Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/NuaPDCI4T4anttszUO94UAB59OE.roa
File: NuaPDCI4T4anttszUO94UAB59OE.roa (raw, json)
Hash identifier: LlujOV9N9hyKi1ONhudoK7OYf3lGv4ayXpj5LEbJagw=
Subject key identifier: 36:E6:8F:0C:22:38:4F:86:A7:B6:DB:33:50:EF:78:50:00:79:F4:E1
Certificate issuer: /CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Certificate serial: 02F10D5E
Authority key identifier: 91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/NuaPDCI4T4anttszUO94UAB59OE.roa
Signing time: Tue 29 Mar 2022 14:29:31 +0000
ROA not before: Tue 29 Mar 2022 14:29:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.215.3.0/24 maxlen: 24
185.215.1.0/24 maxlen: 24
185.215.0.0/24 maxlen: 24
178.239.255.0/24 maxlen: 24
178.239.254.0/24 maxlen: 24
31.222.98.0/24 maxlen: 24
31.222.97.0/24 maxlen: 24
31.222.96.0/24 maxlen: 24
31.222.104.0/22 maxlen: 24
31.222.103.0/24 maxlen: 24
31.222.102.0/24 maxlen: 24
31.222.101.0/24 maxlen: 24
31.222.100.0/24 maxlen: 24
31.222.99.0/24 maxlen: 24
31.222.112.0/24 maxlen: 24
31.222.110.0/24 maxlen: 24
31.222.109.0/24 maxlen: 24
31.222.118.0/24 maxlen: 24
31.222.117.0/24 maxlen: 24
31.222.116.0/24 maxlen: 24
31.222.115.0/24 maxlen: 24
31.222.114.0/24 maxlen: 24
31.222.125.0/24 maxlen: 24
31.222.124.0/24 maxlen: 24
31.222.123.0/24 maxlen: 24
31.222.121.0/24 maxlen: 24
31.222.119.0/24 maxlen: 24
31.44.144.0/22 maxlen: 22
178.239.240.0/24 maxlen: 24
178.239.243.0/24 maxlen: 24
178.239.246.0/24 maxlen: 24
31.44.152.0/23 maxlen: 23
178.239.245.0/24 maxlen: 24
31.44.151.0/24 maxlen: 24
178.239.244.0/24 maxlen: 24
31.44.150.0/24 maxlen: 24
31.44.149.0/24 maxlen: 24
31.44.148.0/24 maxlen: 24
178.239.242.0/24 maxlen: 24
178.239.241.0/24 maxlen: 24
178.239.249.0/24 maxlen: 24
178.239.253.0/24 maxlen: 24
178.239.252.0/24 maxlen: 24
31.44.158.0/24 maxlen: 24
178.239.251.0/24 maxlen: 24
31.44.157.0/24 maxlen: 24
178.239.250.0/24 maxlen: 24
31.44.156.0/24 maxlen: 24
31.44.159.0/24 maxlen: 24
31.44.154.0/23 maxlen: 24
178.239.248.0/24 maxlen: 24
178.239.247.0/24 maxlen: 24
185.30.196.0/24 maxlen: 24
185.30.199.0/24 maxlen: 24
185.30.198.0/24 maxlen: 24
185.30.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49352030 (0x2f10d5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Validity
Not Before: Mar 29 14:29:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36e68f0c22384f86a7b6db3350ef78500079f4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:d3:fa:06:28:3b:18:45:27:22:f6:95:5a:
c5:1b:3f:f5:56:23:a7:1c:46:c8:6e:7c:45:8c:40:
2c:b2:7d:62:fe:c7:e2:d1:f6:84:02:5e:cf:30:34:
dd:53:60:83:ba:70:61:30:c3:5e:0b:e1:68:db:a7:
d0:e8:80:97:01:4d:16:df:5c:e6:6e:34:a2:e2:58:
10:8a:2d:2a:a2:90:c6:26:84:24:26:26:c1:89:b4:
e6:ed:fb:d9:4b:fa:58:2b:b8:b9:2b:14:59:b9:43:
50:cc:e9:51:b3:4e:61:34:9a:57:87:2c:38:78:01:
e3:33:fd:f8:b9:09:a4:28:fd:39:c2:74:85:73:fb:
9c:f1:79:21:9b:96:50:ff:be:4a:ad:75:55:a6:68:
7e:c2:a5:da:49:96:37:44:3c:d5:ac:b6:04:35:8c:
d9:59:80:ff:3d:30:24:d2:41:91:19:b0:e0:78:ae:
14:fd:b4:cc:49:53:87:a7:3c:bd:96:46:37:e7:17:
6e:c3:50:31:5c:31:8c:f7:b4:ed:b1:7d:c3:52:2b:
3b:64:67:ed:5e:c8:ff:79:ec:8a:24:b2:23:42:d5:
b8:79:26:56:35:c9:8b:5b:da:20:ba:ae:74:21:58:
c6:fb:d7:90:49:37:9d:f2:d8:0d:15:ab:10:00:b3:
04:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:8F:0C:22:38:4F:86:A7:B6:DB:33:50:EF:78:50:00:79:F4:E1
X509v3 Authority Key Identifier:
keyid:91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/NuaPDCI4T4anttszUO94UAB59OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/kbvFHkVBz7tQT_XvKjlt9qVLXm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.144.0/20
31.222.96.0-31.222.107.255
31.222.109.0-31.222.110.255
31.222.112.0/24
31.222.114.0-31.222.119.255
31.222.121.0/24
31.222.123.0-31.222.125.255
178.239.240.0/20
185.30.196.0/22
185.215.0.0/23
185.215.3.0/24
Signature Algorithm: sha256WithRSAEncryption
87:c1:ca:46:9b:7c:13:24:e0:5e:2e:32:2b:40:e9:59:d2:77:
58:d0:6c:9e:8c:65:05:9e:0d:60:9b:e2:04:30:b3:c6:b3:49:
d8:e4:bc:42:6b:44:1c:80:b8:ea:d4:c0:e2:29:ac:25:96:87:
4c:d1:8f:f0:e4:43:40:f3:84:62:65:77:c4:ba:b0:cd:df:b5:
dd:ed:2b:d4:ca:0d:e5:25:70:66:45:ec:50:b0:da:ea:f1:4a:
93:60:d8:6c:4e:76:05:8d:ae:b2:01:72:15:89:6b:4c:64:e7:
eb:f5:ca:40:db:57:27:47:2b:4f:d0:97:07:63:9f:9a:22:ea:
11:ac:44:62:10:44:1b:95:36:32:63:56:0e:13:0c:fe:af:33:
23:d1:99:03:0d:46:af:46:68:61:d0:92:f6:a1:36:84:28:40:
d2:08:51:df:25:95:9c:fe:a4:4b:01:ea:bd:6d:eb:cd:ee:b4:
1a:ce:95:1f:82:9b:32:61:8e:b8:59:c7:1f:f9:0c:14:e2:5e:
3f:9a:e7:4e:79:c3:1f:ee:43:e3:42:7c:bd:e0:96:d5:51:bc:
49:85:52:bb:d2:18:2c:4e:e2:f8:c1:c5:63:a8:3c:8b:31:bd:
c5:a6:7e:e9:a7:9e:12:d5:35:f2:02:40:3a:74:97:79:07:10:
70:a6:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:04 2023 by rpki-client on console.sobornost.net