06:3f:09:b7:df:
dc:ae:47:13:e8:f1:d7:95:f7:21:6c:5a:a1:dc:b0:
b1:a3:0a:e2:52:cc:7b:66:74:d9:62:19:cb:9f:88:
fa:0d:ca:b8:88:9f:b4:e3:84:9e:c0:07:5d:e7:be:
10:63:22:40:32:5b:1e:b3:94:31:f3:f6:c2:18:6e:
73:94:0b:9c:d6:a7:40:92:be:73:bd:f4:74:1e:b6:
a4:94:5a:c5:06:af:b3:ba:bd:63:ae:f7:09:bb:b4:
fa:a3:b5:51:56:1d:ef:35:0b:a0:e3:34:8b:a1:0b:
82:e8:e0:85:85:93:f2:09:44:a1:39:e9:4c:ee:eb:
c4:70:65:1f:5d:ee:8a:72:1e:e7:c6:1a:ef:b5:41:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8E:56:9F:10:5B:A2:3E:2E:BE:E1:FB:92:8F:F7:84:0D:03:1F:3B
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/pY5WnxBboj4uvuH7ko_3hA0DHzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/22
45.149.184.0/22
45.153.4.0/22
45.154.106.0/23
45.158.8.0/22
45.158.168.0/22
91.199.168.0/24
141.98.156.0/23
147.78.120.0/22
152.89.248.0/22
176.105.224.0/22
193.29.96.0/22
193.111.116.0/23
193.142.22.0/24
193.151.180.0/22
193.176.54.0/23
194.5.146.0/23
194.104.156.0/24
194.104.158.0/24
194.105.21.0/24
194.147.4.0/22
195.20.98.0/23
195.20.105.0/24
195.206.230.0/23
195.206.234.0/23
Signature Algorithm: sha256WithRSAEncryption
88:9d:1d:c3:28:a9:0a:fe:73:9b:0a:17:21:e8:e9:25:68:53:
b9:42:46:ad:ed:34:18:77:82:6b:0d:bb:37:7f:0b:49:ec:5d:
af:df:e2:89:2d:f2:99:3f:0f:28:ba:c3:ff:c6:70:8e:fa:60:
04:94:cf:0c:da:2d:f0:c0:00:48:0d:c7:04:93:90:2a:02:51:
ac:92:fc:b2:49:90:04:94:1d:82:80:46:0a:c7:08:cb:a3:dd:
2f:ac:3a:4c:9d:03:01:89:1b:f5:24:75:b1:1f:de:61:33:cb:
3a:ce:f6:68:ab:7a:2c:cf:1c:43:a8:1d:33:bb:87:07:6a:50:
be:e4:59:ce:50:25:00:d5:ec:cf:c7:b9:bb:5c:7f:5b:24:de:
d9:6c:9b:fd:d1:20:96:8c:67:0f:24:13:bd:80:f6:96:23:4d:
04:6d:8b:df:a5:f1:3b:67:9f:95:29:ce:a7:f9:d6:d2:c9:f1:
72:fc:94:fa:00:be:81:85:37:89:b7:53:a9:fd:16:9d:ae:9f:
8f:b0:cb:54:93:e3:cb:d7:7c:26:3a:cc:67:73:12:37:72:d5:
d0:04:d1:46:93:55:37:4c:f6:f6:76:73:b8:8b:61:39:e3:cb:
87:26:5d:f6:4f:75:86:bf:f4:e8:5a:e1:e7:b4:30:78:dc:c7:
81:33:8d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:42 2023 by rpki-client on console.sobornost.net