Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/sop-eXnQpVYjjZ9LI5CcdsNMcvM.roa
File: sop-eXnQpVYjjZ9LI5CcdsNMcvM.roa (raw, json)
Hash identifier: BQ42+7SQ/Uto0Spl4OZczijMHtNHPRdtreDlEFBf9pA=
Subject key identifier: B2:8A:7E:79:79:D0:A5:56:23:8D:9F:4B:23:90:9C:76:C3:4C:72:F3
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 019002B9E1F795FC3CCD54FF298F58FCC1DD
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/sop-eXnQpVYjjZ9LI5CcdsNMcvM.roa
Signing time: Mon 10 Jun 2024 15:17:34 +0000
ROA not before: Mon 10 Jun 2024 15:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136787
IP address blocks: 82.140.135.0/24 maxlen: 24
82.140.136.0/24 maxlen: 24
82.140.137.0/24 maxlen: 24
82.140.142.0/24 maxlen: 24
82.140.144.0/24 maxlen: 24
82.140.145.0/24 maxlen: 24
82.140.147.0/24 maxlen: 24
82.140.149.0/24 maxlen: 24
82.140.151.0/24 maxlen: 24
82.140.154.0/24 maxlen: 24
82.140.155.0/24 maxlen: 24
82.140.157.0/24 maxlen: 24
82.140.181.0/24 maxlen: 24
82.140.190.0/24 maxlen: 24
84.46.165.0/24 maxlen: 24
84.46.166.0/24 maxlen: 24
84.46.174.0/24 maxlen: 24
86.38.2.0/24 maxlen: 24
86.38.44.0/24 maxlen: 24
86.38.46.0/24 maxlen: 24
86.38.91.0/24 maxlen: 24
86.38.157.0/24 maxlen: 24
86.38.206.0/24 maxlen: 24
86.38.207.0/24 maxlen: 24
86.38.224.0/24 maxlen: 24
86.38.231.0/24 maxlen: 24
89.116.0.0/24 maxlen: 24
89.116.18.0/24 maxlen: 24
89.116.40.0/24 maxlen: 24
89.116.55.0/24 maxlen: 24
89.116.57.0/24 maxlen: 24
89.116.79.0/24 maxlen: 24
89.116.94.0/24 maxlen: 24
89.116.95.0/24 maxlen: 24
89.116.98.0/24 maxlen: 24
89.116.142.0/24 maxlen: 24
89.116.145.0/24 maxlen: 24
89.116.194.0/24 maxlen: 24
89.116.195.0/24 maxlen: 24
89.116.196.0/24 maxlen: 24
89.116.197.0/24 maxlen: 24
89.116.199.0/24 maxlen: 24
89.116.201.0/24 maxlen: 24
89.116.204.0/24 maxlen: 24
89.116.205.0/24 maxlen: 24
89.116.206.0/24 maxlen: 24
89.116.207.0/24 maxlen: 24
89.116.216.0/24 maxlen: 24
89.116.217.0/24 maxlen: 24
89.116.219.0/24 maxlen: 24
89.116.222.0/24 maxlen: 24
89.116.251.0/24 maxlen: 24
89.116.254.0/24 maxlen: 24
89.117.4.0/24 maxlen: 24
89.117.34.0/24 maxlen: 24
89.117.131.0/24 maxlen: 24
89.117.189.0/24 maxlen: 24
89.117.191.0/24 maxlen: 24
89.117.230.0/24 maxlen: 24
89.117.231.0/24 maxlen: 24
89.117.244.0/24 maxlen: 24
217.9.251.0/24 maxlen: 24
217.9.252.0/24 maxlen: 24
217.9.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:02:b9:e1:f7:95:fc:3c:cd:54:ff:29:8f:58:fc:c1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Jun 10 15:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b28a7e7979d0a556238d9f4b23909c76c34c72f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:66:92:d4:c3:f3:f2:d4:81:27:85:48:a4:f5:
a8:19:10:72:92:83:62:33:3e:09:cb:27:9a:f6:4b:
c5:22:21:69:79:75:16:1b:dd:ed:bf:f7:ad:5a:f7:
67:73:d4:e0:c0:61:cf:45:04:86:9c:bf:7b:60:22:
50:15:fd:6d:f6:4f:f0:3e:4c:ca:08:7c:85:8c:8e:
78:0b:74:de:1a:2e:24:b5:75:9a:dc:60:34:af:90:
27:46:75:7e:e8:21:62:57:92:de:e5:30:52:b7:83:
67:13:c7:69:e3:78:b0:ee:bd:3c:f3:92:30:db:72:
13:66:81:a5:1c:f1:aa:f9:87:d9:e9:00:e7:d4:56:
5d:7c:0f:41:f0:39:21:fe:eb:51:64:50:3a:d6:c0:
ab:5a:b2:ab:4d:34:6c:79:b4:9d:43:f2:ba:d5:c4:
dd:9c:84:22:98:f3:ad:ab:f8:c0:e4:3f:77:16:a7:
cb:f2:95:aa:d1:a3:0f:f3:71:88:97:17:35:10:08:
f7:99:2d:5e:6b:69:98:0f:7d:7e:40:c4:4b:07:b7:
64:19:bc:31:9a:c8:4f:12:20:b6:43:4a:31:11:7d:
9c:cf:73:db:4d:b8:ea:cf:ea:1a:a1:bc:b6:01:25:
a7:2c:8d:ec:28:b1:c6:a6:a4:5b:12:ae:fd:3b:fe:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8A:7E:79:79:D0:A5:56:23:8D:9F:4B:23:90:9C:76:C3:4C:72:F3
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/sop-eXnQpVYjjZ9LI5CcdsNMcvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.135.0-82.140.137.255
82.140.142.0/24
82.140.144.0/23
82.140.147.0/24
82.140.149.0/24
82.140.151.0/24
82.140.154.0/23
82.140.157.0/24
82.140.181.0/24
82.140.190.0/24
84.46.165.0-84.46.166.255
84.46.174.0/24
86.38.2.0/24
86.38.44.0/24
86.38.46.0/24
86.38.91.0/24
86.38.157.0/24
86.38.206.0/23
86.38.224.0/24
86.38.231.0/24
89.116.0.0/24
89.116.18.0/24
89.116.40.0/24
89.116.55.0/24
89.116.57.0/24
89.116.79.0/24
89.116.94.0/23
89.116.98.0/24
89.116.142.0/24
89.116.145.0/24
89.116.194.0-89.116.197.255
89.116.199.0/24
89.116.201.0/24
89.116.204.0/22
89.116.216.0/23
89.116.219.0/24
89.116.222.0/24
89.116.251.0/24
89.116.254.0/24
89.117.4.0/24
89.117.34.0/24
89.117.131.0/24
89.117.189.0/24
89.117.191.0/24
89.117.230.0/23
89.117.244.0/24
217.9.251.0-217.9.253.255
Signature Algorithm: sha256WithRSAEncryption
51:0b:6e:16:d0:f0:c8:79:0b:d2:74:91:b8:bc:68:05:8a:d2:
e6:58:26:e8:70:28:a2:45:f5:e1:21:bf:36:0d:1c:90:ce:e0:
b4:59:5b:2a:82:73:b3:79:7a:d0:12:ed:18:0b:b2:36:cc:8d:
56:06:40:2c:ef:77:bc:44:cf:27:c7:58:3e:10:1e:f8:f1:22:
5b:0f:e2:db:ee:fe:89:ee:5e:09:e3:28:9b:f0:5f:0e:c5:b7:
35:9c:b2:87:d4:6e:8b:98:65:a6:96:c3:93:51:c0:9c:b6:94:
7f:58:47:f3:70:e0:76:bf:b4:9d:a0:61:07:23:8f:7e:b0:49:
c9:69:87:ca:fd:2a:f9:35:71:fc:d2:d5:83:4e:d2:c3:ad:e0:
4f:65:b5:9c:ca:66:d2:56:d6:a0:de:f3:31:41:04:d2:e6:7d:
87:24:fa:0b:8f:80:41:38:4c:89:25:d9:3d:5f:39:48:78:93:
6c:93:7e:69:a9:d5:e6:de:29:7d:0b:f8:12:37:0b:8d:76:dd:
87:99:be:4a:6a:5f:f1:24:43:8e:47:78:a5:1b:c7:52:e7:08:
e7:ce:eb:c0:12:d2:52:7c:63:6b:96:a8:ac:15:77:e3:86:48:
3a:84:5d:ff:75:d6:9f:5b:7e:17:6d:c8:aa:f8:7c:de:79:27:
cf:f3:04:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 03:52:48 2024 by rpki-client on console.sobornost.net