Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/2-6pIxXwLtfKAAJ03E7MN4L8xqE.roa
File: 2-6pIxXwLtfKAAJ03E7MN4L8xqE.roa (raw, json)
Hash identifier: Ys+on4GVIMNBwTJUgYWFd2/JbpDzfGJtJul37C+vNmA=
Subject key identifier: DB:EE:A9:23:15:F0:2E:D7:CA:00:02:74:DC:4E:CC:37:82:FC:C6:A1
Certificate issuer: /CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Certificate serial: 02774068
Authority key identifier: 91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/2-6pIxXwLtfKAAJ03E7MN4L8xqE.roa
Signing time: Wed 09 Feb 2022 05:23:03 +0000
ROA not before: Wed 09 Feb 2022 05:23:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50129
IP address blocks: 185.215.0.0/24 maxlen: 24
178.239.255.0/24 maxlen: 24
31.222.96.0/24 maxlen: 24
31.222.98.0/24 maxlen: 24
31.222.99.0/24 maxlen: 24
31.222.104.0/22 maxlen: 22
31.222.102.0/24 maxlen: 24
31.222.103.0/24 maxlen: 24
31.222.108.0/24 maxlen: 24
31.222.116.0/24 maxlen: 24
31.222.118.0/24 maxlen: 24
31.222.122.0/24 maxlen: 24
31.222.122.0/23 maxlen: 23
31.222.119.0/24 maxlen: 24
31.222.120.0/24 maxlen: 24
31.222.126.0/24 maxlen: 24
31.222.127.0/24 maxlen: 24
178.239.242.0/24 maxlen: 24
31.44.150.0/23 maxlen: 23
178.239.241.0/24 maxlen: 24
31.44.148.0/24 maxlen: 24
178.239.243.0/24 maxlen: 24
31.44.149.0/24 maxlen: 24
178.239.244.0/24 maxlen: 24
178.239.245.0/24 maxlen: 24
178.239.246.0/24 maxlen: 24
178.239.247.0/24 maxlen: 24
178.239.248.0/24 maxlen: 24
31.44.156.0/24 maxlen: 24
178.239.251.0/24 maxlen: 24
31.44.157.0/24 maxlen: 24
31.44.158.0/24 maxlen: 24
178.239.252.0/23 maxlen: 23
31.44.154.0/23 maxlen: 23
185.30.198.0/24 maxlen: 24
185.30.199.0/24 maxlen: 24
185.30.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41369704 (0x2774068)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Validity
Not Before: Feb 9 05:23:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbeea92315f02ed7ca000274dc4ecc3782fcc6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:3b:1e:35:a8:2f:17:bc:76:d8:b3:d0:16:
d8:2a:cb:d9:3c:d8:3b:84:63:cc:c8:47:58:6e:5c:
7a:5b:5a:c0:d1:30:a1:ca:43:12:53:28:6e:43:a1:
82:41:0d:37:4d:f3:9d:d7:88:a7:12:8e:54:ae:b3:
6f:77:b3:32:ca:f3:9d:ab:89:6b:1a:b2:b1:a4:d2:
16:6e:04:e1:01:da:dc:59:c3:af:b7:bc:c3:83:8b:
d3:ee:68:a9:bb:a0:22:b7:7a:02:b1:45:34:96:cc:
76:4a:5a:cc:38:c0:5d:b3:d9:81:02:19:2f:28:e2:
13:40:99:69:29:d3:38:c0:bd:64:f2:90:4f:bb:ec:
12:9f:ba:13:6e:50:94:c2:db:67:64:6a:36:d5:15:
d9:f3:ec:f6:f5:d6:52:6d:c9:86:83:ec:bf:ce:39:
92:65:82:59:f7:15:7c:7b:be:e8:82:c5:ba:e3:ca:
a2:c9:f9:a4:97:70:8b:3f:0b:11:03:72:4d:9c:09:
49:0a:ba:9d:80:06:c2:8a:3f:8c:f8:f3:bc:a7:35:
9e:02:97:16:6f:a8:fa:dc:84:86:5f:67:4c:3c:03:
8d:4f:c4:dd:1e:7a:79:7f:8d:c8:e5:af:e3:97:4d:
60:7c:2f:52:f7:22:f9:d2:52:6b:5e:7c:e3:b1:16:
53:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:EE:A9:23:15:F0:2E:D7:CA:00:02:74:DC:4E:CC:37:82:FC:C6:A1
X509v3 Authority Key Identifier:
keyid:91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/2-6pIxXwLtfKAAJ03E7MN4L8xqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/kbvFHkVBz7tQT_XvKjlt9qVLXm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.148.0/22
31.44.154.0-31.44.158.255
31.222.96.0/24
31.222.98.0/23
31.222.102.0-31.222.108.255
31.222.116.0/24
31.222.118.0-31.222.120.255
31.222.122.0/23
31.222.126.0/23
178.239.241.0-178.239.248.255
178.239.251.0-178.239.253.255
178.239.255.0/24
185.30.196.0/24
185.30.198.0/23
185.215.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:27:13:d6:81:e0:fa:af:a6:04:e4:0b:62:76:1d:2f:dc:9c:
aa:f0:bc:fc:17:72:5c:95:a9:e2:cc:88:e6:ed:43:7f:55:0e:
d5:ff:19:da:22:5d:d9:12:94:f6:c3:d5:f6:a4:00:1e:95:2c:
ef:21:3f:54:23:b7:b4:5b:8a:20:5d:fe:c8:cd:e4:7d:2a:0c:
a7:49:65:20:b4:7c:0d:d7:a4:8f:c0:93:cf:5a:ed:ca:fc:47:
4e:68:d2:59:d1:1d:3f:81:7a:2e:a4:34:37:17:1a:c0:71:c0:
3d:cd:5b:06:28:bc:c3:81:60:99:b1:72:00:80:7b:4d:cc:1a:
93:05:6f:52:3a:50:cb:58:27:7e:0a:12:de:63:bc:af:27:a7:
84:53:9a:24:49:18:e6:be:67:12:96:4b:1d:36:63:7d:91:bc:
b0:e4:95:5c:84:24:6c:fb:e2:a2:2d:13:97:a1:01:dc:6d:ef:
cf:f3:35:ea:5e:53:07:e6:d6:cd:a7:8d:b4:7f:3d:81:52:28:
4b:b6:5f:96:5a:87:7d:58:41:63:8f:97:54:bb:92:78:e7:28:
ff:ad:a6:14:8a:ee:a6:d4:0f:9b:a2:d8:52:d5:0f:20:6d:fc:
e3:ca:20:77:61:c0:18:21:44:46:6e:30:22:56:aa:c0:3f:c0:
10:cd:fe:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:03 2023 by rpki-client on console.sobornost.net