Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/Y6qrMkEOQoeMUdJ-azNP5LJr3gE.roa
File: Y6qrMkEOQoeMUdJ-azNP5LJr3gE.roa (raw, json)
Hash identifier: 8rkUoz2DnLYhZ/nlOro3RiPF61v422JLqKeEYQhk7ro=
Subject key identifier: 63:AA:AB:32:41:0E:42:87:8C:51:D2:7E:6B:33:4F:E4:B2:6B:DE:01
Certificate issuer: /CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Certificate serial: 018364CEA7B9F36F107662A8D90E0B576BEC
Authority key identifier: 91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/Y6qrMkEOQoeMUdJ-azNP5LJr3gE.roa
Signing time: Thu 22 Sep 2022 10:46:48 +0000
ROA not before: Thu 22 Sep 2022 10:46:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.215.3.0/24 maxlen: 24
185.215.1.0/24 maxlen: 24
185.215.0.0/24 maxlen: 24
178.239.255.0/24 maxlen: 24
178.239.254.0/24 maxlen: 24
31.222.98.0/24 maxlen: 24
31.222.97.0/24 maxlen: 24
31.222.96.0/24 maxlen: 24
31.222.104.0/22 maxlen: 24
31.222.103.0/24 maxlen: 24
31.222.102.0/24 maxlen: 24
31.222.101.0/24 maxlen: 24
31.222.100.0/24 maxlen: 24
31.222.99.0/24 maxlen: 24
31.222.112.0/24 maxlen: 24
31.222.111.0/24 maxlen: 24
31.222.110.0/24 maxlen: 24
31.222.109.0/24 maxlen: 24
31.222.108.0/24 maxlen: 24
31.222.118.0/24 maxlen: 24
31.222.117.0/24 maxlen: 24
31.222.116.0/24 maxlen: 24
31.222.115.0/24 maxlen: 24
31.222.114.0/24 maxlen: 24
31.222.113.0/24 maxlen: 24
31.222.125.0/24 maxlen: 24
31.222.124.0/24 maxlen: 24
31.222.123.0/24 maxlen: 24
31.222.121.0/24 maxlen: 24
31.222.120.0/24 maxlen: 24
31.222.119.0/24 maxlen: 24
31.44.144.0/22 maxlen: 22
178.239.240.0/24 maxlen: 24
178.239.243.0/24 maxlen: 24
178.239.246.0/24 maxlen: 24
31.44.152.0/23 maxlen: 23
178.239.245.0/24 maxlen: 24
31.44.151.0/24 maxlen: 24
178.239.244.0/24 maxlen: 24
31.44.150.0/24 maxlen: 24
31.44.149.0/24 maxlen: 24
31.44.148.0/24 maxlen: 24
178.239.242.0/24 maxlen: 24
178.239.241.0/24 maxlen: 24
178.239.249.0/24 maxlen: 24
178.239.253.0/24 maxlen: 24
178.239.252.0/24 maxlen: 24
31.44.158.0/24 maxlen: 24
178.239.251.0/24 maxlen: 24
31.44.157.0/24 maxlen: 24
178.239.250.0/24 maxlen: 24
31.44.156.0/24 maxlen: 24
31.44.159.0/24 maxlen: 24
31.44.154.0/23 maxlen: 24
178.239.248.0/24 maxlen: 24
178.239.247.0/24 maxlen: 24
185.30.196.0/24 maxlen: 24
185.30.199.0/24 maxlen: 24
185.30.198.0/24 maxlen: 24
185.30.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:64:ce:a7:b9:f3:6f:10:76:62:a8:d9:0e:0b:57:6b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Validity
Not Before: Sep 22 10:46:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63aaab32410e42878c51d27e6b334fe4b26bde01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:42:98:ee:32:f7:81:e1:fd:d6:e7:58:d4:95:
0b:8a:21:0f:a6:74:3b:db:c6:73:0d:84:af:2b:06:
1f:31:03:83:39:c6:de:c4:9e:74:c7:fb:43:65:d4:
ce:86:7b:0d:49:a1:c5:e4:66:8c:a8:1c:d7:2a:43:
f6:78:0f:13:22:8c:3a:49:1f:19:a3:63:b7:5d:4d:
22:a9:38:5f:b1:1b:fd:bf:9d:54:88:54:b8:b1:eb:
97:2f:d7:93:79:82:e3:c1:c1:58:3b:f2:d3:bc:34:
17:19:27:58:ad:69:60:25:47:8f:ca:7e:66:0f:17:
d0:fe:a9:b7:5e:f1:07:20:dc:b9:91:f6:5f:83:40:
5b:f3:79:f2:08:fa:ec:ba:07:10:4d:d2:de:8c:1d:
a8:66:cf:77:d2:55:3d:6c:1a:98:88:68:4c:89:1a:
ae:87:63:ac:8e:54:3e:49:f8:4e:4c:49:a2:64:17:
34:af:d3:49:d4:af:b5:9a:59:a6:b4:af:6c:75:f0:
6e:3f:84:5e:7e:35:b2:32:21:14:e4:16:ba:25:a1:
a7:53:da:9c:cd:06:1c:f8:9f:4e:5b:49:1a:44:79:
f7:34:b3:45:3d:a5:9c:a1:fc:d6:42:db:ab:6b:0e:
49:b9:bd:cc:1c:be:0b:69:2c:78:05:db:1f:e5:84:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AA:AB:32:41:0E:42:87:8C:51:D2:7E:6B:33:4F:E4:B2:6B:DE:01
X509v3 Authority Key Identifier:
keyid:91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/Y6qrMkEOQoeMUdJ-azNP5LJr3gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/kbvFHkVBz7tQT_XvKjlt9qVLXm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.144.0/20
31.222.96.0-31.222.121.255
31.222.123.0-31.222.125.255
178.239.240.0/20
185.30.196.0/22
185.215.0.0/23
185.215.3.0/24
Signature Algorithm: sha256WithRSAEncryption
11:87:25:b4:06:00:41:c5:e9:06:c8:eb:0b:b2:b7:b9:aa:3e:
f6:f1:21:b4:1d:47:70:59:7a:d2:cd:6a:5c:5b:80:74:eb:75:
c1:ef:98:f9:2f:bb:a4:13:17:1a:3a:78:1b:09:da:b0:3d:fc:
b0:68:5c:ac:8b:99:85:79:77:b1:e7:96:4d:f4:a6:ae:94:e4:
30:0f:cb:b2:f2:12:9f:a5:81:a4:9e:75:3c:c3:75:4b:8a:da:
e0:79:28:50:dc:60:fe:40:e3:4e:15:e5:73:05:7e:11:7c:37:
5b:7b:6d:10:4a:4e:b0:0c:62:a6:c7:6c:0e:c4:d9:c2:72:e9:
4b:e6:ef:62:9d:31:c1:36:27:06:8d:23:da:52:65:b3:14:cc:
ca:25:82:91:dd:1b:0f:0b:c1:1c:bf:d2:85:c5:76:63:a1:a7:
bc:f3:55:13:46:a0:54:f0:df:f3:1a:99:b6:aa:7a:f2:77:f2:
50:2f:a6:db:93:ef:28:42:81:a5:14:84:0d:67:4b:19:35:26:
c1:ef:51:87:0c:c4:a1:ed:98:2b:43:30:66:c1:c4:ce:de:12:
5f:bb:1e:59:c7:e3:bc:62:ac:1e:29:71:8d:d2:b7:7c:c1:a4:
a3:c2:9e:73:ac:c6:35:10:7d:a5:85:80:83:4f:0e:97:ed:62:
ba:06:cd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:04 2023 by rpki-client on console.sobornost.net