Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/UkOBM-MveuplYXKexZaXl6yD_a0.roa
File: UkOBM-MveuplYXKexZaXl6yD_a0.roa (raw, json)
Hash identifier: zU1iiTQ+L8CZ2N40QcuuoRA9/hDURLIWNQrKv1t+U/k=
Subject key identifier: 52:43:81:33:E3:2F:7A:EA:65:61:72:9E:C5:96:97:97:AC:83:FD:AD
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018216D3054D5CE744F0192A0F5656CADFB8
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/UkOBM-MveuplYXKexZaXl6yD_a0.roa
Signing time: Tue 19 Jul 2022 14:18:24 +0000
ROA not before: Tue 19 Jul 2022 14:18:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9125
IP address blocks: 93.93.192.0/21 maxlen: 21
93.93.199.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.252.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
178.254.134.0/24 maxlen: 24
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.144.0/20 maxlen: 20
178.254.140.0/22 maxlen: 22
178.254.160.0/22 maxlen: 22
178.254.169.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.184.0/24 maxlen: 24
178.254.184.0/21 maxlen: 21
178.254.128.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.116.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
185.157.44.0/24 maxlen: 24
109.111.254.0/24 maxlen: 24
217.169.208.0/22 maxlen: 22
217.169.208.0/20 maxlen: 20
217.169.212.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.216.0/22 maxlen: 22
217.169.220.0/22 maxlen: 22
5.172.32.0/21 maxlen: 21
109.111.226.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.232.0/22 maxlen: 22
109.111.229.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.227.0/24 maxlen: 24
109.111.240.0/24 maxlen: 24
109.111.236.0/22 maxlen: 22
109.111.246.0/24 maxlen: 24
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 24
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
2a02:b58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:d3:05:4d:5c:e7:44:f0:19:2a:0f:56:56:ca:df:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jul 19 14:18:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52438133e32f7aea6561729ec5969797ac83fdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:27:14:04:f5:36:05:4a:e7:dc:76:4a:9e:
19:a7:9f:98:19:60:a2:78:3b:cd:07:d1:c0:5d:32:
54:ec:3d:05:c8:96:f7:f9:d9:f7:c4:ed:af:70:0b:
e5:7c:d0:da:4b:37:4c:d7:da:9a:db:4f:a8:8d:1b:
fd:3c:5a:e1:2c:4f:71:d8:34:a4:4c:b4:ba:63:35:
85:80:75:c0:aa:29:50:e8:3f:eb:02:b6:16:b4:a2:
8b:a3:5b:ef:74:54:20:91:cd:65:1e:9b:43:6b:fb:
87:01:fc:8b:18:5f:50:c4:a1:45:a0:18:a5:be:b3:
b4:86:99:eb:e8:26:08:1b:88:39:9c:91:02:49:25:
a6:0d:bd:83:24:f1:2a:0e:15:78:95:97:3d:34:5c:
00:17:5f:bc:ed:f4:27:b9:38:cb:b1:50:ee:f6:87:
65:ac:a4:bc:27:3b:00:1a:72:a4:28:57:1b:37:33:
4c:2d:d3:24:d3:ef:b0:62:b9:98:7c:8e:01:2c:bc:
be:04:a5:10:d3:83:e1:d6:99:ee:ce:8a:d4:c5:da:
6e:ed:db:d0:4b:ff:b2:ea:4b:db:41:6a:3f:28:82:
93:2e:fb:f6:ba:8f:47:d9:5f:8e:d1:99:39:d6:66:
e6:bf:f6:92:94:75:49:da:c4:fa:8c:d3:17:f8:66:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:43:81:33:E3:2F:7A:EA:65:61:72:9E:C5:96:97:97:AC:83:FD:AD
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/UkOBM-MveuplYXKexZaXl6yD_a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.32.0/21
89.23.65.0/24
89.23.68.0-89.23.70.255
89.23.74.0/23
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0-109.111.240.255
109.111.243.0-109.111.244.255
109.111.246.0-109.111.248.255
109.111.250.0/24
109.111.252.0-109.111.254.255
178.254.128.0-178.254.163.255
178.254.169.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0/24
178.254.184.0/21
185.157.44.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
00:f9:ea:20:5c:7b:31:a4:57:3c:c0:61:89:18:15:ad:32:ff:
ec:26:18:bf:de:68:89:a8:b7:05:07:7f:17:e9:81:e1:9a:c2:
14:2f:1b:a2:87:00:01:07:b8:f8:3b:72:4e:e6:89:a4:0a:c4:
2e:6c:d1:4c:c8:4b:7d:fc:32:83:21:53:5e:6e:61:d8:81:47:
c0:cd:41:f2:51:e3:11:d2:b4:01:98:55:ac:8d:56:e6:ec:4d:
4d:f6:78:fc:27:9a:8a:cf:6f:35:73:a1:70:b9:2c:75:2a:f5:
c6:73:fb:c3:fa:7c:09:9e:6d:54:dd:74:98:f1:24:f4:aa:2b:
01:f5:0f:08:0d:bb:ec:99:fb:03:66:61:9e:5e:b1:0b:87:80:
20:39:54:ef:04:0d:b7:10:32:54:02:ad:b5:40:1c:f3:19:cd:
75:cd:f6:cc:7f:f6:51:83:6b:e7:a4:25:e1:69:8d:65:25:fb:
bc:fa:a4:ea:39:c1:a0:6c:fc:08:f7:35:bc:b7:1d:08:50:d3:
73:4a:11:1d:c9:c9:96:e7:3a:6f:dc:76:95:f1:a0:63:35:98:
86:46:23:52:62:70:00:fd:9e:6c:55:56:a3:d0:e3:33:ef:c3:
e8:d3:52:8e:f4:2c:b5:c7:3a:1a:ed:21:b5:59:2b:49:a5:0f:
8c:fc:5f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net