Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/VtHLveC61ZKulROMHMD3Z4kLfvE.roa
File: VtHLveC61ZKulROMHMD3Z4kLfvE.roa (raw, json)
Hash identifier: jDz/Zag8zLHoj++Y8JMv9mwQi17oQ2U1Ewz2HKjdjP8=
Subject key identifier: 56:D1:CB:BD:E0:BA:D5:92:AE:95:13:8C:1C:C0:F7:67:89:0B:7E:F1
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 01909C0D4A379EBF9E3C918E92CDE4EE5C84
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/VtHLveC61ZKulROMHMD3Z4kLfvE.roa
Signing time: Wed 10 Jul 2024 09:50:34 +0000
ROA not before: Wed 10 Jul 2024 09:50:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12668
IP address blocks: 5.141.234.0/23 maxlen: 23
31.192.171.0/24 maxlen: 24
31.192.180.0/24 maxlen: 24
31.192.181.0/24 maxlen: 24
46.229.96.0/20 maxlen: 20
90.157.5.0/24 maxlen: 24
90.157.16.0/24 maxlen: 24
90.157.30.0/24 maxlen: 24
90.157.34.0/24 maxlen: 24
90.157.58.0/24 maxlen: 24
90.157.68.0/23 maxlen: 23
90.157.70.0/23 maxlen: 23
90.157.78.0/23 maxlen: 23
90.157.80.0/23 maxlen: 23
90.157.82.0/23 maxlen: 23
90.157.109.0/24 maxlen: 24
90.157.110.0/24 maxlen: 24
90.157.115.0/24 maxlen: 24
92.54.69.0/24 maxlen: 24
92.54.90.0/24 maxlen: 24
92.54.117.0/24 maxlen: 24
94.31.134.0/24 maxlen: 24
94.31.135.0/24 maxlen: 24
94.31.136.0/24 maxlen: 24
94.31.147.0/24 maxlen: 24
94.31.158.0/24 maxlen: 24
94.31.159.0/24 maxlen: 24
94.31.176.0/24 maxlen: 24
94.31.184.0/23 maxlen: 23
94.31.193.0/24 maxlen: 24
94.31.194.0/24 maxlen: 24
94.31.195.0/24 maxlen: 24
94.31.196.0/24 maxlen: 24
94.31.202.0/24 maxlen: 24
94.31.206.0/23 maxlen: 23
94.31.207.0/24 maxlen: 24
94.31.210.0/24 maxlen: 24
94.31.212.0/24 maxlen: 24
94.31.221.0/24 maxlen: 24
94.31.229.0/24 maxlen: 24
94.31.240.0/24 maxlen: 24
94.31.241.0/24 maxlen: 24
94.31.243.0/24 maxlen: 24
94.31.246.0/23 maxlen: 23
94.31.250.0/24 maxlen: 24
94.31.253.0/24 maxlen: 24
94.31.255.0/24 maxlen: 24
94.51.232.0/21 maxlen: 21
188.17.116.0/23 maxlen: 23
188.18.112.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
188.73.137.0/24 maxlen: 24
188.73.139.0/24 maxlen: 24
188.73.141.0/24 maxlen: 24
188.73.144.0/23 maxlen: 23
188.73.144.0/24 maxlen: 24
188.73.147.0/24 maxlen: 24
188.73.151.0/24 maxlen: 24
188.73.154.0/24 maxlen: 24
188.73.156.0/24 maxlen: 24
188.73.158.0/24 maxlen: 24
188.73.168.0/24 maxlen: 24
188.73.170.0/23 maxlen: 23
188.73.183.0/24 maxlen: 24
188.73.185.0/24 maxlen: 24
213.142.34.0/24 maxlen: 24
213.142.35.0/24 maxlen: 24
213.142.40.0/24 maxlen: 24
213.142.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:0d:4a:37:9e:bf:9e:3c:91:8e:92:cd:e4:ee:5c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jul 10 09:50:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56d1cbbde0bad592ae95138c1cc0f767890b7ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:8a:a0:99:81:2c:a4:64:10:d4:2f:ea:47:
c0:4d:04:0f:57:cb:ca:9a:2c:c1:e2:31:25:48:d8:
8e:a0:e8:39:61:4a:f1:c9:aa:2c:d6:4b:d1:bd:42:
02:97:76:36:af:e3:32:9a:6a:20:01:b8:bd:6e:99:
a0:9b:48:f1:83:ea:b0:fb:54:29:0d:20:d6:b8:c2:
b1:e5:b5:a6:61:a8:c6:69:2b:35:f5:cd:7b:12:26:
dd:4c:f7:8a:0b:34:b3:ac:52:64:8c:5d:77:6c:fc:
ee:07:5b:0a:f5:75:0e:2f:0f:e0:bb:a9:4b:20:dc:
11:6a:3d:6e:3b:e6:ab:71:55:ee:02:f3:ae:29:60:
06:76:74:fd:53:be:5c:97:cc:eb:f0:48:7f:58:a2:
ce:30:40:72:20:bb:5c:3f:14:38:54:2d:0a:0e:2c:
af:92:ca:b8:6e:cf:de:f1:79:11:45:61:7e:57:41:
ab:44:26:34:38:ba:7b:99:96:93:c9:96:a2:c3:a6:
55:b7:c9:90:c6:db:49:31:60:b8:fd:f5:6a:ab:9e:
88:7a:36:f6:9b:a1:51:5f:45:a9:5a:3d:dd:09:3d:
6c:38:ba:17:89:18:11:9d:e1:2d:ea:2a:af:0b:bd:
68:ee:cf:09:8f:69:53:fb:30:d2:9f:7d:95:6f:2c:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D1:CB:BD:E0:BA:D5:92:AE:95:13:8C:1C:C0:F7:67:89:0B:7E:F1
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/VtHLveC61ZKulROMHMD3Z4kLfvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.141.234.0/23
31.192.171.0/24
31.192.180.0/23
46.229.96.0/20
90.157.5.0/24
90.157.16.0/24
90.157.30.0/24
90.157.34.0/24
90.157.58.0/24
90.157.68.0/22
90.157.78.0-90.157.83.255
90.157.109.0-90.157.110.255
90.157.115.0/24
92.54.69.0/24
92.54.90.0/24
92.54.117.0/24
94.31.134.0-94.31.136.255
94.31.147.0/24
94.31.158.0/23
94.31.176.0/24
94.31.184.0/23
94.31.193.0-94.31.196.255
94.31.202.0/24
94.31.206.0/23
94.31.210.0/24
94.31.212.0/24
94.31.221.0/24
94.31.229.0/24
94.31.240.0/23
94.31.243.0/24
94.31.246.0/23
94.31.250.0/24
94.31.253.0/24
94.31.255.0/24
94.51.232.0/21
188.17.116.0/23
188.18.112.0/23
188.18.116.0/24
188.73.137.0/24
188.73.139.0/24
188.73.141.0/24
188.73.144.0/23
188.73.147.0/24
188.73.151.0/24
188.73.154.0/24
188.73.156.0/24
188.73.158.0/24
188.73.168.0/24
188.73.170.0/23
188.73.183.0/24
188.73.185.0/24
213.142.34.0/23
213.142.40.0/24
213.142.57.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:3a:64:cd:ca:a7:5a:ce:4a:33:11:a9:3c:07:8d:d6:7d:5e:
69:82:fe:99:eb:5b:a9:53:8c:93:98:c7:3b:66:80:ff:a8:08:
40:97:48:14:76:17:9b:14:7c:0a:b4:b5:00:c2:87:de:61:99:
e1:20:43:68:ad:52:7e:26:af:a6:a3:10:c2:07:81:72:f6:d2:
9a:8b:22:43:a9:79:1d:f3:fd:be:59:a3:92:d6:9b:98:07:86:
8b:78:ed:f9:a1:d1:ae:48:07:2b:dc:82:db:3b:d7:6b:8a:41:
f5:b2:88:b6:c4:e3:3a:bf:a8:77:fb:f1:52:67:42:bc:90:4a:
e4:c0:86:a1:42:b0:6a:c5:df:81:67:da:13:7c:52:98:b9:6f:
90:61:be:9a:5d:75:f6:13:fb:39:81:dd:fa:60:e8:22:0c:c4:
ef:13:2f:68:58:c7:c1:fd:b7:57:cb:5c:9b:9d:5c:d2:ff:c9:
87:94:21:71:53:20:20:f6:ed:93:6f:92:1a:89:f2:33:7a:6d:
6d:96:90:01:f7:59:54:cc:93:85:89:3c:c1:0a:25:a5:94:4b:
21:4a:f5:4e:d7:cb:8e:8c:dc:48:23:7e:f1:dd:ee:27:4c:f2:
1d:c3:e3:52:e3:3f:0c:0b:ea:de:37:26:41:d0:d2:40:81:14:
bd:53:b6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 04:49:55 2024 by rpki-client on console.sobornost.net