Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/T7zZ2nSvqJctZTqntSUle5YY_vo.roa
File: T7zZ2nSvqJctZTqntSUle5YY_vo.roa (raw, json)
Hash identifier: jYNZ2NSrWxNz2C2FS84OzdjZxsx/W8GOAmAMY/i7lBM=
Subject key identifier: 4F:BC:D9:DA:74:AF:A8:97:2D:65:3A:A7:B5:25:25:7B:96:18:FE:FA
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 0185BFF013B44A2AAE5DE4D846D77E852FC6
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/T7zZ2nSvqJctZTqntSUle5YY_vo.roa
Signing time: Tue 17 Jan 2023 13:34:19 +0000
ROA not before: Tue 17 Jan 2023 13:34:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9125
IP address blocks: 93.93.192.0/21 maxlen: 21
93.93.199.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.252.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
178.254.134.0/24 maxlen: 24
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.144.0/20 maxlen: 20
178.254.145.0/24 maxlen: 24
178.254.140.0/22 maxlen: 22
178.254.163.0/24 maxlen: 24
178.254.172.0/24 maxlen: 24
178.254.169.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.184.0/23 maxlen: 24
178.254.128.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.116.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
178.254.188.0/22 maxlen: 24
178.254.187.0/24 maxlen: 24
185.157.44.0/24 maxlen: 24
109.111.254.0/24 maxlen: 24
217.169.208.0/22 maxlen: 22
217.169.208.0/20 maxlen: 20
217.169.212.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.216.0/22 maxlen: 22
217.169.220.0/22 maxlen: 22
5.172.38.0/24 maxlen: 24
5.172.33.0/24 maxlen: 24
5.172.34.0/23 maxlen: 23
5.172.36.0/23 maxlen: 24
109.111.226.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.232.0/22 maxlen: 22
109.111.229.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.227.0/24 maxlen: 24
109.111.240.0/24 maxlen: 24
109.111.236.0/22 maxlen: 22
109.111.246.0/24 maxlen: 24
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 24
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
2a02:b58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:f0:13:b4:4a:2a:ae:5d:e4:d8:46:d7:7e:85:2f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 17 13:34:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fbcd9da74afa8972d653aa7b525257b9618fefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:f7:14:3c:67:8e:06:0f:7a:55:84:ae:60:
7c:bd:6f:32:34:4c:c9:0f:a8:3f:82:79:3d:8b:7b:
90:1e:bd:cd:85:87:cc:53:da:37:09:38:97:bc:48:
48:7d:7a:3c:88:4d:71:a0:d9:9c:02:57:9f:5b:0d:
5c:17:9a:b2:ed:b6:20:0b:cc:b4:52:c9:8c:39:b4:
e2:96:37:a0:c1:01:8c:42:c1:58:f1:75:ca:d4:ff:
6a:a7:cb:43:c2:83:f1:ba:f8:1d:37:2c:ae:ba:52:
ea:4d:99:d8:11:7c:9d:a8:a9:21:96:63:13:88:97:
3a:c4:a5:b2:49:c8:35:17:41:a3:49:f1:8a:ac:b4:
50:1f:7b:fd:c6:22:7b:f2:28:c9:eb:3a:45:86:67:
75:5b:96:e4:79:0f:df:ab:1a:09:ff:f0:f1:07:2d:
6d:bf:c6:39:6a:d1:0f:8e:a9:c5:5c:3a:4d:49:c9:
54:31:1e:4f:73:a2:15:c4:50:20:33:4c:69:38:16:
cf:62:e2:72:48:33:b5:f0:bf:04:ca:db:68:52:5e:
ba:03:e4:96:e3:02:85:22:b7:f6:f1:46:c8:01:17:
78:72:d8:e5:bc:22:51:00:f5:87:a7:53:7f:85:ff:
66:37:9c:e0:a2:8b:86:82:fe:0f:72:57:a6:5c:43:
72:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:D9:DA:74:AF:A8:97:2D:65:3A:A7:B5:25:25:7B:96:18:FE:FA
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/T7zZ2nSvqJctZTqntSUle5YY_vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0-5.172.38.255
89.23.65.0/24
89.23.68.0-89.23.70.255
89.23.74.0/23
89.23.93.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0-109.111.240.255
109.111.243.0-109.111.244.255
109.111.246.0-109.111.248.255
109.111.250.0/24
109.111.252.0-109.111.254.255
178.254.128.0/19
178.254.163.0/24
178.254.169.0/24
178.254.172.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0/24
178.254.184.0/23
178.254.187.0-178.254.191.255
185.157.44.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
72:8c:67:5a:53:0c:6e:59:b7:70:e5:3a:d9:bd:c5:aa:5e:8f:
fa:c6:91:ef:e1:81:1e:cc:5b:69:de:c1:cf:76:ea:d6:db:1d:
b0:d7:44:d2:36:a6:70:e8:90:50:8b:e2:19:dd:2f:10:68:8f:
2d:90:ce:4a:3c:16:0c:a4:e3:91:9f:34:65:10:42:2c:66:00:
d2:0d:64:ee:7e:e1:31:97:7f:c9:f2:03:47:75:1e:cf:77:dc:
48:1c:02:e2:fb:9b:9e:42:66:53:12:bd:f3:df:b5:e6:fd:bb:
bc:90:b2:3a:c7:b7:f7:2c:6c:3c:f3:c7:13:6b:14:b4:3f:43:
c1:1f:8c:34:d6:c2:81:92:9d:c8:86:46:2c:f8:0e:d5:56:30:
6c:c8:e5:8e:17:35:c7:6c:a9:6c:a1:aa:23:a3:9b:76:6c:5a:
06:04:7f:1b:db:e6:63:9f:a4:33:4d:73:b4:2c:ee:f0:76:5f:
d6:c0:61:6c:d9:c2:af:5c:98:f1:1e:73:18:b3:92:2b:7a:ee:
73:08:50:95:2e:3d:9e:f4:08:c8:f5:88:0e:5a:e1:37:ab:ca:
45:3d:8d:3d:8b:8a:cb:d4:2d:ba:5e:6f:a5:9f:e7:4e:0c:e8:
1f:81:1b:4d:d1:9d:d2:c2:0b:9f:57:a6:49:97:53:a4:f0:ae:
aa:d7:10:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net