Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/v9I7nDuQv3uirrlqAQfnbvSRvqo.roa
File: v9I7nDuQv3uirrlqAQfnbvSRvqo.roa (raw, json)
Hash identifier: tAiV4439nObz3gb5PPH0xgPHyAhix4ph7tM2Dt/omIE=
Subject key identifier: BF:D2:3B:9C:3B:90:BF:7B:A2:AE:B9:6A:01:07:E7:6E:F4:91:BE:AA
Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Certificate serial: 01904E6CD92F25FEE48BB7CC57C432EB54AB
Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/v9I7nDuQv3uirrlqAQfnbvSRvqo.roa
Signing time: Tue 25 Jun 2024 08:04:34 +0000
ROA not before: Tue 25 Jun 2024 08:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21277
IP address blocks: 93.91.192.0/20 maxlen: 20
93.91.192.0/24 maxlen: 24
93.91.193.0/24 maxlen: 24
93.91.195.0/24 maxlen: 24
93.91.196.0/24 maxlen: 24
93.91.197.0/24 maxlen: 24
93.91.200.0/24 maxlen: 24
93.91.201.0/24 maxlen: 24
93.91.204.0/24 maxlen: 24
95.170.192.0/19 maxlen: 19
95.170.192.0/24 maxlen: 24
95.170.193.0/24 maxlen: 24
95.170.194.0/24 maxlen: 24
95.170.196.0/24 maxlen: 24
95.170.199.0/24 maxlen: 24
95.170.200.0/24 maxlen: 24
95.170.201.0/24 maxlen: 24
95.170.202.0/24 maxlen: 24
95.170.203.0/24 maxlen: 24
95.170.204.0/24 maxlen: 24
95.170.205.0/24 maxlen: 24
95.170.206.0/24 maxlen: 24
95.170.207.0/24 maxlen: 24
95.170.208.0/24 maxlen: 24
95.170.214.0/24 maxlen: 24
95.170.215.0/24 maxlen: 24
95.170.216.0/24 maxlen: 24
95.170.217.0/24 maxlen: 24
95.170.218.0/24 maxlen: 24
95.170.219.0/24 maxlen: 24
95.170.220.0/24 maxlen: 24
95.170.221.0/24 maxlen: 24
95.170.222.0/24 maxlen: 24
109.127.64.0/18 maxlen: 18
109.127.64.0/20 maxlen: 20
109.127.64.0/21 maxlen: 21
109.127.72.0/21 maxlen: 21
109.127.80.0/24 maxlen: 24
109.127.86.0/24 maxlen: 24
109.127.88.0/24 maxlen: 24
109.127.89.0/24 maxlen: 24
109.127.90.0/24 maxlen: 24
109.127.91.0/24 maxlen: 24
109.127.107.0/24 maxlen: 24
130.193.128.0/17 maxlen: 17
130.193.128.0/19 maxlen: 19
130.193.131.0/24 maxlen: 24
130.193.132.0/22 maxlen: 22
130.193.144.0/24 maxlen: 24
130.193.145.0/24 maxlen: 24
130.193.148.0/24 maxlen: 24
130.193.149.0/24 maxlen: 24
130.193.150.0/23 maxlen: 23
130.193.150.0/24 maxlen: 24
130.193.151.0/24 maxlen: 24
130.193.160.0/20 maxlen: 20
130.193.160.0/24 maxlen: 24
130.193.165.0/24 maxlen: 24
130.193.166.0/24 maxlen: 24
130.193.176.0/20 maxlen: 20
130.193.176.0/21 maxlen: 21
130.193.184.0/21 maxlen: 21
130.193.192.0/20 maxlen: 20
130.193.208.0/20 maxlen: 20
130.193.224.0/20 maxlen: 20
130.193.240.0/20 maxlen: 20
2a04:a040::/29 maxlen: 29
2a04:a040::/32 maxlen: 32
2a04:a041::/32 maxlen: 32
2a04:a042::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:6c:d9:2f:25:fe:e4:8b:b7:cc:57:c4:32:eb:54:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc
Validity
Not Before: Jun 25 08:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfd23b9c3b90bf7ba2aeb96a0107e76ef491beaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:76:a5:bd:c0:d9:13:2e:17:52:f1:37:3f:54:
2a:6d:45:d8:b3:69:a5:cb:ca:83:f1:61:ee:cb:cf:
1b:61:be:30:1f:77:03:4d:08:95:fa:a7:d4:3f:7c:
a0:52:33:c1:f9:23:21:57:96:8e:6a:8f:8f:02:3f:
fa:c8:03:50:f6:dd:44:ac:b9:29:62:55:7f:f4:1d:
1d:e1:b1:b5:c0:b1:35:1b:d2:e3:14:34:df:af:09:
a3:9c:14:9a:7c:80:e3:bb:58:59:bd:f4:a7:56:49:
88:59:18:b4:89:a8:39:95:1d:d8:78:3e:32:25:b8:
45:11:d9:8a:25:27:75:8d:11:82:22:d3:6e:75:04:
a2:23:07:c9:63:89:ca:bf:41:42:82:5c:3a:42:af:
63:a3:98:39:20:e8:a7:cc:7c:61:d7:2a:5a:8a:18:
9b:5c:07:47:e9:52:93:c8:88:61:1f:db:a6:92:ff:
65:55:0a:14:8f:e8:77:d2:40:85:29:a0:65:e1:e3:
68:5f:30:34:ff:1b:a4:cb:61:09:2a:5f:01:58:c3:
8c:43:7e:1e:e8:57:64:82:78:c7:7c:1d:60:8c:24:
62:0b:3b:f8:ca:ce:af:fe:30:f7:20:88:8c:d7:13:
0b:0e:3f:88:9a:89:84:b8:99:0f:a9:f8:0a:da:78:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D2:3B:9C:3B:90:BF:7B:A2:AE:B9:6A:01:07:E7:6E:F4:91:BE:AA
X509v3 Authority Key Identifier:
keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/v9I7nDuQv3uirrlqAQfnbvSRvqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.192.0/20
95.170.192.0/19
109.127.64.0/18
130.193.128.0/17
IPv6:
2a04:a040::/29
Signature Algorithm: sha256WithRSAEncryption
51:04:87:c5:1b:c7:6e:1c:cf:7d:de:7b:ac:02:3f:07:22:66:
98:5e:83:b6:a7:42:2d:0d:09:78:61:30:eb:38:ac:df:e7:3e:
1d:8b:85:27:7b:e0:c6:d6:5d:d1:42:88:48:85:77:bd:ec:0c:
35:ac:16:45:ac:1d:c9:49:34:3c:34:a0:ac:ea:b4:2a:de:bd:
7c:a3:6b:e7:a2:58:0d:65:35:65:d2:61:dc:b0:ea:8c:2c:75:
42:c4:d8:fb:6f:83:d8:8a:72:f7:ed:82:da:d3:db:7c:8b:8d:
ef:06:42:3d:6d:58:9d:9d:4c:0b:d4:2f:4a:ef:33:0a:15:26:
a4:07:3a:0a:41:8b:78:03:1a:6e:03:f9:e0:fe:7a:85:09:f0:
dd:25:ef:e0:21:07:b1:4e:80:6a:94:88:24:86:b4:0e:6b:65:
2b:64:ec:e1:94:bd:2a:07:ef:61:33:5e:ed:af:7f:82:12:c7:
92:3d:20:ce:c3:dc:53:ff:6e:5d:94:7a:44:78:75:de:00:ec:
a1:12:6d:a4:fa:52:84:e4:bc:ac:0d:ff:bb:8d:b0:cd:73:59:
2b:bb:4d:e1:5f:60:f5:17:fd:1d:12:51:64:17:8d:f7:f6:28:
df:2b:f6:91:a0:35:c8:8b:5c:11:8b:c2:55:e8:b8:3d:e8:dd:
ff:08:94:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:20:14 2024 by rpki-client on console.sobornost.net