Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/DB0hE68UJ9fuWLB_zGZRS4G6_J4.roa
File: DB0hE68UJ9fuWLB_zGZRS4G6_J4.roa (raw, json)
Hash identifier: I9rf4sTYy2vlhWuRnuYoK+iA8hKEwBA5xGD+pGXlYRE=
Subject key identifier: 0C:1D:21:13:AF:14:27:D7:EE:58:B0:7F:CC:66:51:4B:81:BA:FC:9E
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 0190974E60519603527B73CAC4C0D315F7EC
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/DB0hE68UJ9fuWLB_zGZRS4G6_J4.roa
Signing time: Tue 09 Jul 2024 11:43:34 +0000
ROA not before: Tue 09 Jul 2024 11:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41881
IP address blocks: 95.38.0.0/21 maxlen: 21
95.38.8.0/24 maxlen: 24
95.38.9.0/24 maxlen: 24
95.38.10.0/24 maxlen: 24
95.38.11.0/24 maxlen: 24
95.38.12.0/24 maxlen: 24
95.38.13.0/24 maxlen: 24
95.38.14.0/24 maxlen: 24
95.38.15.0/24 maxlen: 24
95.38.16.0/20 maxlen: 20
95.38.16.0/24 maxlen: 24
95.38.17.0/24 maxlen: 24
95.38.18.0/24 maxlen: 24
95.38.19.0/24 maxlen: 24
95.38.20.0/24 maxlen: 24
95.38.21.0/24 maxlen: 24
95.38.22.0/24 maxlen: 24
95.38.23.0/24 maxlen: 24
95.38.24.0/24 maxlen: 24
95.38.25.0/24 maxlen: 24
95.38.26.0/24 maxlen: 24
95.38.27.0/24 maxlen: 24
95.38.28.0/24 maxlen: 24
95.38.29.0/24 maxlen: 24
95.38.30.0/24 maxlen: 24
95.38.31.0/24 maxlen: 24
95.38.32.0/24 maxlen: 24
95.38.33.0/24 maxlen: 24
95.38.34.0/24 maxlen: 24
95.38.35.0/24 maxlen: 24
95.38.36.0/23 maxlen: 23
95.38.39.0/24 maxlen: 24
95.38.40.0/24 maxlen: 24
95.38.41.0/24 maxlen: 24
95.38.42.0/24 maxlen: 24
95.38.43.0/24 maxlen: 24
95.38.44.0/22 maxlen: 22
95.38.44.0/24 maxlen: 24
95.38.46.0/24 maxlen: 24
95.38.47.0/24 maxlen: 24
95.38.48.0/24 maxlen: 24
95.38.49.0/24 maxlen: 24
95.38.50.0/24 maxlen: 24
95.38.51.0/24 maxlen: 24
95.38.52.0/24 maxlen: 24
95.38.53.0/24 maxlen: 24
95.38.54.0/23 maxlen: 23
95.38.56.0/23 maxlen: 23
95.38.58.0/24 maxlen: 24
95.38.59.0/24 maxlen: 24
95.38.60.0/24 maxlen: 24
95.38.61.0/24 maxlen: 24
95.38.62.0/23 maxlen: 23
95.38.63.0/24 maxlen: 24
95.38.64.0/24 maxlen: 24
95.38.65.0/24 maxlen: 24
95.38.66.0/23 maxlen: 23
95.38.68.0/24 maxlen: 24
95.38.69.0/24 maxlen: 24
95.38.70.0/24 maxlen: 24
95.38.71.0/24 maxlen: 24
95.38.73.0/24 maxlen: 24
95.38.74.0/23 maxlen: 23
95.38.74.0/24 maxlen: 24
95.38.75.0/24 maxlen: 24
95.38.76.0/24 maxlen: 24
95.38.77.0/24 maxlen: 24
95.38.78.0/23 maxlen: 23
95.38.80.0/24 maxlen: 24
95.38.81.0/24 maxlen: 24
95.38.82.0/23 maxlen: 23
95.38.84.0/23 maxlen: 23
95.38.84.0/24 maxlen: 24
95.38.85.0/24 maxlen: 24
95.38.86.0/24 maxlen: 24
95.38.87.0/24 maxlen: 24
95.38.88.0/22 maxlen: 22
95.38.88.0/24 maxlen: 24
95.38.89.0/24 maxlen: 24
95.38.90.0/24 maxlen: 24
95.38.91.0/24 maxlen: 24
95.38.92.0/24 maxlen: 24
95.38.93.0/24 maxlen: 24
95.38.94.0/23 maxlen: 23
95.38.96.0/21 maxlen: 21
95.38.96.0/23 maxlen: 23
95.38.98.0/23 maxlen: 23
95.38.98.0/24 maxlen: 24
95.38.99.0/24 maxlen: 24
95.38.100.0/23 maxlen: 23
95.38.102.0/23 maxlen: 23
95.38.104.0/22 maxlen: 22
95.38.108.0/24 maxlen: 24
95.38.109.0/24 maxlen: 24
95.38.110.0/23 maxlen: 23
95.38.112.0/21 maxlen: 21
95.38.116.0/23 maxlen: 23
95.38.116.0/24 maxlen: 24
95.38.117.0/24 maxlen: 24
95.38.118.0/24 maxlen: 24
95.38.119.0/24 maxlen: 24
95.38.120.0/24 maxlen: 24
95.38.121.0/24 maxlen: 24
95.38.122.0/23 maxlen: 23
95.38.122.0/24 maxlen: 24
95.38.123.0/24 maxlen: 24
95.38.124.0/24 maxlen: 24
95.38.125.0/24 maxlen: 24
95.38.126.0/23 maxlen: 23
95.38.128.0/20 maxlen: 20
95.38.128.0/22 maxlen: 22
95.38.128.0/23 maxlen: 23
95.38.128.0/24 maxlen: 24
95.38.129.0/24 maxlen: 24
95.38.130.0/23 maxlen: 23
95.38.160.0/21 maxlen: 21
95.38.168.0/22 maxlen: 22
95.38.168.0/23 maxlen: 23
95.38.169.0/24 maxlen: 24
95.38.170.0/24 maxlen: 24
95.38.172.0/23 maxlen: 23
95.38.174.0/24 maxlen: 24
95.38.175.0/24 maxlen: 24
95.38.176.0/20 maxlen: 20
95.38.192.0/21 maxlen: 21
95.38.192.0/24 maxlen: 24
95.38.193.0/24 maxlen: 24
95.38.194.0/24 maxlen: 24
95.38.195.0/24 maxlen: 24
95.38.196.0/24 maxlen: 24
95.38.197.0/24 maxlen: 24
95.38.199.0/24 maxlen: 24
95.38.200.0/22 maxlen: 22
95.38.200.0/24 maxlen: 24
95.38.201.0/24 maxlen: 24
95.38.202.0/24 maxlen: 24
95.38.203.0/24 maxlen: 24
95.38.204.0/23 maxlen: 23
95.38.206.0/24 maxlen: 24
95.38.208.0/21 maxlen: 21
95.38.208.0/22 maxlen: 22
95.38.210.0/24 maxlen: 24
95.38.211.0/24 maxlen: 24
95.38.212.0/23 maxlen: 23
95.38.215.0/24 maxlen: 24
95.38.216.0/23 maxlen: 23
95.38.218.0/24 maxlen: 24
95.38.220.0/22 maxlen: 22
95.38.224.0/24 maxlen: 24
95.38.225.0/24 maxlen: 24
95.38.226.0/23 maxlen: 23
95.38.228.0/22 maxlen: 22
95.38.232.0/21 maxlen: 21
95.38.240.0/21 maxlen: 21
95.38.252.0/24 maxlen: 24
95.38.253.0/24 maxlen: 24
95.38.254.0/24 maxlen: 24
95.38.255.0/24 maxlen: 24
185.20.160.0/24 maxlen: 24
185.20.161.0/24 maxlen: 24
185.20.162.0/24 maxlen: 24
185.20.163.0/24 maxlen: 24
2a00:52e0::/32 maxlen: 32
2a01:bd80::/29 maxlen: 29
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:97:4e:60:51:96:03:52:7b:73:ca:c4:c0:d3:15:f7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jul 9 11:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c1d2113af1427d7ee58b07fcc66514b81bafc9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ac:a8:21:89:be:e6:8f:dd:f7:bd:56:0e:cd:
27:23:f1:8b:ba:42:84:cc:e8:e0:e3:88:ce:79:b2:
57:e1:0c:55:27:9e:af:8d:85:9f:e2:3a:26:b6:dd:
96:ac:2e:4c:50:f9:cc:e9:e2:ed:c3:12:6e:38:db:
56:72:f4:56:23:f7:64:68:c4:a0:0b:21:48:1a:58:
48:12:70:d9:2f:e0:60:98:cd:d0:69:75:9b:32:a7:
1c:d3:76:23:20:ba:60:62:89:24:97:3a:d7:3e:6f:
f6:7f:88:f6:56:7a:85:15:03:68:21:12:bd:48:25:
9c:5e:ae:5f:d0:80:55:24:a8:44:96:49:17:37:b1:
fe:fb:2f:03:fa:87:d0:ea:d6:11:97:37:14:be:68:
1d:18:fe:35:2a:f6:0c:5f:e0:ee:d5:fa:48:f7:87:
09:7a:5c:af:79:6e:08:be:f2:60:e5:e7:ca:fe:c6:
76:30:81:4b:ee:f7:93:22:12:e7:f8:82:cb:74:86:
25:21:95:ce:2b:14:3f:e4:47:17:91:c0:41:a7:7a:
b3:a1:1b:d5:db:85:19:23:b1:13:6d:12:57:eb:87:
e3:83:ac:51:11:35:04:4f:6f:b4:5a:41:5c:da:59:
9c:01:e8:c5:8e:91:a6:61:1c:6c:b4:69:1e:aa:13:
5f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1D:21:13:AF:14:27:D7:EE:58:B0:7F:CC:66:51:4B:81:BA:FC:9E
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/DB0hE68UJ9fuWLB_zGZRS4G6_J4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.38.0.0-95.38.37.255
95.38.39.0-95.38.71.255
95.38.73.0-95.38.143.255
95.38.160.0-95.38.206.255
95.38.208.0-95.38.218.255
95.38.220.0-95.38.247.255
95.38.252.0/22
185.20.160.0/22
IPv6:
2a00:52e0::/32
2a01:bd80::/29
Signature Algorithm: sha256WithRSAEncryption
1b:8d:04:c4:dd:12:ef:c5:02:c9:a7:26:c6:da:8f:c9:d6:2e:
80:1f:5f:51:0e:6b:54:f7:ab:d2:dc:3f:e1:c0:d9:41:7a:c1:
d7:1f:b7:87:70:c5:1c:1e:22:0e:fa:14:38:03:db:80:22:dc:
17:c0:d8:2f:f3:b8:41:03:33:e6:a1:68:bc:c5:13:54:d0:b0:
91:7e:47:64:6f:5c:cb:a5:f7:01:78:4b:7b:b3:00:d0:79:7e:
a3:02:d1:de:9a:5a:c1:ce:55:e1:7f:79:67:7b:d9:ae:6d:eb:
84:89:59:77:05:ab:c1:75:ee:ae:87:55:05:03:ba:56:cd:b0:
0b:9b:74:b3:4f:01:71:d7:c6:d8:fc:97:f1:d6:f9:b9:b0:f8:
d8:6a:a1:f5:63:77:a1:fb:62:f3:3d:59:d1:ff:ea:ea:a7:f9:
4d:42:f9:bd:d0:50:6f:ea:09:9b:5f:39:b8:7c:86:db:01:76:
08:a3:ab:b3:31:67:8b:bb:f7:58:74:69:3d:c9:5f:5d:af:b6:
ec:b7:51:ed:2c:9c:f1:06:88:28:ef:69:78:e4:3f:cd:d3:4b:
c6:1f:85:26:d9:f2:3e:57:5c:2c:e0:ad:16:30:df:bd:ab:2b:
ca:85:98:09:e4:a3:3b:47:ca:76:f9:8e:b1:ab:67:2e:0d:ca:
ec:7b:87:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 08:36:27 2024 by rpki-client on console.sobornost.net