Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/IlJeoHFuYONWbzeG3GAJIdHmsyc.roa
File: IlJeoHFuYONWbzeG3GAJIdHmsyc.roa (raw, json)
Hash identifier: lfzePb2FoN0zqKy3DHSP7798MGg+9smDe3bolm3V3ao=
Subject key identifier: 22:52:5E:A0:71:6E:60:E3:56:6F:37:86:DC:60:09:21:D1:E6:B3:27
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01847B798DDB30C2E459A8BF47FA2AB66138
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/IlJeoHFuYONWbzeG3GAJIdHmsyc.roa
Signing time: Tue 15 Nov 2022 13:27:54 +0000
ROA not before: Tue 15 Nov 2022 13:27:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28964
IP address blocks: 178.254.164.0/24 maxlen: 24
178.254.166.0/24 maxlen: 24
178.254.160.0/23 maxlen: 24
178.254.162.0/24 maxlen: 24
178.254.167.0/24 maxlen: 24
178.254.178.0/24 maxlen: 24
178.254.174.0/24 maxlen: 24
178.254.173.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
109.111.255.0/24 maxlen: 24
89.23.94.0/23 maxlen: 23
109.111.242.0/24 maxlen: 24
109.111.241.0/24 maxlen: 24
109.111.249.0/24 maxlen: 24
109.111.251.0/24 maxlen: 24
109.111.247.0/24 maxlen: 24
89.23.64.0/24 maxlen: 24
89.23.66.0/23 maxlen: 23
185.157.45.0/24 maxlen: 24
185.157.46.0/24 maxlen: 24
185.157.47.0/24 maxlen: 24
89.23.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7b:79:8d:db:30:c2:e4:59:a8:bf:47:fa:2a:b6:61:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Nov 15 13:27:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22525ea0716e60e3566f3786dc600921d1e6b327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:a6:c5:48:a3:77:e5:b0:5b:b6:03:c5:71:
37:1b:64:2b:29:a1:d6:02:2f:d2:cd:d6:e3:2c:14:
0e:96:f2:0e:33:a4:bf:01:1d:6a:79:c4:59:d7:6a:
4d:db:97:29:73:3e:ba:9a:b9:17:e1:19:57:d6:a4:
83:ac:96:8e:1d:f3:a2:f5:52:96:89:e5:d6:33:a8:
5d:7f:41:e9:d6:42:51:aa:e5:00:d1:a8:4a:a8:79:
83:19:4b:9c:13:68:35:96:34:8c:51:20:cc:38:75:
76:39:5e:ff:36:3a:ed:c7:e6:88:08:9c:8e:76:88:
c3:57:fc:00:8a:42:68:8b:2a:68:08:39:c0:07:48:
53:18:a7:23:a9:78:a2:9e:6d:dc:ff:f0:ce:82:b2:
c3:3c:90:2c:5b:2a:0b:8e:00:af:84:a7:0d:82:af:
59:9f:bd:10:e9:52:11:41:62:b9:08:9a:01:66:5f:
7d:90:86:7a:cd:a0:2c:43:42:3a:d6:30:b1:79:33:
9a:a1:c2:2e:ae:7e:7a:c7:a8:52:47:81:e4:a4:78:
48:1a:74:76:30:5f:c3:be:08:a7:12:9e:c4:68:9c:
45:be:33:04:66:34:c0:2a:18:ca:da:4b:aa:14:69:
5b:62:7e:a3:6e:f7:eb:00:a2:6a:f2:00:a3:48:16:
31:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:52:5E:A0:71:6E:60:E3:56:6F:37:86:DC:60:09:21:D1:E6:B3:27
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/IlJeoHFuYONWbzeG3GAJIdHmsyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.64.0/24
89.23.66.0/23
89.23.72.0/23
89.23.94.0/23
109.111.241.0-109.111.242.255
109.111.247.0/24
109.111.249.0/24
109.111.251.0/24
109.111.255.0/24
178.254.160.0-178.254.162.255
178.254.164.0/24
178.254.166.0/23
178.254.173.0-178.254.174.255
178.254.178.0/24
178.254.182.0/24
185.157.45.0-185.157.47.255
Signature Algorithm: sha256WithRSAEncryption
7d:75:8e:55:8c:8e:dc:3b:ac:ad:91:e5:87:b8:d4:64:1d:e8:
cc:33:00:eb:c5:b8:d7:f3:8e:68:e8:15:ec:1f:71:e2:d0:37:
b7:7a:d6:5c:bf:63:fa:1b:10:80:77:01:b6:d2:ba:64:34:ca:
a1:3d:c6:82:50:0e:f1:51:54:df:23:85:5a:08:80:33:d3:1d:
f1:39:1e:7b:55:e7:c4:c3:6a:cf:1d:d3:9b:e7:83:89:48:08:
e5:92:9b:c8:b4:8b:75:a0:44:3b:c1:98:5a:2c:66:8f:d7:3c:
b6:f2:96:57:46:65:95:74:32:23:b9:db:5e:17:2c:5e:0e:53:
95:fe:9f:9c:ee:b2:01:4d:a7:7f:ff:82:17:49:2c:b9:cb:f8:
49:59:e1:58:e9:5b:91:ee:2e:fc:26:b1:a9:3c:08:bb:e9:cf:
4e:de:94:07:9f:23:8c:3c:33:cb:c8:73:ed:9b:99:ea:1d:6e:
b7:b8:58:53:33:59:e4:8a:88:89:3d:a4:a9:31:b1:b1:74:81:
ac:30:35:33:83:35:30:0a:49:0a:48:e1:d8:59:93:35:f4:ea:
bd:c1:ab:f7:e0:31:9d:3f:81:57:c9:61:21:f2:76:76:3f:81:
28:04:c9:9a:94:03:30:bf:5a:cb:41:ca:18:1a:01:d6:7f:92:
21:97:be:8e
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAYR7eY3bMMLkWai/R/oqtmE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGY4ZGFhZGYxZDc3NWQ1OWQxNTAyYjU3MzkwMWI4NzU1
MTNiNTYwHhcNMjIxMTE1MTMyNzU0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjUyNWVhMDcxNmU2MGUzNTY2ZjM3ODZkYzYwMDkyMWQxZTZiMzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY6mxUijd+WwW7YDxXE3G2QrKaHW
Ai/SzdbjLBQOlvIOM6S/AR1qecRZ12pN25cpcz66mrkX4RlX1qSDrJaOHfOi9VKW
ieXWM6hdf0Hp1kJRquUA0ahKqHmDGUucE2g1ljSMUSDMOHV2OV7/Njrtx+aICJyO
dojDV/wAikJoiypoCDnAB0hTGKcjqXiinm3c//DOgrLDPJAsWyoLjgCvhKcNgq9Z
n70Q6VIRQWK5CJoBZl99kIZ6zaAsQ0I61jCxeTOaocIurn56x6hSR4HkpHhIGnR2
MF/DvginEp7EaJxFvjMEZjTAKhjK2kuqFGlbYn6jbvfrAKJq8gCjSBYxoQIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFCJSXqBxbmDjVm83htxgCSHR5rMnMB8GA1UdIwQY
MBaAFHZPjarfHXddWdFQK1c5Abh1UTtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODIt
YmZiMmI4ODE1ZTQ5LzEvSWxKZW9IRnVZT05XYnplRzNHQUpJZEhtc3ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83YjkyYmYtMDExYi00NGE3LTgzODItYmZiMmI4ODE1ZTQ5
LzEvZGstTnF0OGRkMTFaMFZBclZ6a0J1SFZSTzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBABZ
F0ADBAFZF0IDBAFZF0gDBAFZF14wDAMEAG1v8QMEAG1v8gMEAG1v9wMEAG1v+QME
AG1v+wMEAG1v/zAMAwQFsv6gAwQAsv6iAwQAsv6kAwQBsv6mMAwDBACy/q0DBACy
/q4DBACy/rIDBACy/rYwDAMEALmdLQMEBLmdIDANBgkqhkiG9w0BAQsFAAOCAQEA
fXWOVYyO3DusrZHlh7jUZB3ozDMA68W41/OOaOgV7B9x4tA3t3rWXL9j+hsQgHcB
ttK6ZDTKoT3GglAO8VFU3yOFWgiAM9Md8Tkee1XnxMNqzx3Tm+eDiUgI5ZKbyLSL
daBEO8GYWixmj9c8tvKWV0ZllXQyI7nbXhcsXg5Tlf6fnO6yAU2nf/+CF0ksucv4
SVnhWOlbke4u/CaxqTwIu+nPTt6UB58jjDwzy8hz7ZuZ6h1ut7hYUzNZ5IqIiT2k
qTGxsXSBrDA1M4M1MApJCkjh2FmTNfTqvcGr9+AxnT+BV8lhIfJ2dj+BKATJmpQD
ML9ay0HKGBoB1n+SIZe+jg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net