Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/1-r7YjMo3NuRuyLM7DPdEvWuSUMo.roa
File: 1-r7YjMo3NuRuyLM7DPdEvWuSUMo.roa (raw, json)
Hash identifier: uviYPvSwSH3gyVriofyFO4BjmskSvFNhGx7ae4NmQWY=
Subject key identifier: FA:BE:D8:8C:CA:37:36:E4:6E:C8:B3:3B:0C:F7:44:BD:6B:92:50:CA
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0190AF6907FCF15B5A8B31F67FB86F476CB3
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/1-r7YjMo3NuRuyLM7DPdEvWuSUMo.roa
Signing time: Sun 14 Jul 2024 04:03:34 +0000
ROA not before: Sun 14 Jul 2024 04:03:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.0.0/21 maxlen: 21
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.11.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.44.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.58.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.63.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.68.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.76.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.80.0/24 maxlen: 24
95.38.81.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.96.0/23 maxlen: 23
95.38.98.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.99.0/24 maxlen: 24
95.38.100.0/23 maxlen: 23
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.108.0/24 maxlen: 24
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.112.0/21 maxlen: 21
95.38.116.0/23 maxlen: 23
95.38.116.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.122.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.160.0/21 maxlen: 21
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.169.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.192.0/21 maxlen: 21
95.38.192.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.199.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.200.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.208.0/22 maxlen: 22
95.38.210.0/24 maxlen: 24
95.38.211.0/24 maxlen: 24
95.38.212.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.224.0/24 maxlen: 24
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.240.0/21 maxlen: 21
95.38.252.0/24 maxlen: 24
95.38.253.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
2a00:52e0::/32 maxlen: 32
2a01:bd80::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:af:69:07:fc:f1:5b:5a:8b:31:f6:7f:b8:6f:47:6c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jul 14 04:03:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fabed88cca3736e46ec8b33b0cf744bd6b9250ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:84:02:c5:2a:1a:ee:1c:0c:97:b0:2c:89:3b:
37:13:eb:a6:dc:de:51:0e:e7:49:7e:53:88:07:fb:
43:b2:be:b7:67:fa:5c:f4:92:ce:80:a4:30:d1:b5:
07:fe:86:af:9d:a2:d8:e4:b9:63:c1:69:a6:88:3f:
fb:f1:18:0a:5e:9a:8c:ba:c3:6b:22:6d:f9:1a:e7:
39:1d:13:b3:40:72:3b:03:a3:8f:a6:b5:6c:16:a1:
75:f6:2d:f0:e0:d6:ec:88:ce:cf:9e:48:df:79:ae:
7e:5d:e8:2a:07:d9:4f:cf:ca:53:30:82:19:d8:fd:
c1:99:ed:aa:21:78:a7:d7:5a:fa:61:18:e5:f2:f7:
50:5c:72:54:08:ac:6c:5d:73:da:a1:27:3d:46:20:
26:f5:5c:bb:0f:86:d7:70:bf:b7:18:52:8a:6f:7d:
a3:33:1c:41:3a:de:98:29:2a:3a:5f:16:34:b9:ab:
eb:6a:4b:78:ce:4f:86:fe:db:1e:c4:8a:7b:ca:0c:
01:94:25:3e:b8:6f:7e:7f:b6:c7:2b:cf:0d:28:18:
9a:34:e0:f2:b1:1d:df:da:22:98:71:7b:23:c5:62:
45:2b:e9:3c:be:73:b4:2b:43:a0:aa:78:9c:5b:54:
3e:f5:8a:8f:a9:57:e5:c6:06:7b:ff:40:0d:74:e0:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BE:D8:8C:CA:37:36:E4:6E:C8:B3:3B:0C:F7:44:BD:6B:92:50:CA
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/1-r7YjMo3NuRuyLM7DPdEvWuSUMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.71.255
95.38.73.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.218.255
95.38.220.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
02:f6:dc:ba:a0:ba:25:2f:2b:0c:25:8d:da:e3:03:01:12:e6:
53:3b:36:21:37:5c:a4:bb:5c:23:1d:9f:a7:ef:a8:ae:87:26:
31:fb:42:d2:74:f9:89:01:bd:7b:c9:2a:dd:62:42:16:82:95:
e9:11:a6:57:37:b2:e5:df:14:34:c5:08:62:ca:03:a6:cb:8b:
a1:2e:e5:46:92:75:39:2c:55:8c:21:6f:2b:93:3c:bf:9f:b7:
42:a5:b4:fa:0a:24:a9:1f:9a:35:92:c6:a1:73:42:a9:8e:11:
1b:d5:35:05:13:0a:8b:04:af:15:99:56:32:b9:8e:e8:67:fe:
77:d9:1a:6b:b2:79:a2:42:5e:1e:f6:58:ca:0a:fa:3e:5f:b5:
cd:01:78:80:66:b2:45:13:44:11:87:24:14:f1:4b:8b:07:48:
43:c0:b9:b0:49:e8:7c:5f:ae:c7:1b:a0:0a:18:e8:79:df:5a:
2d:82:c4:fc:ae:53:12:68:e1:b0:d7:c9:a4:30:ad:10:08:43:
48:d1:7a:6f:b6:19:50:a8:82:e0:5b:38:22:23:b7:26:e9:ff:
13:6d:fa:94:4f:b6:be:f1:49:1a:39:48:04:5a:bf:a1:37:60:
20:3a:6f:37:48:a3:2e:4b:ea:49:f3:1f:62:1d:1a:cc:63:5b:
67:73:bc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:22:18 2024 by rpki-client on console.sobornost.net