Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/TyFitQrQJKvfGQ5BmoR1Ab1fhiM.roa
File: TyFitQrQJKvfGQ5BmoR1Ab1fhiM.roa (raw, json)
Hash identifier: iaUkcLMp+giQe3m1Z2jky5A/kdEtKXfzEALPN15R0CY=
Subject key identifier: 4F:21:62:B5:0A:D0:24:AB:DF:19:0E:41:9A:84:75:01:BD:5F:86:23
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 0193916D757F94453CD4AAAB868FB2DD3E99
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/TyFitQrQJKvfGQ5BmoR1Ab1fhiM.roa
Signing time: Wed 04 Dec 2024 11:28:10 +0000
ROA not before: Wed 04 Dec 2024 11:28:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3267
IP address blocks: 80.250.160.0/19 maxlen: 24
82.137.128.0/18 maxlen: 24
82.137.176.0/20 maxlen: 22
82.179.32.0/20 maxlen: 24
82.179.63.0/24 maxlen: 24
82.179.64.0/19 maxlen: 24
82.179.140.0/23 maxlen: 23
82.179.160.0/20 maxlen: 24
83.149.192.0/18 maxlen: 24
85.142.8.0/21 maxlen: 21
85.142.16.0/20 maxlen: 24
85.142.32.0/21 maxlen: 24
85.142.52.0/22 maxlen: 24
85.142.56.0/22 maxlen: 24
85.142.102.0/23 maxlen: 24
85.142.104.0/21 maxlen: 24
85.142.116.0/22 maxlen: 24
85.142.120.0/21 maxlen: 24
85.142.148.0/23 maxlen: 24
85.142.153.0/24 maxlen: 24
85.142.162.0/23 maxlen: 24
85.143.0.0/20 maxlen: 24
85.143.18.0/23 maxlen: 24
85.143.26.0/24 maxlen: 24
85.143.96.0/22 maxlen: 24
85.143.112.0/22 maxlen: 24
85.143.124.0/22 maxlen: 24
85.143.224.0/21 maxlen: 21
85.143.239.0/24 maxlen: 24
86.110.96.0/24 maxlen: 24
86.110.101.0/24 maxlen: 24
86.110.102.0/23 maxlen: 24
185.71.96.0/22 maxlen: 22
185.141.124.0/22 maxlen: 22
188.93.107.0/24 maxlen: 24
193.27.214.0/23 maxlen: 24
194.85.32.0/20 maxlen: 20
194.85.168.0/23 maxlen: 23
194.85.174.0/23 maxlen: 23
194.149.64.0/24 maxlen: 24
194.149.70.0/23 maxlen: 24
194.190.232.0/21 maxlen: 24
194.190.240.0/23 maxlen: 24
194.190.247.0/24 maxlen: 24
194.190.249.0/24 maxlen: 24
194.190.254.0/23 maxlen: 23
194.226.192.0/19 maxlen: 24
195.209.224.0/22 maxlen: 22
195.209.234.0/24 maxlen: 24
195.209.236.0/23 maxlen: 23
195.209.240.0/22 maxlen: 22
2001:b08:22::/48 maxlen: 48
2001:b08:26::/48 maxlen: 48
2a00:db8::/32 maxlen: 48
2a07:a6c0::/29 maxlen: 29
2a07:a6c4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:91:6d:75:7f:94:45:3c:d4:aa:ab:86:8f:b2:dd:3e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Dec 4 11:28:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f2162b50ad024abdf190e419a847501bd5f8623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:c4:74:d9:51:7e:ff:5a:eb:f2:ff:2d:66:
7d:0e:9c:2c:f9:a9:26:cb:9d:37:a9:68:82:0f:5d:
b4:cc:8e:5a:e9:3c:04:a0:5b:10:1c:6a:d9:b7:e1:
13:7c:b1:7e:82:e7:38:19:00:13:47:6f:cf:b5:1a:
04:e7:06:19:0d:6d:78:5e:80:a1:04:3b:c5:81:19:
af:f6:88:5b:32:e1:24:49:e8:2e:5c:de:ed:bf:d0:
47:6f:82:ad:96:2a:83:e8:a4:2d:80:97:9a:00:b3:
4f:b3:65:31:89:bf:da:9f:25:f3:15:d1:02:26:ca:
27:39:fa:0e:c5:2c:5d:fd:f7:71:0f:2a:9e:e5:ea:
02:3f:ad:1e:1a:97:aa:91:02:5b:95:31:f7:c0:d1:
23:1b:29:9c:d8:ec:ff:17:9a:e8:17:5e:66:2e:ce:
7b:71:9c:d3:9b:9d:26:f4:80:91:1e:51:85:95:7f:
4c:d3:a0:f2:c2:58:10:c0:c4:23:80:25:8c:bb:82:
45:8c:f3:b1:89:f3:13:be:f5:a2:e5:cf:d8:4f:1f:
2e:14:bc:2d:1b:bc:74:1d:b5:d1:1a:35:b6:39:8b:
67:45:88:82:86:07:58:b6:e3:ff:14:d8:db:b9:e6:
26:a0:52:b5:e8:fb:3a:11:ca:5d:fe:d4:26:f1:12:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:21:62:B5:0A:D0:24:AB:DF:19:0E:41:9A:84:75:01:BD:5F:86:23
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/TyFitQrQJKvfGQ5BmoR1Ab1fhiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.160.0/19
82.137.128.0/18
82.179.32.0/20
82.179.63.0-82.179.95.255
82.179.140.0/23
82.179.160.0/20
83.149.192.0/18
85.142.8.0-85.142.39.255
85.142.52.0-85.142.59.255
85.142.102.0-85.142.111.255
85.142.116.0-85.142.127.255
85.142.148.0/23
85.142.153.0/24
85.142.162.0/23
85.143.0.0/20
85.143.18.0/23
85.143.26.0/24
85.143.96.0/22
85.143.112.0/22
85.143.124.0/22
85.143.224.0/21
85.143.239.0/24
86.110.96.0/24
86.110.101.0-86.110.103.255
185.71.96.0/22
185.141.124.0/22
188.93.107.0/24
193.27.214.0/23
194.85.32.0/20
194.85.168.0/23
194.85.174.0/23
194.149.64.0/24
194.149.70.0/23
194.190.232.0-194.190.241.255
194.190.247.0/24
194.190.249.0/24
194.190.254.0/23
194.226.192.0/19
195.209.224.0/22
195.209.234.0/24
195.209.236.0/23
195.209.240.0/22
IPv6:
2001:b08:22::/48
2001:b08:26::/48
2a00:db8::/32
2a07:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
7f:ab:ac:37:63:4f:74:21:25:72:98:fd:6c:ca:89:2b:9e:cc:
22:07:06:32:66:d6:e6:0d:e0:f9:40:ff:74:67:13:91:08:2c:
50:7f:f9:84:f5:fb:a8:b0:de:6b:e5:3d:33:bf:12:54:19:d4:
f8:f9:25:ec:5f:a3:dc:df:a9:9f:b8:d3:cf:28:c0:83:2c:9a:
8c:8e:a0:90:b9:bc:f3:9c:d8:79:06:8a:92:8d:88:99:73:a7:
19:bc:83:04:f9:53:65:c8:f8:0c:87:01:16:5b:17:b1:81:0e:
d9:db:92:bc:26:19:28:5d:9e:85:f9:8b:c4:5d:dd:b6:e6:12:
82:b4:20:46:10:9f:db:5a:27:09:cb:02:0c:88:e4:8e:5b:b4:
15:a4:eb:06:ce:4f:e4:c3:96:85:51:11:4c:9b:eb:a7:a0:52:
f2:34:36:f3:4e:26:1a:23:43:96:50:26:57:5a:14:bd:79:5e:
26:db:68:a6:cf:fb:20:6f:fd:44:79:ba:48:c4:46:75:65:f6:
b4:ab:cc:89:10:33:49:77:61:df:86:fe:e7:ca:b4:b7:4d:cc:
bc:8e:5f:85:dd:9e:19:d3:1a:e9:55:89:e9:2a:26:51:95:23:
44:06:32:4d:81:1a:45:be:ee:83:4a:f9:da:bd:0f:bf:17:0c:
97:f1:a1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:29:17 2024 by rpki-client on console.sobornost.net