Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/469fPhkArhAO4BwNubw41UYO0zk.roa
File: 469fPhkArhAO4BwNubw41UYO0zk.roa (raw, json)
Hash identifier: bwCqI8kAOO6kzAAG3D9xQ4z1LB8Cd/YIm/fA9F4VN1A=
Subject key identifier: E3:AF:5F:3E:19:00:AE:10:0E:E0:1C:0D:B9:BC:38:D5:46:0E:D3:39
Certificate issuer: /CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Certificate serial: 0302E33B
Authority key identifier: 91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/469fPhkArhAO4BwNubw41UYO0zk.roa
Signing time: Wed 06 Apr 2022 10:09:47 +0000
ROA not before: Wed 06 Apr 2022 10:09:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.215.3.0/24 maxlen: 24
185.215.1.0/24 maxlen: 24
185.215.0.0/24 maxlen: 24
178.239.255.0/24 maxlen: 24
178.239.254.0/24 maxlen: 24
31.222.98.0/24 maxlen: 24
31.222.97.0/24 maxlen: 24
31.222.96.0/24 maxlen: 24
31.222.104.0/22 maxlen: 24
31.222.103.0/24 maxlen: 24
31.222.102.0/24 maxlen: 24
31.222.101.0/24 maxlen: 24
31.222.100.0/24 maxlen: 24
31.222.99.0/24 maxlen: 24
31.222.112.0/24 maxlen: 24
31.222.110.0/24 maxlen: 24
31.222.109.0/24 maxlen: 24
31.222.108.0/24 maxlen: 24
31.222.118.0/24 maxlen: 24
31.222.117.0/24 maxlen: 24
31.222.116.0/24 maxlen: 24
31.222.115.0/24 maxlen: 24
31.222.114.0/24 maxlen: 24
31.222.125.0/24 maxlen: 24
31.222.124.0/24 maxlen: 24
31.222.123.0/24 maxlen: 24
31.222.121.0/24 maxlen: 24
31.222.120.0/24 maxlen: 24
31.222.119.0/24 maxlen: 24
31.44.144.0/22 maxlen: 22
178.239.240.0/24 maxlen: 24
178.239.243.0/24 maxlen: 24
178.239.246.0/24 maxlen: 24
31.44.152.0/23 maxlen: 23
178.239.245.0/24 maxlen: 24
31.44.151.0/24 maxlen: 24
178.239.244.0/24 maxlen: 24
31.44.150.0/24 maxlen: 24
31.44.149.0/24 maxlen: 24
31.44.148.0/24 maxlen: 24
178.239.242.0/24 maxlen: 24
178.239.241.0/24 maxlen: 24
178.239.249.0/24 maxlen: 24
178.239.253.0/24 maxlen: 24
178.239.252.0/24 maxlen: 24
31.44.158.0/24 maxlen: 24
178.239.251.0/24 maxlen: 24
31.44.157.0/24 maxlen: 24
178.239.250.0/24 maxlen: 24
31.44.156.0/24 maxlen: 24
31.44.159.0/24 maxlen: 24
31.44.154.0/23 maxlen: 24
178.239.248.0/24 maxlen: 24
178.239.247.0/24 maxlen: 24
185.30.196.0/24 maxlen: 24
185.30.199.0/24 maxlen: 24
185.30.198.0/24 maxlen: 24
185.30.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50520891 (0x302e33b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Validity
Not Before: Apr 6 10:09:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e3af5f3e1900ae100ee01c0db9bc38d5460ed339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:24:20:b0:f0:c0:a9:3b:62:9c:b8:74:9b:a6:
18:d5:35:3e:94:e9:30:49:4f:ea:0e:75:16:d3:f0:
19:27:e6:b5:85:e9:f1:68:e9:81:89:6b:75:96:88:
a5:df:81:10:61:4f:79:61:a7:24:c1:3f:37:51:51:
b2:5e:c0:ed:99:68:42:8c:68:39:16:03:c4:ba:b6:
f2:95:c4:d6:7f:bf:fb:c7:42:a2:dd:a1:cd:73:db:
e7:9f:bc:31:93:79:13:2d:f1:34:fa:5d:7d:7f:5f:
73:45:d9:e9:66:f4:9c:bf:f4:e2:13:56:04:83:5a:
42:bc:e6:07:b8:ca:bf:55:2d:e2:79:2a:18:5c:64:
92:b6:cd:42:33:9d:4d:c5:5c:d7:4b:2e:07:21:26:
99:92:e1:0c:79:b9:97:63:ea:fd:f6:7e:1a:68:11:
db:ae:22:31:ec:00:4e:70:2c:11:72:2d:d0:3d:1d:
1c:c6:ee:72:f8:c5:43:32:c0:89:4f:20:76:06:b4:
24:a3:25:5f:ca:b7:aa:0c:d8:07:a7:da:6a:29:57:
2b:b3:24:83:a3:56:7c:a4:80:66:e9:ca:ed:7e:a9:
83:5d:ad:9b:7b:f9:31:0c:25:56:64:9c:fa:60:f7:
58:a0:5c:d0:50:e1:8c:7f:0f:09:3f:1d:17:bb:95:
15:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AF:5F:3E:19:00:AE:10:0E:E0:1C:0D:B9:BC:38:D5:46:0E:D3:39
X509v3 Authority Key Identifier:
keyid:91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/469fPhkArhAO4BwNubw41UYO0zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/kbvFHkVBz7tQT_XvKjlt9qVLXm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.144.0/20
31.222.96.0-31.222.110.255
31.222.112.0/24
31.222.114.0-31.222.121.255
31.222.123.0-31.222.125.255
178.239.240.0/20
185.30.196.0/22
185.215.0.0/23
185.215.3.0/24
Signature Algorithm: sha256WithRSAEncryption
32:16:1f:ae:a5:23:d5:fb:50:a7:83:2d:2b:0a:ec:60:cf:eb:
bd:f0:28:25:79:f0:53:8f:90:d6:64:69:91:3b:64:7e:86:9d:
5a:f0:45:e8:c9:e0:63:0e:5d:47:44:16:df:e6:82:e8:62:33:
a6:02:7e:46:1d:5d:18:19:d6:96:f6:45:2f:1a:42:0b:b7:1f:
c2:5b:08:4f:10:59:30:4d:ed:4e:87:30:c6:e2:05:0b:e6:3c:
4e:15:cb:4b:34:86:b6:38:2d:19:a8:4a:99:47:07:3c:36:83:
69:8d:81:93:89:cc:53:fe:c2:3b:d4:d5:c4:a0:9f:73:f7:72:
26:b7:e6:29:38:ee:1a:c8:2a:45:08:53:aa:33:79:80:b8:ef:
29:26:cc:33:7e:6c:8e:55:ce:cd:6c:07:86:f5:ea:fd:39:1d:
ff:cd:24:68:29:37:e2:69:df:01:00:24:68:42:7f:44:37:03:
5b:54:f9:11:22:83:fa:b0:21:06:82:9d:44:48:a8:0d:dd:13:
82:41:1d:f8:01:65:a4:1c:2f:10:16:a1:06:c0:58:5f:60:b3:
9d:75:2b:ee:10:a0:c9:76:19:d7:bc:16:bf:ff:6a:9e:49:1b:
30:00:7f:12:da:49:94:24:55:3c:40:53:be:87:8d:8f:4a:31:
44:6b:c4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:03 2023 by rpki-client on console.sobornost.net