Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/TXDpcnN3-KRU7yO7VUO9OqkzA1A.roa
File: TXDpcnN3-KRU7yO7VUO9OqkzA1A.roa (raw, json)
Hash identifier: q1583uSuF1Bya9buKdCrhbRehApRS7SBikqiwfKOHlM=
Subject key identifier: 4D:70:E9:72:73:77:F8:A4:54:EF:23:BB:55:43:BD:3A:A9:33:03:50
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018451C8450AB5AEE2014CB46D05D2C7E64E
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/TXDpcnN3-KRU7yO7VUO9OqkzA1A.roa
Signing time: Mon 07 Nov 2022 11:09:50 +0000
ROA not before: Mon 07 Nov 2022 11:09:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 93.93.192.0/21 maxlen: 21
93.93.199.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.252.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
178.254.134.0/24 maxlen: 24
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.144.0/20 maxlen: 20
178.254.140.0/22 maxlen: 22
178.254.160.0/22 maxlen: 22
178.254.169.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.184.0/23 maxlen: 24
178.254.128.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.116.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
178.254.188.0/22 maxlen: 24
178.254.187.0/24 maxlen: 24
185.157.44.0/24 maxlen: 24
109.111.254.0/24 maxlen: 24
217.169.208.0/22 maxlen: 22
217.169.208.0/20 maxlen: 20
217.169.212.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.216.0/22 maxlen: 22
217.169.220.0/22 maxlen: 22
5.172.34.0/23 maxlen: 24
5.172.33.0/24 maxlen: 24
5.172.36.0/22 maxlen: 24
109.111.226.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.232.0/22 maxlen: 22
109.111.229.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.227.0/24 maxlen: 24
109.111.240.0/24 maxlen: 24
109.111.236.0/22 maxlen: 22
109.111.246.0/24 maxlen: 24
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 24
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
2a02:b58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:c8:45:0a:b5:ae:e2:01:4c:b4:6d:05:d2:c7:e6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Nov 7 11:09:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d70e9727377f8a454ef23bb5543bd3aa9330350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:94:0f:71:3c:4e:b1:e9:e1:b5:b2:11:80:
50:76:84:a6:cd:2c:2b:3e:3e:9d:8d:ad:72:d3:ed:
71:5c:c3:e0:7f:41:a2:1e:6d:95:6d:49:a5:af:5e:
db:1b:5a:03:03:f6:b9:08:6a:91:98:79:9f:80:2c:
fb:0f:ed:9b:ae:ab:9d:d5:4f:50:38:e3:a3:48:f2:
58:00:25:3e:77:80:c8:29:4d:56:04:11:25:71:16:
56:b2:30:dc:79:97:30:59:61:9b:9b:ba:25:e0:47:
13:fa:d9:02:dd:49:5b:ef:57:96:e6:12:5a:9f:02:
17:36:b6:08:cb:a3:fd:5a:8a:02:f7:4a:88:eb:a5:
8e:72:c0:b1:9c:0e:d7:95:5c:c1:40:ad:09:3c:29:
5f:6f:21:ca:99:da:eb:c5:29:46:82:f0:14:5a:4f:
e8:54:7e:b0:d0:4d:7f:d5:2b:64:a3:0b:a2:1c:38:
67:81:78:15:ca:37:82:29:a6:32:2d:dd:b3:8d:7c:
81:52:d4:1d:24:7c:ac:31:65:f8:69:7b:a5:09:1f:
4b:25:61:5c:a7:79:c4:1d:20:c3:d1:c9:36:72:3b:
80:0b:0c:7d:48:8e:fc:e1:cd:c3:73:de:20:d7:67:
dc:d3:37:94:11:f0:19:0a:fe:dc:e1:33:44:07:ff:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:70:E9:72:73:77:F8:A4:54:EF:23:BB:55:43:BD:3A:A9:33:03:50
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/TXDpcnN3-KRU7yO7VUO9OqkzA1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0-5.172.39.255
89.23.65.0/24
89.23.68.0-89.23.70.255
89.23.74.0/23
89.23.93.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0-109.111.240.255
109.111.243.0-109.111.244.255
109.111.246.0-109.111.248.255
109.111.250.0/24
109.111.252.0-109.111.254.255
178.254.128.0-178.254.163.255
178.254.169.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0/24
178.254.184.0/23
178.254.187.0-178.254.191.255
185.157.44.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
31:38:ac:89:8d:9e:15:f8:7b:88:89:d2:35:65:a3:18:41:39:
43:4c:82:3a:25:c0:e2:30:7a:e3:e6:e0:c8:d2:16:c8:49:9c:
a8:e5:65:d4:fe:d3:4a:ef:e7:30:b6:20:01:7c:c0:2c:86:c3:
64:a5:e2:94:64:1d:96:0e:8a:b2:9d:c7:c8:40:f3:01:89:71:
e4:24:68:2e:a6:5f:bb:ee:c9:32:14:ae:c6:aa:bb:43:3c:03:
ee:7a:27:56:84:fa:3d:47:f3:1a:4e:2f:0b:2c:49:70:ad:c5:
59:90:51:9d:30:71:bc:52:da:e8:93:6c:16:39:9d:d6:63:2e:
3b:5c:2c:e5:4a:b9:22:3a:07:43:fb:a1:06:e8:dd:09:1a:01:
4b:3d:d8:63:4f:6e:91:92:5c:d1:ac:97:d6:dc:11:99:da:8a:
49:c6:d9:c8:9f:b2:1e:48:ab:99:13:f2:7c:d2:b5:6b:cf:4d:
64:3b:21:7b:2d:c1:ae:d3:b6:ba:3e:55:3b:0a:7a:96:b4:b8:
43:d8:51:48:0f:14:bf:da:42:08:61:1c:f0:6f:65:ba:c5:5b:
a5:ef:44:21:1b:f1:c3:60:ad:ff:f3:fa:2a:cf:26:e9:50:91:
17:60:9c:ef:8e:26:5c:18:e6:4d:12:f0:a7:88:60:cb:cd:a9:
26:98:e0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net