Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2a4714-1d7c-4dc5-bda0-eb954d8ec385/1/fhKGypErxzpVj93lXOoYohene2Q.roa
File: fhKGypErxzpVj93lXOoYohene2Q.roa (raw, json)
Hash identifier: dtTrhBAe5Nje/o+9w0LsWnuVqXutu7Kbu08G9ytnPDE=
Subject key identifier: 7E:12:86:CA:91:2B:C7:3A:55:8F:DD:E5:5C:EA:18:A2:17:A7:7B:64
Certificate issuer: /CN=cb188678f83ca1d959cc0c6780de1c40e55cdb9a
Certificate serial: 1B6979D8
Authority key identifier: CB:18:86:78:F8:3C:A1:D9:59:CC:0C:67:80:DE:1C:40:E5:5C:DB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxiGePg8odlZzAxngN4cQOVc25o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2a4714-1d7c-4dc5-bda0-eb954d8ec385/1/fhKGypErxzpVj93lXOoYohene2Q.roa
Signing time: Sat 01 Jan 2022 14:04:03 +0000
ROA not before: Sat 01 Jan 2022 14:04:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62262
IP address blocks: 5.159.209.0/24 maxlen: 24
5.159.208.0/21 maxlen: 21
5.159.211.0/24 maxlen: 24
5.159.210.0/24 maxlen: 24
5.159.213.0/24 maxlen: 24
5.159.212.0/24 maxlen: 24
5.159.208.0/24 maxlen: 24
5.159.215.0/24 maxlen: 24
5.159.214.0/24 maxlen: 24
195.88.9.0/24 maxlen: 24
195.88.8.0/24 maxlen: 24
195.88.8.0/23 maxlen: 23
185.145.88.0/22 maxlen: 22
185.145.88.0/24 maxlen: 24
185.145.90.0/24 maxlen: 24
185.145.89.0/24 maxlen: 24
185.145.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459897304 (0x1b6979d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb188678f83ca1d959cc0c6780de1c40e55cdb9a
Validity
Not Before: Jan 1 14:04:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e1286ca912bc73a558fdde55cea18a217a77b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4d:e7:54:cb:16:61:a1:4b:df:a4:fd:5d:76:
dd:ef:aa:d0:29:c7:5b:f9:0b:28:96:56:a9:aa:99:
cb:40:a2:a1:1c:6d:b3:df:22:2d:08:a3:f5:86:d6:
ec:04:3d:80:df:ab:03:8b:fb:d4:e3:09:c3:7b:7c:
df:7b:e2:e3:59:e4:59:e2:aa:47:fe:b4:fa:28:e6:
2a:ba:80:de:9e:d1:41:b5:62:63:4e:2b:75:c9:dc:
6a:3a:5b:73:14:e9:00:db:2f:94:a3:bb:4e:1e:a4:
3e:16:23:30:12:ea:c5:24:65:6f:5e:f7:fb:b7:83:
d7:a4:0b:1f:c4:f6:15:c7:7a:d8:83:fb:b3:32:3c:
ad:db:62:41:e5:40:92:12:45:26:56:cb:ee:20:dd:
26:d2:b3:df:3d:b8:28:dc:a5:a8:a3:df:6b:8d:38:
78:9d:ce:3e:db:20:3d:bc:45:3a:a0:00:bd:19:80:
40:f3:68:93:1e:9f:3a:e7:c6:b8:46:e7:71:e1:b3:
32:8f:5f:dc:7c:83:b8:f9:3a:bc:31:63:f9:a7:82:
1b:40:9d:e8:03:46:94:86:26:9b:e2:44:de:f1:14:
54:60:d6:d6:bf:6c:57:42:09:95:41:e2:b1:7e:50:
90:30:c9:ee:58:b9:8f:28:90:0e:a9:e2:e2:eb:c3:
c1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:12:86:CA:91:2B:C7:3A:55:8F:DD:E5:5C:EA:18:A2:17:A7:7B:64
X509v3 Authority Key Identifier:
keyid:CB:18:86:78:F8:3C:A1:D9:59:CC:0C:67:80:DE:1C:40:E5:5C:DB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxiGePg8odlZzAxngN4cQOVc25o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2a4714-1d7c-4dc5-bda0-eb954d8ec385/1/fhKGypErxzpVj93lXOoYohene2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2a4714-1d7c-4dc5-bda0-eb954d8ec385/1/yxiGePg8odlZzAxngN4cQOVc25o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.208.0/21
185.145.88.0/22
195.88.8.0/23
Signature Algorithm: sha256WithRSAEncryption
53:46:33:1a:fd:09:24:38:47:e4:fc:38:2e:36:d7:ae:a3:43:
50:f7:04:a7:96:91:63:53:90:9b:c2:31:36:77:b2:fa:ea:1f:
19:8d:94:36:ac:33:2f:cd:28:54:26:bf:2a:94:fc:76:de:75:
d8:20:fc:c3:b2:f5:90:c9:6e:c9:3c:6f:45:5c:b1:a4:a9:1a:
e0:a0:a9:9f:bc:89:c3:61:3c:d8:2c:14:79:17:55:7c:7b:a4:
b7:e6:00:a6:c7:d3:8f:50:cd:5b:13:14:79:b5:6d:58:fb:51:
2f:f6:0c:b1:cf:ac:9e:07:8f:bb:ac:7b:e2:c5:d3:94:9f:8c:
6c:2e:af:f3:3d:f6:16:ef:87:8c:76:b1:24:73:7f:0f:46:f9:
f9:70:5c:0c:c9:19:bb:a2:2b:63:bc:56:d1:a1:5c:f3:cf:9f:
d2:8d:2e:a8:42:52:81:ec:a8:13:c6:92:03:d2:37:3c:06:eb:
92:fd:03:e9:63:14:bd:8a:ab:7d:49:89:86:55:14:84:35:88:
9d:ec:2a:ff:ea:29:f1:fe:4e:79:a0:8d:18:eb:7d:10:bf:d4:
c6:f4:ca:c1:93:a5:1e:2c:7a:36:65:48:3d:4c:26:63:13:27:
d4:6f:c8:bf:cb:07:2a:f5:7f:db:cb:1d:84:ba:b2:36:9c:34:
fd:1c:5c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:44 2024 by rpki-client on console-fra.rpki-client.org