Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/inA4t6PKraExiWokpfORungjw4E.roa
File: inA4t6PKraExiWokpfORungjw4E.roa (raw, json)
Hash identifier: kmciENFTVjLoTWvTZGb5+mH6+lhfQAmovtOtXWBnCrE=
Subject key identifier: 8A:70:38:B7:A3:CA:AD:A1:31:89:6A:24:A5:F3:91:BA:78:23:C3:81
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 01856D11D1CC1289A25744DAD808DDAF9066
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/inA4t6PKraExiWokpfORungjw4E.roa
Signing time: Sun 01 Jan 2023 11:22:42 +0000
ROA not before: Sun 01 Jan 2023 11:22:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9125
IP address blocks: 93.93.192.0/21 maxlen: 21
93.93.199.0/24 maxlen: 24
92.42.253.0/24 maxlen: 24
92.42.252.0/24 maxlen: 24
92.42.248.0/22 maxlen: 22
92.42.254.0/24 maxlen: 24
92.42.255.0/24 maxlen: 24
89.23.93.0/24 maxlen: 24
89.23.68.0/23 maxlen: 23
89.23.70.0/24 maxlen: 24
89.23.65.0/24 maxlen: 24
89.23.75.0/24 maxlen: 24
89.23.74.0/24 maxlen: 24
178.254.134.0/24 maxlen: 24
178.254.133.0/24 maxlen: 24
178.254.136.0/22 maxlen: 22
178.254.144.0/20 maxlen: 20
178.254.145.0/24 maxlen: 24
178.254.140.0/22 maxlen: 22
178.254.172.0/24 maxlen: 24
178.254.169.0/24 maxlen: 24
178.254.175.0/24 maxlen: 24
178.254.177.0/24 maxlen: 24
178.254.182.0/24 maxlen: 24
178.254.184.0/23 maxlen: 24
178.254.128.0/21 maxlen: 21
95.140.112.0/22 maxlen: 22
95.140.116.0/22 maxlen: 22
95.140.115.0/24 maxlen: 24
95.140.120.0/23 maxlen: 23
95.140.124.0/22 maxlen: 22
95.140.125.0/24 maxlen: 24
178.254.188.0/22 maxlen: 24
178.254.187.0/24 maxlen: 24
185.157.44.0/24 maxlen: 24
109.111.254.0/24 maxlen: 24
217.169.208.0/22 maxlen: 22
217.169.208.0/20 maxlen: 20
217.169.212.0/22 maxlen: 22
217.169.219.0/24 maxlen: 24
217.169.216.0/22 maxlen: 22
217.169.220.0/22 maxlen: 22
5.172.38.0/24 maxlen: 24
5.172.33.0/24 maxlen: 24
5.172.34.0/23 maxlen: 23
5.172.36.0/23 maxlen: 24
109.111.226.0/24 maxlen: 24
109.111.225.0/24 maxlen: 24
109.111.224.0/24 maxlen: 24
109.111.232.0/22 maxlen: 22
109.111.229.0/24 maxlen: 24
109.111.228.0/24 maxlen: 24
109.111.230.0/23 maxlen: 23
109.111.227.0/24 maxlen: 24
109.111.240.0/24 maxlen: 24
109.111.236.0/22 maxlen: 22
109.111.246.0/24 maxlen: 24
109.111.243.0/24 maxlen: 24
109.111.244.0/24 maxlen: 24
109.111.250.0/24 maxlen: 24
109.111.252.0/23 maxlen: 24
109.111.247.0/24 maxlen: 24
109.111.248.0/24 maxlen: 24
2a02:b58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:11:d1:cc:12:89:a2:57:44:da:d8:08:dd:af:90:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jan 1 11:22:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a7038b7a3caada131896a24a5f391ba7823c381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:b3:14:d5:6e:2c:e4:01:b6:3f:b9:1f:51:
55:bd:6f:ed:8d:eb:07:27:63:df:df:e3:44:e3:8b:
41:da:96:4f:5d:00:3f:5d:7d:db:de:fd:ec:7f:61:
e3:65:cd:f8:4f:8e:93:8f:5b:6d:35:5a:c2:7e:db:
5f:d9:48:6d:0d:76:9a:0a:d0:af:cf:12:fa:3c:8f:
d4:59:60:a7:6c:bc:4c:6b:a3:2f:5d:48:31:32:10:
e9:0d:3b:0d:5d:f1:cc:69:62:de:21:f7:2a:9d:45:
f1:bb:04:99:ce:6e:c6:9c:72:42:8c:4d:73:9b:59:
74:b3:5a:0a:5c:9e:f9:4c:67:46:f8:9f:47:f3:19:
c2:77:bf:a9:db:d1:7c:a7:20:0f:8c:91:e4:3a:70:
ec:2f:cf:da:13:b8:67:6a:78:d1:36:b3:2f:2c:9c:
ac:6a:69:1e:d6:2c:09:71:97:5f:7d:c2:94:9b:fd:
15:c0:fa:46:b9:70:0d:95:2b:88:e3:f2:35:ed:8e:
ea:58:d5:67:bb:30:66:cc:63:09:00:db:a6:03:ec:
2a:e5:3a:8f:e0:aa:c7:35:f9:90:aa:2b:8e:5d:65:
96:fc:41:d9:62:4a:da:85:d5:4e:45:b5:3d:64:c2:
b3:84:64:d2:19:69:b5:d6:28:61:3a:f6:cd:3e:98:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:70:38:B7:A3:CA:AD:A1:31:89:6A:24:A5:F3:91:BA:78:23:C3:81
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/inA4t6PKraExiWokpfORungjw4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.33.0-5.172.38.255
89.23.65.0/24
89.23.68.0-89.23.70.255
89.23.74.0/23
89.23.93.0/24
92.42.248.0/21
93.93.192.0/21
95.140.112.0-95.140.121.255
95.140.124.0/22
109.111.224.0-109.111.240.255
109.111.243.0-109.111.244.255
109.111.246.0-109.111.248.255
109.111.250.0/24
109.111.252.0-109.111.254.255
178.254.128.0/19
178.254.169.0/24
178.254.172.0/24
178.254.175.0/24
178.254.177.0/24
178.254.182.0/24
178.254.184.0/23
178.254.187.0-178.254.191.255
185.157.44.0/24
217.169.208.0/20
IPv6:
2a02:b58::/32
Signature Algorithm: sha256WithRSAEncryption
8a:b9:70:93:a1:e7:1a:48:3c:54:a9:2b:b9:2f:fe:e7:04:20:
9b:a9:3d:b7:b5:96:f8:f8:ef:39:44:56:93:f7:ea:c2:e6:3b:
1c:78:79:f4:0f:07:ac:23:42:20:11:14:3e:ac:d5:56:3c:80:
90:76:e7:5a:c9:6a:b1:ab:b5:27:04:3e:ea:25:41:15:4b:52:
36:f1:35:38:bf:1c:f2:16:f8:9a:b4:ec:5f:65:82:b5:32:8f:
33:2a:56:71:56:51:3f:c8:b1:96:21:4e:6f:d8:de:70:1b:9d:
02:aa:68:73:76:7d:cf:dc:8c:0e:92:a8:60:d9:e9:d9:23:2c:
8b:9b:63:e2:b1:d2:d8:8e:42:9b:95:06:cb:f5:a6:58:1a:5d:
86:1c:6e:06:d1:f5:50:bd:8a:53:a6:b1:2b:e0:53:e4:e8:fb:
b7:50:02:1a:ba:9f:6c:78:93:de:bf:0a:9d:29:42:6b:d8:e2:
a3:99:d3:8f:c1:13:1f:e7:2c:c4:be:7a:0a:da:b3:39:e7:4a:
da:5e:d7:29:42:16:22:b2:59:4e:af:5e:b0:c9:01:e0:69:4b:
bc:69:55:c0:ed:ed:68:44:92:a3:e1:ff:f1:3e:c5:b9:a5:2b:
75:14:45:b9:c3:87:0d:3b:93:b4:2b:a3:73:4c:1b:82:ba:37:
a3:36:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net