Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/cejXHODoY3PvKf4BPZWQsAtuWdE.roa
File: cejXHODoY3PvKf4BPZWQsAtuWdE.roa (raw, json)
Hash identifier: ZdL5/2YEpa2BkPlx/vF4uSJwvEms2Bv07pwzRdEdqL8=
Subject key identifier: 71:E8:D7:1C:E0:E8:63:73:EF:29:FE:01:3D:95:90:B0:0B:6E:59:D1
Certificate issuer: /CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Certificate serial: 02D6D9EB
Authority key identifier: 91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/cejXHODoY3PvKf4BPZWQsAtuWdE.roa
Signing time: Thu 24 Mar 2022 07:35:32 +0000
ROA not before: Thu 24 Mar 2022 07:35:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50129
IP address blocks: 185.215.0.0/24 maxlen: 24
178.239.255.0/24 maxlen: 24
31.222.96.0/24 maxlen: 24
31.222.98.0/24 maxlen: 24
31.222.99.0/24 maxlen: 24
31.222.104.0/22 maxlen: 22
31.222.102.0/24 maxlen: 24
31.222.103.0/24 maxlen: 24
31.222.108.0/24 maxlen: 24
31.222.116.0/24 maxlen: 24
31.222.118.0/24 maxlen: 24
31.222.122.0/24 maxlen: 24
31.222.122.0/23 maxlen: 23
31.222.119.0/24 maxlen: 24
31.222.120.0/24 maxlen: 24
31.222.126.0/24 maxlen: 24
31.222.127.0/24 maxlen: 24
178.239.242.0/24 maxlen: 24
31.44.150.0/23 maxlen: 23
178.239.241.0/24 maxlen: 24
178.239.246.0/24 maxlen: 24
31.44.148.0/24 maxlen: 24
178.239.243.0/24 maxlen: 24
31.44.149.0/24 maxlen: 24
178.239.244.0/24 maxlen: 24
31.44.150.0/24 maxlen: 24
178.239.245.0/24 maxlen: 24
178.239.247.0/24 maxlen: 24
178.239.248.0/24 maxlen: 24
31.44.156.0/24 maxlen: 24
178.239.251.0/24 maxlen: 24
31.44.157.0/24 maxlen: 24
31.44.158.0/24 maxlen: 24
178.239.252.0/23 maxlen: 23
31.44.154.0/23 maxlen: 23
185.30.198.0/24 maxlen: 24
185.30.199.0/24 maxlen: 24
185.30.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47634923 (0x2d6d9eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Validity
Not Before: Mar 24 07:35:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71e8d71ce0e86373ef29fe013d9590b00b6e59d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:7a:8c:a2:06:c9:f7:de:5c:66:aa:07:c4:
67:1e:0b:31:fa:bd:ab:31:39:6a:0c:ec:84:ea:21:
fd:58:f2:95:62:14:2d:b3:c9:11:5d:81:46:ee:4a:
99:14:bc:11:63:63:80:b0:ec:e9:33:76:95:fc:c2:
46:5b:6d:7f:c3:e3:d6:d7:0d:96:9b:08:99:17:c6:
83:0c:62:87:65:b0:22:15:59:58:00:81:3c:6e:2c:
9b:3a:75:59:91:d5:2a:23:0b:68:3c:5a:42:47:fd:
53:d3:d3:59:0c:60:d3:6b:75:79:a5:e9:f8:78:d1:
e3:96:7a:93:a0:00:14:1a:78:06:10:ac:18:3c:e2:
59:0a:df:4a:87:59:fd:8a:cc:9e:34:f5:64:fa:b6:
91:99:c4:c2:94:3b:15:87:ee:4f:b5:13:43:40:36:
f9:69:2f:26:40:3c:22:bb:9f:70:5c:c2:2d:77:33:
e5:93:e6:07:ea:fb:67:c0:05:35:92:02:c8:06:32:
c1:c4:10:9e:48:f4:69:fc:76:2c:b9:2f:9f:d2:50:
b3:25:46:7f:49:5d:1d:41:61:f1:ba:57:3c:dd:ae:
3c:75:2f:9c:37:bc:41:99:ec:12:cf:40:59:c7:44:
a5:80:e6:12:ca:46:f5:53:5a:4b:f5:68:2a:fd:2d:
9d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E8:D7:1C:E0:E8:63:73:EF:29:FE:01:3D:95:90:B0:0B:6E:59:D1
X509v3 Authority Key Identifier:
keyid:91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/cejXHODoY3PvKf4BPZWQsAtuWdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/kbvFHkVBz7tQT_XvKjlt9qVLXm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.148.0/22
31.44.154.0-31.44.158.255
31.222.96.0/24
31.222.98.0/23
31.222.102.0-31.222.108.255
31.222.116.0/24
31.222.118.0-31.222.120.255
31.222.122.0/23
31.222.126.0/23
178.239.241.0-178.239.248.255
178.239.251.0-178.239.253.255
178.239.255.0/24
185.30.196.0/24
185.30.198.0/23
185.215.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:0b:24:33:5d:38:52:5d:1a:0f:8d:a1:0a:4f:ed:4c:84:52:
04:ff:f4:27:ff:2e:28:37:33:05:4f:1c:49:cc:10:3e:55:6e:
40:a5:ec:1a:03:57:5d:c6:99:11:72:da:c3:8a:c9:93:04:e4:
0b:b0:04:a0:78:29:a8:c5:a9:9f:8f:b9:36:95:c5:8c:47:6f:
00:60:ec:ba:28:e2:4d:02:99:8b:a9:c3:89:95:eb:8d:0a:9e:
29:ae:5e:db:f7:00:33:64:c7:09:e8:40:f5:d6:b3:a5:3e:34:
65:50:52:eb:bd:ff:e4:5d:14:d8:38:93:4c:8b:c3:d5:2e:4c:
4d:78:31:ff:49:54:a3:c7:0b:d5:b8:c1:f7:2f:a2:02:ea:95:
d5:d0:96:7d:33:a0:26:04:e2:a9:a4:18:a9:08:f2:9e:a3:51:
b5:ee:78:2b:e8:3f:f5:2f:e0:19:07:6e:b9:16:fa:e4:a1:91:
e2:2b:7e:b0:db:f2:de:24:1e:99:0c:fb:4f:71:cd:9b:a7:77:
a9:01:2f:e5:db:ec:3a:c2:98:b2:08:22:08:fc:7e:62:ba:5b:
8a:d8:cd:65:35:de:80:55:7d:6f:a2:ce:37:59:5f:9b:ac:5b:
59:9d:78:5b:76:17:d1:4c:79:94:e1:80:1c:a6:0c:01:d9:c0:
59:57:f0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:04 2023 by rpki-client on console.sobornost.net