Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/jG7KAJ91abINa9cQwF2-TYFXXzE.roa
File: jG7KAJ91abINa9cQwF2-TYFXXzE.roa (raw, json)
Hash identifier: kFjQCL+O1Oj/uj08ukcPplNUODemm4tHJLh9MsQlnLY=
Subject key identifier: 8C:6E:CA:00:9F:75:69:B2:0D:6B:D7:10:C0:5D:BE:4D:81:57:5F:31
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 0185522EDF9DF2391F7B7F9C28BB13515102
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/jG7KAJ91abINa9cQwF2-TYFXXzE.roa
Signing time: Tue 27 Dec 2022 06:04:41 +0000
ROA not before: Tue 27 Dec 2022 06:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59588
IP address blocks: 151.236.160.0/24 maxlen: 24
151.236.161.0/24 maxlen: 24
151.236.162.0/23 maxlen: 23
151.236.162.0/24 maxlen: 24
151.236.163.0/24 maxlen: 24
151.236.160.0/23 maxlen: 23
151.236.166.0/24 maxlen: 24
151.236.164.0/23 maxlen: 23
151.236.164.0/24 maxlen: 24
151.236.165.0/24 maxlen: 24
151.236.172.0/23 maxlen: 23
151.236.171.0/24 maxlen: 24
151.236.172.0/24 maxlen: 24
151.236.168.0/23 maxlen: 23
151.236.168.0/24 maxlen: 24
151.236.169.0/24 maxlen: 24
151.236.170.0/24 maxlen: 24
151.236.170.0/23 maxlen: 23
151.236.166.0/23 maxlen: 23
151.236.167.0/24 maxlen: 24
151.236.173.0/24 maxlen: 24
151.236.176.0/23 maxlen: 23
151.236.175.0/24 maxlen: 24
151.236.176.0/24 maxlen: 24
151.236.177.0/24 maxlen: 24
151.236.174.0/23 maxlen: 23
151.236.174.0/24 maxlen: 24
151.236.178.0/23 maxlen: 23
151.236.178.0/24 maxlen: 24
151.236.179.0/24 maxlen: 24
151.236.186.0/24 maxlen: 24
151.236.182.0/24 maxlen: 24
151.236.180.0/24 maxlen: 24
151.236.180.0/23 maxlen: 23
151.236.181.0/24 maxlen: 24
151.236.189.0/24 maxlen: 24
151.236.190.0/24 maxlen: 24
151.236.190.0/23 maxlen: 23
151.236.191.0/24 maxlen: 24
151.236.188.0/23 maxlen: 23
151.236.188.0/24 maxlen: 24
45.153.119.0/24 maxlen: 24
45.153.116.0/24 maxlen: 24
45.153.116.0/23 maxlen: 23
45.153.117.0/24 maxlen: 24
45.153.118.0/23 maxlen: 23
45.153.118.0/24 maxlen: 24
2a10:2200:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:52:2e:df:9d:f2:39:1f:7b:7f:9c:28:bb:13:51:51:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Dec 27 06:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c6eca009f7569b20d6bd710c05dbe4d81575f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:99:fb:6a:4c:10:08:ca:e7:05:ef:0d:cd:88:
40:b0:1b:b8:c7:a4:c9:27:fd:74:29:95:88:4f:41:
5a:9e:97:6c:84:0a:d8:d0:51:4e:b2:84:c0:d9:83:
88:95:a8:ec:78:cf:fb:d3:04:79:cd:67:e9:7c:33:
f7:16:7f:0a:47:c6:8e:cd:b2:93:4a:ac:7b:1e:01:
ad:6e:79:d7:6c:14:58:9c:42:ce:4e:e9:0e:26:3b:
eb:7a:0d:73:37:a2:b5:ab:be:a4:43:85:17:83:64:
7c:0c:93:61:0a:da:e2:fe:2b:04:0c:25:b2:5d:db:
2a:c4:d8:c2:14:2c:28:a7:a8:2c:f4:cf:3f:e4:ef:
73:1a:1f:f8:bf:e8:7f:84:42:58:59:c0:a1:29:ab:
68:82:e5:f7:82:3a:d1:55:74:df:8a:a3:7c:da:b7:
89:45:8d:45:cf:43:46:04:f1:b5:d7:67:1d:97:f2:
80:0d:5a:17:50:e9:b7:91:c7:32:3d:2d:23:69:63:
31:de:18:b2:7e:c8:70:38:9b:93:bb:0f:be:26:fa:
50:12:24:a9:77:f4:aa:23:1a:3f:22:61:a3:34:f2:
1a:4c:b6:fb:28:d5:a4:d7:b8:ef:a9:35:7e:0e:18:
7e:c9:54:d2:d9:ab:26:fe:07:49:99:f0:60:0b:db:
40:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6E:CA:00:9F:75:69:B2:0D:6B:D7:10:C0:5D:BE:4D:81:57:5F:31
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/jG7KAJ91abINa9cQwF2-TYFXXzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.116.0/22
151.236.160.0-151.236.182.255
151.236.186.0/24
151.236.188.0/22
IPv6:
2a10:2200:2::/48
Signature Algorithm: sha256WithRSAEncryption
5f:14:29:05:83:c1:c3:35:07:b1:d0:53:f2:2d:f2:57:df:fa:
55:d8:cc:6b:c4:3c:6e:39:58:51:4a:39:f3:b1:3f:c3:72:e0:
80:c9:1c:c5:c5:18:39:f2:3c:cd:89:6c:03:ea:e6:1f:dd:15:
65:a8:e3:b8:aa:9c:e0:ff:fa:06:41:4d:ba:eb:94:2e:3c:28:
18:df:24:f5:1c:42:4d:a5:90:3a:92:18:1b:9e:ef:c5:24:d7:
75:c4:17:23:92:31:4c:88:30:26:13:79:32:d9:d5:3e:ce:aa:
24:44:a5:88:68:e4:00:3e:cf:a7:a9:b6:da:20:7f:0f:ee:e7:
50:65:a7:9c:83:1d:c1:df:49:69:c0:eb:62:91:ff:0e:1a:af:
7a:1a:33:b8:fc:ae:ef:c0:0e:0d:27:68:3d:7a:75:8a:cf:17:
6c:f2:dd:be:1d:83:b9:9c:15:66:4f:09:0b:fb:a8:3b:ba:aa:
b3:3e:a8:66:25:05:76:b8:37:ad:b7:0d:8e:d3:cd:e8:aa:5c:
7e:f7:c9:ca:41:a5:24:fa:af:eb:24:ab:b0:3c:12:b4:59:a5:
d0:99:0b:f0:c2:88:94:a7:0e:f4:5a:12:91:75:27:a6:db:dc:
17:65:e3:40:4b:86:6e:c3:1a:3d:40:77:fa:5b:51:5e:7e:99:
13:c2:60:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:45 2025 by rpki-client