Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/fNeI-JjIJKT_7gfMf_SryQ57iBw.roa
File: fNeI-JjIJKT_7gfMf_SryQ57iBw.roa (raw, json)
Hash identifier: /9t4C3mOStIMMM833nTDBU3JR6OhdLfgiNp+8xNqMs4=
Subject key identifier: 7C:D7:88:F8:98:C8:24:A4:FF:EE:07:CC:7F:F4:AB:C9:0E:7B:88:1C
Certificate issuer: /CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Certificate serial: 030E5CA4
Authority key identifier: 91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/fNeI-JjIJKT_7gfMf_SryQ57iBw.roa
Signing time: Tue 12 Apr 2022 11:53:55 +0000
ROA not before: Tue 12 Apr 2022 11:53:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.215.3.0/24 maxlen: 24
185.215.1.0/24 maxlen: 24
185.215.0.0/24 maxlen: 24
178.239.255.0/24 maxlen: 24
178.239.254.0/24 maxlen: 24
31.222.98.0/24 maxlen: 24
31.222.97.0/24 maxlen: 24
31.222.96.0/24 maxlen: 24
31.222.104.0/22 maxlen: 24
31.222.103.0/24 maxlen: 24
31.222.102.0/24 maxlen: 24
31.222.101.0/24 maxlen: 24
31.222.100.0/24 maxlen: 24
31.222.99.0/24 maxlen: 24
31.222.112.0/24 maxlen: 24
31.222.111.0/24 maxlen: 24
31.222.110.0/24 maxlen: 24
31.222.109.0/24 maxlen: 24
31.222.108.0/24 maxlen: 24
31.222.118.0/24 maxlen: 24
31.222.117.0/24 maxlen: 24
31.222.116.0/24 maxlen: 24
31.222.115.0/24 maxlen: 24
31.222.114.0/24 maxlen: 24
31.222.125.0/24 maxlen: 24
31.222.124.0/24 maxlen: 24
31.222.123.0/24 maxlen: 24
31.222.121.0/24 maxlen: 24
31.222.120.0/24 maxlen: 24
31.222.119.0/24 maxlen: 24
31.44.144.0/22 maxlen: 22
178.239.240.0/24 maxlen: 24
178.239.243.0/24 maxlen: 24
178.239.246.0/24 maxlen: 24
31.44.152.0/23 maxlen: 23
178.239.245.0/24 maxlen: 24
31.44.151.0/24 maxlen: 24
178.239.244.0/24 maxlen: 24
31.44.150.0/24 maxlen: 24
31.44.149.0/24 maxlen: 24
31.44.148.0/24 maxlen: 24
178.239.242.0/24 maxlen: 24
178.239.241.0/24 maxlen: 24
178.239.249.0/24 maxlen: 24
178.239.253.0/24 maxlen: 24
178.239.252.0/24 maxlen: 24
31.44.158.0/24 maxlen: 24
178.239.251.0/24 maxlen: 24
31.44.157.0/24 maxlen: 24
178.239.250.0/24 maxlen: 24
31.44.156.0/24 maxlen: 24
31.44.159.0/24 maxlen: 24
31.44.154.0/23 maxlen: 24
178.239.248.0/24 maxlen: 24
178.239.247.0/24 maxlen: 24
185.30.196.0/24 maxlen: 24
185.30.199.0/24 maxlen: 24
185.30.198.0/24 maxlen: 24
185.30.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51272868 (0x30e5ca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Validity
Not Before: Apr 12 11:53:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cd788f898c824a4ffee07cc7ff4abc90e7b881c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:29:d7:6d:98:44:8c:11:38:b1:81:88:ae:
ec:60:e6:ea:e5:df:0d:9d:e7:f7:b0:97:99:87:00:
a9:05:94:9c:ed:d8:ac:7c:e6:37:55:23:e9:e1:44:
d8:12:40:09:68:ef:45:9b:f5:ec:e5:e3:4b:aa:c0:
c7:f3:4d:71:f9:44:84:29:ba:8a:c5:c1:30:01:a8:
80:3d:f6:23:a2:d2:9d:73:2b:23:7d:66:70:fa:02:
25:a2:a4:27:31:ab:86:63:27:e5:b0:bf:4a:5b:3f:
c5:f5:60:00:78:20:d7:e2:24:3a:b8:d2:48:9b:dc:
38:bc:2a:02:1c:f4:9c:f9:0b:23:f8:0d:6f:de:9d:
6d:c7:c4:d0:59:71:c7:ee:d7:a8:b7:a8:42:a7:7d:
77:2d:7d:78:18:b9:13:05:69:d8:45:aa:6b:d1:86:
ca:26:de:11:41:09:22:f4:5e:12:c9:40:11:1c:b8:
48:e6:8c:56:ea:ee:8b:63:d7:f8:02:46:27:a6:af:
4b:b2:dd:63:95:2d:cf:1f:1e:cf:4e:03:80:c4:22:
4b:ff:0e:36:21:a2:97:e6:e7:e2:ab:6c:f0:37:72:
0c:58:4a:05:37:5d:75:1c:5d:d8:6f:07:cb:b4:43:
cd:b5:09:cf:4e:1c:4b:5a:44:1c:a0:8e:e4:e1:7c:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D7:88:F8:98:C8:24:A4:FF:EE:07:CC:7F:F4:AB:C9:0E:7B:88:1C
X509v3 Authority Key Identifier:
keyid:91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/fNeI-JjIJKT_7gfMf_SryQ57iBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/kbvFHkVBz7tQT_XvKjlt9qVLXm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.144.0/20
31.222.96.0-31.222.112.255
31.222.114.0-31.222.121.255
31.222.123.0-31.222.125.255
178.239.240.0/20
185.30.196.0/22
185.215.0.0/23
185.215.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:98:6f:d9:73:8a:28:13:07:cb:ea:d4:36:07:6f:9e:76:4e:
28:30:34:53:0a:2b:e7:29:5d:cf:b5:41:61:c1:d5:05:eb:c8:
5c:b4:46:15:01:b8:27:31:ad:53:d2:d2:2c:31:88:4e:5e:a6:
11:8d:a0:54:c5:d9:d4:bc:45:93:07:d0:61:e2:49:28:82:97:
07:97:93:4b:d1:f7:0e:1f:9d:97:87:59:fd:da:18:3b:f1:32:
46:bb:61:ab:85:a7:b6:f9:e7:ef:f7:c4:11:11:91:9b:ca:b5:
08:a9:f9:04:81:9c:b6:3a:7f:e4:d7:b3:ab:db:22:ac:b8:35:
52:d8:24:32:c6:be:20:8b:4a:3b:34:65:71:5a:c8:78:c5:5e:
a8:96:b3:35:46:d8:60:57:78:85:ac:f6:cf:82:ee:2b:c9:72:
b6:2f:d2:c5:c0:b8:39:e1:3f:b0:8f:cf:5f:02:87:43:b0:ab:
11:72:34:64:56:97:cf:e8:cb:8c:d9:e3:d4:ba:9a:ec:e1:31:
11:94:73:25:e6:7b:24:f6:94:2b:d8:fd:91:01:94:3e:53:44:
7e:15:ba:b3:04:2a:d4:ae:00:e1:7c:76:6b:ea:8a:5b:e5:84:
ea:0f:4b:01:95:63:10:8a:75:08:b3:fa:de:a6:7d:da:ee:f1:
6b:44:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:04 2023 by rpki-client on console.sobornost.net