Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/VybUprKVww3_B9fD-L2BIIc1CBw.roa
File: VybUprKVww3_B9fD-L2BIIc1CBw.roa (raw, json)
Hash identifier: fJBZk0YPUhmYOmZDcsNDi1DMXDSuuAwM//2T2wbqJdw=
Subject key identifier: 57:26:D4:A6:B2:95:C3:0D:FF:07:D7:C3:F8:BD:81:20:87:35:08:1C
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 0194285D6F3B68B3C1B9FCED3B715969F202
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/VybUprKVww3_B9fD-L2BIIc1CBw.roa
Signing time: Thu 02 Jan 2025 18:53:19 +0000
ROA not before: Thu 02 Jan 2025 18:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49367
IP address blocks: 31.193.188.0/24 maxlen: 24
37.156.174.0/24 maxlen: 24
45.83.56.0/22 maxlen: 22
45.86.144.0/22 maxlen: 22
77.81.103.0/24 maxlen: 24
85.204.255.0/24 maxlen: 24
86.107.110.0/24 maxlen: 24
89.34.236.0/23 maxlen: 23
89.34.239.0/24 maxlen: 24
89.39.201.0/24 maxlen: 24
89.39.254.0/24 maxlen: 24
89.40.142.0/23 maxlen: 23
89.40.227.0/24 maxlen: 24
89.42.134.0/24 maxlen: 24
89.43.34.0/24 maxlen: 24
89.43.35.0/24 maxlen: 24
89.43.52.0/24 maxlen: 24
91.212.52.0/24 maxlen: 24
91.229.186.0/24 maxlen: 24
93.113.144.0/21 maxlen: 21
93.113.144.0/22 maxlen: 22
93.113.144.0/24 maxlen: 24
93.113.145.0/24 maxlen: 24
93.113.146.0/24 maxlen: 24
93.113.147.0/24 maxlen: 24
93.113.148.0/22 maxlen: 22
93.113.148.0/24 maxlen: 24
93.113.149.0/24 maxlen: 24
93.113.150.0/24 maxlen: 24
93.113.151.0/24 maxlen: 24
94.176.212.0/24 maxlen: 24
94.177.21.0/24 maxlen: 24
94.177.48.0/23 maxlen: 23
185.184.240.0/22 maxlen: 22
185.184.240.0/24 maxlen: 24
185.184.241.0/24 maxlen: 24
185.184.242.0/24 maxlen: 24
185.184.243.0/24 maxlen: 24
185.198.244.0/24 maxlen: 24
185.198.245.0/24 maxlen: 24
185.198.246.0/24 maxlen: 24
185.198.247.0/24 maxlen: 24
188.208.16.0/23 maxlen: 23
188.208.16.0/24 maxlen: 24
188.208.17.0/24 maxlen: 24
188.211.248.0/24 maxlen: 24
188.215.6.0/23 maxlen: 23
188.215.6.0/24 maxlen: 24
188.215.7.0/24 maxlen: 24
188.215.94.0/24 maxlen: 24
188.240.228.0/23 maxlen: 23
188.240.228.0/24 maxlen: 24
188.240.229.0/24 maxlen: 24
193.239.140.0/23 maxlen: 23
217.198.177.0/24 maxlen: 24
2a04:68c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:5d:6f:3b:68:b3:c1:b9:fc:ed:3b:71:59:69:f2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Jan 2 18:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5726d4a6b295c30dff07d7c3f8bd81208735081c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:cb:ab:f9:bc:a8:5d:fc:9a:4d:1d:13:eb:
d1:12:bc:10:1c:09:7a:20:2e:69:94:4b:13:d1:b2:
7f:f1:ca:3d:aa:07:6f:b9:0f:ed:65:0a:82:54:fc:
4d:23:83:23:26:78:45:39:02:1e:64:68:8c:d4:b7:
d0:4f:47:f4:c6:90:5b:55:36:23:10:27:41:36:d6:
8f:34:d7:92:4f:c7:4a:1c:31:1d:3b:06:2d:e0:4a:
9f:96:d1:1d:c4:38:c5:75:a6:07:48:40:37:1a:6f:
4e:cf:a9:ff:f0:02:5b:7e:80:cb:1f:83:88:62:93:
f4:aa:63:61:b9:90:bc:ba:22:ff:bf:06:34:13:92:
79:e7:2c:3a:e3:ae:78:bb:71:a7:a4:07:42:68:34:
91:3b:fc:eb:b0:5d:ba:00:ae:b4:2e:90:6b:1e:d7:
0b:45:7b:8e:5b:20:17:8a:f9:20:ec:9d:60:fa:88:
cc:1f:50:08:50:06:47:3d:72:da:b5:57:a1:7c:ac:
e8:92:4a:c9:84:af:55:06:eb:8b:33:5e:0f:65:03:
aa:2f:a4:9b:4e:e9:ff:85:3e:f3:13:35:7d:83:bd:
88:6d:b7:b5:61:f2:b1:6b:3f:d7:e0:27:c7:66:c8:
cd:58:04:a0:1e:cb:db:89:9e:65:be:61:c3:62:99:
a6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:26:D4:A6:B2:95:C3:0D:FF:07:D7:C3:F8:BD:81:20:87:35:08:1C
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/VybUprKVww3_B9fD-L2BIIc1CBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.188.0/24
37.156.174.0/24
45.83.56.0/22
45.86.144.0/22
77.81.103.0/24
85.204.255.0/24
86.107.110.0/24
89.34.236.0/23
89.34.239.0/24
89.39.201.0/24
89.39.254.0/24
89.40.142.0/23
89.40.227.0/24
89.42.134.0/24
89.43.34.0/23
89.43.52.0/24
91.212.52.0/24
91.229.186.0/24
93.113.144.0/21
94.176.212.0/24
94.177.21.0/24
94.177.48.0/23
185.184.240.0/22
185.198.244.0/22
188.208.16.0/23
188.211.248.0/24
188.215.6.0/23
188.215.94.0/24
188.240.228.0/23
193.239.140.0/23
217.198.177.0/24
IPv6:
2a04:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
97:ea:c9:2b:72:70:17:b6:fb:c6:81:59:78:0f:b2:e7:b0:09:
56:05:6f:2a:9a:69:82:95:5c:cd:e1:6c:e9:ce:fc:d5:de:f7:
1f:67:dc:0e:90:1a:3d:24:4d:29:01:fc:dd:a5:04:2d:a7:29:
b0:36:e6:32:11:73:34:57:90:9c:fe:62:63:6b:6e:a7:86:72:
82:61:2b:26:d5:46:6f:a7:fd:86:44:3e:21:61:79:16:3f:ae:
93:67:19:69:cd:9f:33:7a:b5:1c:c7:4f:8a:d4:fd:e8:ed:1c:
3f:ea:e2:00:33:56:5a:99:61:6b:cc:7a:a8:c0:48:cd:7b:5c:
fc:65:76:a4:ab:e9:21:46:0d:4b:d9:bc:4f:35:06:03:ab:01:
d5:d4:95:7c:2a:b3:a0:b2:72:6b:d2:86:09:41:c4:6f:aa:d0:
84:fa:1f:24:a6:f7:d8:08:a9:91:eb:01:90:7c:8c:2c:3b:3c:
4f:02:95:43:c9:95:a5:df:d6:a9:77:fb:e3:1d:5c:3a:c6:9b:
12:54:e0:11:ca:d5:50:f4:6b:fc:c8:bc:16:0d:db:be:c2:2c:
bb:a3:7c:90:fc:3c:21:11:6c:b0:9d:73:79:34:13:d5:2d:97:
f9:49:43:07:16:c3:34:a0:32:1c:ee:d3:03:50:7a:1b:4e:da:
f2:57:1a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:48 2025 by rpki-client on console.sobornost.net