Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Dy7e-8GvoUJNrdrMrbir1Th7-7Y.roa
File: Dy7e-8GvoUJNrdrMrbir1Th7-7Y.roa (raw, json)
Hash identifier: iXVmv2TXf37P37d0/xnjvR5plovDtUwdoHElDg7NTpk=
Subject key identifier: 0F:2E:DE:FB:C1:AF:A1:42:4D:AD:DA:CC:AD:B8:AB:D5:38:7B:FB:B6
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01843831AB3485CC8C53C85E5E47DD1E7C91
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Dy7e-8GvoUJNrdrMrbir1Th7-7Y.roa
Signing time: Wed 02 Nov 2022 11:54:49 +0000
ROA not before: Wed 02 Nov 2022 11:54:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 93.93.192.0/21 maxlen: 21
93.93.199.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.252.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
178.254.134.0/24 maxlen: 24
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.144.0/20 maxlen: 20
178.254.140.0/22 maxlen: 22
178.254.160.0/22 maxlen: 22
178.254.169.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.184.0/23 maxlen: 24
178.254.128.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.116.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
178.254.188.0/22 maxlen: 24
178.254.187.0/24 maxlen: 24
185.157.44.0/24 maxlen: 24
109.111.254.0/24 maxlen: 24
217.169.208.0/20 maxlen: 20
217.169.208.0/22 maxlen: 22
217.169.212.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.216.0/22 maxlen: 22
217.169.220.0/22 maxlen: 22
5.172.32.0/21 maxlen: 21
109.111.226.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.232.0/22 maxlen: 22
109.111.229.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.227.0/24 maxlen: 24
109.111.240.0/24 maxlen: 24
109.111.236.0/22 maxlen: 22
109.111.246.0/24 maxlen: 24
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 24
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
2a02:b58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:31:ab:34:85:cc:8c:53:c8:5e:5e:47:dd:1e:7c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Nov 2 11:54:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0f2edefbc1afa1424daddaccadb8abd5387bfbb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:36:cb:c3:5a:33:7e:2b:e9:d8:b5:77:f8:
1d:0d:8a:38:1b:23:ab:49:24:20:51:05:1d:8b:a1:
14:af:43:0a:5d:0f:fb:f0:63:bd:cc:9c:d0:ce:27:
a2:d8:77:dc:35:e8:c7:a3:70:d2:df:30:7b:d9:67:
51:ab:d1:b4:17:e7:c1:69:84:c3:eb:23:9d:e3:21:
bc:2d:3b:bd:60:c5:09:8e:7c:ba:11:f8:d4:46:02:
3b:03:f5:f1:9c:3b:41:86:86:65:65:2f:fb:23:e6:
7e:6b:ee:df:65:3d:59:cc:c8:86:84:c8:bf:ca:32:
26:0e:8e:ea:43:2e:19:ce:dc:c6:3c:d0:ec:2a:32:
06:07:79:29:31:bd:8b:73:3c:78:9a:2f:02:3d:41:
8f:c0:66:df:a4:67:86:18:fa:f5:ee:9f:08:77:b3:
2d:c9:be:15:48:f7:b3:5c:33:28:96:51:bd:75:dd:
80:12:82:b8:60:04:8c:00:f4:42:60:f4:eb:4b:61:
43:8c:d3:84:79:b4:03:8c:37:3d:3e:c9:6f:19:eb:
83:6a:7e:f1:4d:19:95:48:eb:ea:f7:59:7b:05:7c:
6f:14:86:0a:60:51:5d:d6:a8:19:06:c6:2f:17:39:
57:41:36:1d:9f:13:42:99:e1:8b:67:03:ca:b9:b5:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2E:DE:FB:C1:AF:A1:42:4D:AD:DA:CC:AD:B8:AB:D5:38:7B:FB:B6
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/Dy7e-8GvoUJNrdrMrbir1Th7-7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.32.0/21
89.23.65.0/24
89.23.68.0-89.23.70.255
89.23.74.0/23
89.23.93.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0-109.111.240.255
109.111.243.0-109.111.244.255
109.111.246.0-109.111.248.255
109.111.250.0/24
109.111.252.0-109.111.254.255
178.254.128.0-178.254.163.255
178.254.169.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0/24
178.254.184.0/23
178.254.187.0-178.254.191.255
185.157.44.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
42:55:d7:f8:f0:ca:bf:86:c8:6a:32:e6:01:a6:33:64:b6:81:
6c:d6:3d:4e:99:e1:e1:2f:89:e5:27:ba:a3:c6:e9:8d:57:cc:
90:59:eb:54:b3:82:cf:6e:1f:fa:ee:77:ea:de:28:2a:e9:b9:
65:bd:d9:84:2c:86:20:b2:0e:cc:b9:50:d1:0d:02:8a:20:dd:
90:53:3e:ec:96:19:c8:71:e7:49:5a:ea:0d:86:5d:3a:5f:e4:
7a:82:e0:68:c6:ad:1e:83:8f:00:9b:04:24:a4:2f:70:67:6d:
21:d2:72:30:9e:49:c0:ed:72:03:81:cc:23:26:98:9f:83:82:
20:b2:a4:6e:e7:fb:0d:bb:a6:08:57:72:88:12:e2:38:f8:1b:
34:da:cd:1b:f7:c7:e2:d3:a3:9d:69:be:d4:9e:bd:44:c2:0b:
d5:b2:e9:f4:4e:b9:09:ed:b1:b2:03:a0:07:f0:53:9a:24:c3:
23:30:68:c8:50:82:69:c8:64:ba:30:cd:65:54:5b:55:f9:eb:
6d:93:c1:1c:2e:13:46:eb:56:b7:7a:60:8e:bd:f0:94:21:2b:
dd:2a:39:62:21:0b:c1:cc:c2:11:bc:96:af:85:56:41:42:8e:
fe:52:bf:4e:fb:a9:7f:21:fc:99:1e:5d:23:8d:cd:52:48:64:
9a:ff:cb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net