Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/ARe9BdGkbMCL_B1yvlSy9RiEFX8.roa
File: ARe9BdGkbMCL_B1yvlSy9RiEFX8.roa (raw, json)
Hash identifier: oR62jNJxBvvihbMJfKa9oWEkttNFvXB1iDU0uR+mVBU=
Subject key identifier: 01:17:BD:05:D1:A4:6C:C0:8B:FC:1D:72:BE:54:B2:F5:18:84:15:7F
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0185E3FB47424F28AE14987970BB57213740
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/ARe9BdGkbMCL_B1yvlSy9RiEFX8.roa
Signing time: Tue 24 Jan 2023 13:32:53 +0000
ROA not before: Tue 24 Jan 2023 13:32:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9125
IP address blocks: 93.93.192.0/21 maxlen: 21
93.93.199.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.252.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
178.254.134.0/24 maxlen: 24
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.144.0/20 maxlen: 20
178.254.145.0/24 maxlen: 24
178.254.140.0/22 maxlen: 22
178.254.163.0/24 maxlen: 24
178.254.172.0/24 maxlen: 24
178.254.169.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.184.0/23 maxlen: 24
178.254.128.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.116.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
178.254.188.0/22 maxlen: 24
178.254.187.0/24 maxlen: 24
185.157.44.0/24 maxlen: 24
109.111.254.0/24 maxlen: 24
217.169.208.0/22 maxlen: 22
217.169.208.0/20 maxlen: 20
217.169.212.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.216.0/22 maxlen: 22
217.169.220.0/22 maxlen: 22
5.172.38.0/24 maxlen: 24
5.172.34.0/23 maxlen: 24
5.172.33.0/24 maxlen: 24
5.172.36.0/22 maxlen: 24
109.111.226.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.232.0/22 maxlen: 22
109.111.229.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.227.0/24 maxlen: 24
109.111.240.0/24 maxlen: 24
109.111.236.0/22 maxlen: 22
109.111.246.0/24 maxlen: 24
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 24
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
2a02:b58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:fb:47:42:4f:28:ae:14:98:79:70:bb:57:21:37:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 24 13:32:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0117bd05d1a46cc08bfc1d72be54b2f51884157f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e3:55:af:36:f2:a0:08:7e:7b:99:af:d3:4e:
00:51:5c:e4:e4:4d:be:27:e3:fb:22:30:1e:5e:80:
73:33:6f:e7:e3:5a:09:18:b2:ea:b1:a1:3c:12:1f:
66:18:46:55:13:64:30:b5:32:84:a8:c2:ce:d5:01:
57:cc:e1:38:1f:e2:e2:1e:00:61:33:3e:42:c1:84:
74:90:75:80:a1:e2:7d:c1:aa:2d:d5:28:f7:32:37:
d7:3f:27:bb:d3:ed:cb:38:9f:dc:b8:cd:f9:a5:94:
93:5c:ab:64:f8:a6:8a:81:90:bb:99:d2:99:bb:b0:
2f:31:f6:d5:b6:57:cd:a1:4b:06:97:e8:36:55:82:
79:f1:c5:b1:3a:3f:69:4f:2c:fa:da:6a:3f:4a:d5:
9c:c5:92:3f:6b:59:c1:da:b7:ad:fe:50:03:20:bd:
77:f0:3e:b8:72:19:e8:e7:23:dc:eb:73:de:72:e5:
e3:a1:03:33:bb:a0:34:10:5a:8d:2e:11:15:9a:31:
08:1e:3e:a6:2a:33:42:8b:18:7a:d7:c5:55:20:43:
73:d5:84:2a:89:01:5b:47:7a:b0:b7:53:00:3c:50:
28:f0:6d:be:6e:bf:9d:1d:44:0b:6a:b0:ff:e3:23:
de:01:d2:c3:29:8d:50:29:ac:a7:2c:39:92:0b:7d:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:17:BD:05:D1:A4:6C:C0:8B:FC:1D:72:BE:54:B2:F5:18:84:15:7F
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/ARe9BdGkbMCL_B1yvlSy9RiEFX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0-5.172.39.255
89.23.65.0/24
89.23.68.0-89.23.70.255
89.23.74.0/23
89.23.93.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0-109.111.240.255
109.111.243.0-109.111.244.255
109.111.246.0-109.111.248.255
109.111.250.0/24
109.111.252.0-109.111.254.255
178.254.128.0/19
178.254.163.0/24
178.254.169.0/24
178.254.172.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0/24
178.254.184.0/23
178.254.187.0-178.254.191.255
185.157.44.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
4e:a4:63:88:65:45:e8:60:67:83:9a:ea:d0:a7:b8:57:7c:6a:
da:6e:06:bc:51:88:2a:fa:0d:86:f6:52:c2:a2:55:46:80:4b:
72:37:46:26:26:4e:44:69:20:4e:08:8b:ec:d5:d1:b0:00:4d:
ac:34:0b:7e:3c:8a:89:d3:a7:0c:63:bc:78:2d:03:25:e7:09:
6d:6e:30:0f:73:d7:82:e9:c7:e3:48:ff:e4:0f:d4:96:49:fc:
f4:41:cf:2a:26:31:6e:89:8b:4f:a7:8d:91:79:51:f0:c2:dd:
8a:98:d9:7a:1c:19:86:9a:eb:44:39:b1:61:69:63:f5:0a:54:
f6:5e:34:a8:bf:41:70:d4:3a:b4:dd:2d:bf:03:48:62:89:af:
0c:35:8a:a1:27:03:54:ff:77:88:c8:ef:f7:c2:0b:2c:a5:53:
ea:69:8f:28:62:aa:37:43:05:30:4e:e7:4b:4c:37:21:73:7a:
32:3e:e6:f6:3a:20:a3:0c:f4:9e:c0:df:ec:68:6b:c4:0c:02:
c1:21:05:72:60:a4:f4:56:35:98:2a:29:0f:e8:0b:11:5c:c6:
ed:d0:a2:55:16:46:40:bf:b2:9f:5a:c2:9d:43:f1:08:12:5c:
40:ff:35:56:8a:c8:9b:0f:42:5a:0c:73:dc:f2:cb:89:a8:76:
1b:29:58:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net