Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/MhjJmogP1tLvbs9a8HpGwC7CG7A.roa
File: MhjJmogP1tLvbs9a8HpGwC7CG7A.roa (raw, json)
Hash identifier: x694v8/UK08zZzqCygNDUaFedn3xb+tR13dtslMONI4=
Subject key identifier: 32:18:C9:9A:88:0F:D6:D2:EF:6E:CF:5A:F0:7A:46:C0:2E:C2:1B:B0
Certificate issuer: /CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Certificate serial: 02E8EA29
Authority key identifier: 91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/MhjJmogP1tLvbs9a8HpGwC7CG7A.roa
Signing time: Mon 28 Mar 2022 14:54:58 +0000
ROA not before: Mon 28 Mar 2022 14:54:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.215.3.0/24 maxlen: 24
185.215.1.0/24 maxlen: 24
178.239.254.0/24 maxlen: 24
31.222.98.0/24 maxlen: 24
31.222.97.0/24 maxlen: 24
31.222.96.0/24 maxlen: 24
31.222.104.0/22 maxlen: 24
31.222.103.0/24 maxlen: 24
31.222.102.0/24 maxlen: 24
31.222.101.0/24 maxlen: 24
31.222.100.0/24 maxlen: 24
31.222.99.0/24 maxlen: 24
31.222.112.0/24 maxlen: 24
31.222.110.0/24 maxlen: 24
31.222.109.0/24 maxlen: 24
31.222.118.0/24 maxlen: 24
31.222.117.0/24 maxlen: 24
31.222.116.0/24 maxlen: 24
31.222.115.0/24 maxlen: 24
31.222.114.0/24 maxlen: 24
31.222.125.0/24 maxlen: 24
31.222.124.0/24 maxlen: 24
31.222.123.0/24 maxlen: 24
31.222.121.0/24 maxlen: 24
31.222.119.0/24 maxlen: 24
31.44.144.0/22 maxlen: 22
178.239.240.0/24 maxlen: 24
31.44.152.0/23 maxlen: 23
31.44.151.0/24 maxlen: 24
31.44.150.0/24 maxlen: 24
178.239.241.0/24 maxlen: 24
31.44.158.0/24 maxlen: 24
31.44.157.0/24 maxlen: 24
178.239.250.0/24 maxlen: 24
31.44.156.0/24 maxlen: 24
178.239.249.0/24 maxlen: 24
31.44.154.0/23 maxlen: 24
31.44.159.0/24 maxlen: 24
185.30.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48818729 (0x2e8ea29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Validity
Not Before: Mar 28 14:54:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3218c99a880fd6d2ef6ecf5af07a46c02ec21bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:ef:71:ef:09:cf:b7:06:4c:7f:57:bc:29:
99:e7:04:4d:6e:e5:fc:2c:4c:43:69:f6:75:82:36:
73:c1:c4:96:b6:f0:0b:f8:bc:4a:24:5c:cc:5f:15:
89:fe:08:41:79:86:b3:77:0a:c9:3c:8e:7d:c7:52:
ad:a5:cb:0d:02:64:69:f9:bd:7a:c4:07:53:2b:c6:
12:d7:6d:46:49:7a:18:ae:c7:6a:02:0c:06:f1:8e:
30:3d:45:d0:0d:cf:bb:bf:e8:d4:5b:79:23:b8:10:
53:ec:bf:9b:61:40:a6:f8:12:88:c0:f1:16:3f:a0:
94:af:ec:81:9e:77:0e:99:62:13:49:4f:fb:cb:2b:
fa:c8:25:c9:00:56:d3:52:15:25:68:4c:7f:fd:7f:
41:90:12:54:84:eb:17:0b:62:81:b6:c5:c9:09:46:
1d:e0:a5:27:b2:79:b9:54:0c:2b:3e:00:f4:03:31:
d2:0b:b3:0d:57:ed:bd:ad:85:85:7b:37:97:ef:0c:
fd:e3:a1:4e:9a:8d:67:de:61:be:a1:82:a1:47:e2:
0e:45:c9:d7:c5:1e:f9:e2:01:6f:84:da:0c:b8:fc:
4a:ab:23:1b:75:15:1d:51:f5:94:24:1d:0e:84:d6:
e5:ae:27:2b:e3:52:07:6a:0c:48:bf:bb:47:fb:fe:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:18:C9:9A:88:0F:D6:D2:EF:6E:CF:5A:F0:7A:46:C0:2E:C2:1B:B0
X509v3 Authority Key Identifier:
keyid:91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/MhjJmogP1tLvbs9a8HpGwC7CG7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/kbvFHkVBz7tQT_XvKjlt9qVLXm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.144.0/22
31.44.150.0-31.44.159.255
31.222.96.0-31.222.107.255
31.222.109.0-31.222.110.255
31.222.112.0/24
31.222.114.0-31.222.119.255
31.222.121.0/24
31.222.123.0-31.222.125.255
178.239.240.0/23
178.239.249.0-178.239.250.255
178.239.254.0/24
185.30.197.0/24
185.215.1.0/24
185.215.3.0/24
Signature Algorithm: sha256WithRSAEncryption
69:0e:c4:9f:d3:0e:b6:95:9a:01:4c:6b:d7:7c:7f:b0:02:7c:
f1:be:c0:db:e7:e3:e8:47:5c:be:98:7b:b1:86:4b:14:1d:c2:
b7:6e:87:b2:fa:0f:06:37:8b:cb:cc:23:6d:bc:89:6b:30:71:
fb:bc:c2:6a:2f:17:d7:a1:51:13:54:92:89:d2:d6:e9:67:e9:
24:5d:30:fb:5d:f1:68:97:fe:a9:d4:b4:87:ad:64:58:a6:12:
c8:e7:67:e2:08:f9:63:fd:87:46:47:e9:a0:e1:c8:0d:a9:46:
2a:a3:86:ef:61:d1:e9:80:c2:47:ad:51:af:af:92:a6:57:89:
fa:58:2e:32:aa:42:31:b3:98:41:3f:44:7b:0c:dd:90:21:2b:
10:6f:fc:23:a4:b5:2e:fb:39:3e:79:42:55:43:61:17:93:2a:
12:a6:04:5d:2e:0c:65:bf:d7:61:99:ec:0a:4e:23:09:61:87:
80:7b:14:8d:22:a4:b3:de:82:11:58:00:f2:fe:0c:cf:6d:68:
78:9f:05:5c:ba:59:55:6d:f4:96:fe:b5:8b:26:82:ee:04:e1:
33:01:fc:eb:ed:a2:91:56:c3:d8:d3:ef:a1:75:69:bb:72:bc:
bb:1b:71:f7:21:a1:3f:1c:c9:bb:ff:a0:83:f8:6c:e2:2f:28:
58:9a:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:04 2023 by rpki-client on console.sobornost.net