Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/jfV4txgwqbNSIUdzP6mmXALXIHw.roa
File: jfV4txgwqbNSIUdzP6mmXALXIHw.roa (raw, json)
Hash identifier: NJSQh/d4w2ShUmYZqm7MjuONLc7QYe+8itOSq63eoNc=
Subject key identifier: 8D:F5:78:B7:18:30:A9:B3:52:21:47:73:3F:A9:A6:5C:02:D7:20:7C
Certificate issuer: /CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Certificate serial: 02E1C8C9
Authority key identifier: 91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/jfV4txgwqbNSIUdzP6mmXALXIHw.roa
Signing time: Fri 25 Mar 2022 12:26:15 +0000
ROA not before: Fri 25 Mar 2022 12:26:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 185.215.1.0/24 maxlen: 24
178.239.254.0/24 maxlen: 24
31.222.98.0/24 maxlen: 24
31.222.97.0/24 maxlen: 24
31.222.96.0/24 maxlen: 24
31.222.104.0/22 maxlen: 24
31.222.103.0/24 maxlen: 24
31.222.102.0/24 maxlen: 24
31.222.101.0/24 maxlen: 24
31.222.100.0/24 maxlen: 24
31.222.99.0/24 maxlen: 24
31.222.112.0/24 maxlen: 24
31.222.110.0/24 maxlen: 24
31.222.109.0/24 maxlen: 24
31.222.118.0/24 maxlen: 24
31.222.117.0/24 maxlen: 24
31.222.116.0/24 maxlen: 24
31.222.115.0/24 maxlen: 24
31.222.114.0/24 maxlen: 24
31.222.125.0/24 maxlen: 24
31.222.124.0/24 maxlen: 24
31.222.123.0/24 maxlen: 24
31.222.121.0/24 maxlen: 24
31.222.119.0/24 maxlen: 24
31.44.144.0/22 maxlen: 22
178.239.240.0/24 maxlen: 24
31.44.152.0/23 maxlen: 23
31.44.151.0/24 maxlen: 24
31.44.150.0/24 maxlen: 24
178.239.241.0/24 maxlen: 24
31.44.158.0/24 maxlen: 24
31.44.157.0/24 maxlen: 24
178.239.250.0/24 maxlen: 24
31.44.156.0/24 maxlen: 24
178.239.249.0/24 maxlen: 24
31.44.154.0/23 maxlen: 24
31.44.159.0/24 maxlen: 24
185.30.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48351433 (0x2e1c8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91bbc51e4541cfbb504ff5ef2a396df6a54b5e6d
Validity
Not Before: Mar 25 12:26:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8df578b71830a9b3522147733fa9a65c02d7207c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:29:fb:fc:f6:58:b7:42:81:10:d2:79:71:8e:
2d:b0:20:d2:9d:7d:af:15:d0:68:24:6d:2b:8f:47:
11:62:99:cf:1a:39:80:e4:f4:62:d9:ed:f5:9b:22:
17:60:f6:fe:b7:b4:03:55:ae:b6:a8:1b:bc:ea:36:
4c:9d:23:30:22:1b:fd:99:8b:64:44:d4:17:61:57:
78:14:7a:a7:b4:b5:52:c8:13:a3:d9:2d:c7:49:d2:
a8:a0:fb:11:07:ed:0b:ec:47:89:35:b9:3d:35:47:
cd:cf:83:e9:41:f6:f6:a4:47:8a:5d:1c:9b:c1:55:
ec:0c:c7:2d:f9:dc:97:b9:6d:91:51:fa:03:0f:71:
63:41:04:a9:7d:fb:2f:39:18:ae:12:57:6f:4b:cf:
b6:19:38:a9:b1:10:6e:47:ac:03:78:f4:bb:63:f7:
53:e4:eb:a1:c5:0b:66:43:a3:b1:e8:78:59:79:f1:
d2:11:68:95:db:c1:80:fa:5d:21:40:68:0d:56:24:
7a:e4:8e:19:96:50:c6:74:b2:cb:86:8a:09:89:ff:
60:81:59:76:e2:1a:90:32:38:df:fc:6f:0d:d6:0e:
ed:7d:ad:a9:b0:cf:9e:c9:54:76:21:b5:a2:a5:ac:
d9:eb:01:3b:f7:be:8c:36:d1:2b:cf:f8:6c:c5:64:
2e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F5:78:B7:18:30:A9:B3:52:21:47:73:3F:A9:A6:5C:02:D7:20:7C
X509v3 Authority Key Identifier:
keyid:91:BB:C5:1E:45:41:CF:BB:50:4F:F5:EF:2A:39:6D:F6:A5:4B:5E:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbvFHkVBz7tQT_XvKjlt9qVLXm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/jfV4txgwqbNSIUdzP6mmXALXIHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f7d8ba-7df6-44f4-a6fa-fd82f290431c/1/kbvFHkVBz7tQT_XvKjlt9qVLXm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.144.0/22
31.44.150.0-31.44.159.255
31.222.96.0-31.222.107.255
31.222.109.0-31.222.110.255
31.222.112.0/24
31.222.114.0-31.222.119.255
31.222.121.0/24
31.222.123.0-31.222.125.255
178.239.240.0/23
178.239.249.0-178.239.250.255
178.239.254.0/24
185.30.197.0/24
185.215.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:19:f0:65:ee:27:c0:8e:e0:9b:a8:89:a7:d6:68:f6:7e:44:
b7:c0:84:af:b9:b8:0f:ad:41:2d:10:6f:5b:95:de:e5:37:16:
aa:d5:a2:4a:36:36:c3:67:9c:68:7e:99:2b:08:89:48:b6:d2:
89:9a:d0:03:af:3b:03:5e:2f:f8:13:ab:7a:5c:9c:fa:9e:10:
10:63:04:e2:73:45:1f:a7:5e:3c:48:30:06:3f:fd:5b:d4:32:
01:04:4e:80:31:78:2a:fc:82:ad:7f:e5:49:6e:0a:e8:59:dd:
e2:19:71:c3:d8:5d:1c:8d:25:30:cd:ad:4f:36:e6:26:d7:a4:
20:bd:5f:ff:74:b8:3c:32:c1:7f:bd:ef:2c:80:12:b4:56:e4:
70:be:a7:4b:58:e2:30:6d:69:bb:cc:a8:f0:28:c4:ba:20:ba:
66:9c:c1:c3:17:bc:82:bb:7f:84:87:fb:ad:6c:74:ea:52:d6:
2a:ee:54:0a:17:8f:20:d6:47:2f:be:68:2b:a7:d8:38:b5:b1:
7f:14:0d:81:00:43:d4:3b:c4:02:f6:2a:2f:ad:9b:aa:74:de:
e8:4f:20:ce:c3:3a:ac:b7:32:bc:ed:ce:ba:76:20:33:8f:0a:
eb:62:35:de:f4:ae:c1:23:c7:85:ac:43:ce:24:97:ba:11:eb:
6e:16:cb:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:04 2023 by rpki-client on console.sobornost.net