Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/uvPXKO82OmO2PBQECkiEKXi_h28.roa
File: uvPXKO82OmO2PBQECkiEKXi_h28.roa (raw, json)
Hash identifier: ZvBssRpcePhsOq0lHyN1ZF4j6MkoHLbaF9fi/TIhPgg=
Subject key identifier: BA:F3:D7:28:EF:36:3A:63:B6:3C:14:04:0A:48:84:29:78:BF:87:6F
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D2A276167D735D23A7CF723E14C2E
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/uvPXKO82OmO2PBQECkiEKXi_h28.roa
Signing time: Wed 01 Jan 2025 15:47:44 +0000
ROA not before: Wed 01 Jan 2025 15:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31261
IP address blocks: 5.8.177.0/24 maxlen: 24
37.16.80.0/22 maxlen: 22
77.74.72.0/22 maxlen: 22
77.74.77.0/24 maxlen: 24
77.74.78.0/24 maxlen: 24
77.74.79.0/24 maxlen: 24
77.220.209.0/24 maxlen: 24
77.220.211.0/24 maxlen: 24
77.242.15.0/24 maxlen: 24
81.23.0.0/21 maxlen: 21
81.23.8.0/23 maxlen: 23
81.23.9.0/24 maxlen: 24
81.23.14.0/24 maxlen: 24
83.220.32.0/19 maxlen: 19
89.107.141.0/24 maxlen: 24
89.107.142.0/23 maxlen: 23
91.198.212.0/24 maxlen: 24
93.191.16.0/21 maxlen: 21
93.191.23.0/24 maxlen: 24
94.124.192.0/21 maxlen: 21
109.73.0.0/22 maxlen: 22
109.73.4.0/22 maxlen: 22
109.73.8.0/22 maxlen: 22
109.73.12.0/23 maxlen: 23
185.6.172.0/22 maxlen: 22
185.6.174.0/24 maxlen: 24
185.22.24.0/24 maxlen: 24
185.68.145.0/24 maxlen: 24
185.68.146.0/23 maxlen: 23
185.196.246.0/23 maxlen: 23
188.68.189.0/24 maxlen: 24
188.164.209.0/24 maxlen: 24
188.164.212.0/24 maxlen: 24
188.164.214.0/23 maxlen: 23
217.171.152.0/21 maxlen: 21
2a02:330::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:2a:27:61:67:d7:35:d2:3a:7c:f7:23:e1:4c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baf3d728ef363a63b63c14040a48842978bf876f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:38:46:a1:3e:38:fd:9e:49:35:91:25:46:
e6:de:29:3f:ee:e8:69:80:e3:03:93:cf:2c:db:98:
00:a3:69:1f:b8:80:20:0f:5b:e0:e0:e7:da:ae:3c:
20:eb:36:2f:3c:46:8e:30:65:ff:7b:8e:89:03:d7:
a0:f8:40:56:b7:79:2b:fc:1d:06:66:2e:fa:c4:71:
97:83:fd:86:d2:e5:1b:eb:79:c5:5f:01:f8:95:2b:
c0:0c:c2:ae:0c:7b:7e:a5:07:d8:7e:d0:52:4c:53:
d9:9a:0a:c7:ce:04:ff:56:52:b2:a7:0b:57:7c:26:
1f:27:58:c4:92:41:4b:fb:8c:6a:5e:85:89:51:0b:
44:54:28:3a:67:2b:e5:ce:82:29:f2:65:e3:e7:65:
c6:f8:91:05:ae:13:83:f4:cd:2f:32:5b:f4:49:c1:
a7:21:62:06:d6:14:13:bb:68:21:3b:1d:f7:8f:7a:
c6:60:fc:a3:76:a4:1f:45:e5:8f:95:55:fb:03:b4:
33:8d:38:c7:00:86:e7:02:93:49:5d:08:30:c2:a5:
e3:43:d2:db:8e:42:d0:18:9f:ab:6f:dc:f6:96:84:
18:06:a2:3b:90:2d:f9:a1:3e:2c:9e:6b:f3:33:20:
8e:bb:2e:68:48:d3:a9:f7:6a:a2:ba:4c:e8:a5:21:
90:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F3:D7:28:EF:36:3A:63:B6:3C:14:04:0A:48:84:29:78:BF:87:6F
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/uvPXKO82OmO2PBQECkiEKXi_h28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.177.0/24
37.16.80.0/22
77.74.72.0/22
77.74.77.0-77.74.79.255
77.220.209.0/24
77.220.211.0/24
77.242.15.0/24
81.23.0.0-81.23.9.255
81.23.14.0/24
83.220.32.0/19
89.107.141.0-89.107.143.255
91.198.212.0/24
93.191.16.0/21
94.124.192.0/21
109.73.0.0-109.73.13.255
185.6.172.0/22
185.22.24.0/24
185.68.145.0-185.68.147.255
185.196.246.0/23
188.68.189.0/24
188.164.209.0/24
188.164.212.0/24
188.164.214.0/23
217.171.152.0/21
IPv6:
2a02:330::/45
Signature Algorithm: sha256WithRSAEncryption
8f:58:36:52:88:ba:1b:8b:b7:fb:78:c6:c4:b1:20:32:1c:52:
12:49:e2:3c:ce:4a:97:1d:67:9c:8f:44:e5:dc:9e:c9:9c:8a:
39:99:dd:78:4d:de:a9:30:5a:7d:7b:37:2d:3e:c3:fd:4c:37:
47:bf:aa:1b:51:0a:e9:6d:34:81:b9:76:55:97:ef:d6:6e:14:
82:47:9c:83:7f:30:7f:60:a2:d0:f0:48:15:57:53:c9:bb:08:
26:7e:a3:04:8c:8d:c2:b3:a1:f0:f7:1c:ba:f8:7a:9b:3e:42:
28:52:e2:54:f9:69:d5:db:90:b7:7f:18:98:33:70:d9:f9:ef:
d7:ba:c1:3b:70:24:ea:c5:3a:06:ee:f3:4e:7d:6b:d5:9a:da:
72:25:a7:f9:43:3c:32:c4:74:17:13:46:d6:f5:0c:f1:b1:69:
db:0a:e5:77:fa:82:42:40:15:7e:eb:6e:5a:9b:6d:98:da:56:
34:16:12:0f:44:d2:9e:5d:5b:df:1a:87:c3:7b:1d:7f:eb:98:
e9:04:dc:2b:eb:43:fd:60:b4:11:a2:01:63:0b:12:16:1e:f6:
ce:1f:7a:02:49:a9:30:24:26:24:3e:91:61:49:2e:81:5f:4c:
29:9c:81:88:e8:0b:86:4a:9b:1a:6a:3f:be:4c:9e:66:fc:7c:
69:b0:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net