Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/sjIhyDIZByk7Thrf2D_hkZR9dj0.roa
File: sjIhyDIZByk7Thrf2D_hkZR9dj0.roa (raw, json)
Hash identifier: JNgFJJaEsDtyqitKllf1RTGb1m6KRaIw4pdYJLosNws=
Subject key identifier: B2:32:21:C8:32:19:07:29:3B:4E:1A:DF:D8:3F:E1:91:94:7D:76:3D
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018FA509EEA1C4DDA61D2A4E85EF9C6E8904
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/sjIhyDIZByk7Thrf2D_hkZR9dj0.roa
Signing time: Thu 23 May 2024 10:40:42 +0000
ROA not before: Thu 23 May 2024 10:40:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15723
IP address blocks: 5.178.10.0/24 maxlen: 24
5.178.12.0/24 maxlen: 24
5.178.13.0/24 maxlen: 24
5.178.15.0/24 maxlen: 24
46.23.100.0/22 maxlen: 22
46.23.110.0/24 maxlen: 24
62.217.129.0/24 maxlen: 24
62.217.130.0/24 maxlen: 24
62.217.131.0/24 maxlen: 24
62.217.134.0/24 maxlen: 24
62.217.138.0/24 maxlen: 24
62.217.140.0/24 maxlen: 24
62.217.141.0/24 maxlen: 24
62.217.142.0/24 maxlen: 24
62.217.146.0/24 maxlen: 24
62.217.147.0/24 maxlen: 24
62.217.148.0/24 maxlen: 24
62.217.149.0/24 maxlen: 24
62.217.151.0/24 maxlen: 24
62.217.156.0/24 maxlen: 24
62.217.157.0/24 maxlen: 24
62.217.158.0/24 maxlen: 24
62.217.159.0/24 maxlen: 24
188.64.8.0/24 maxlen: 24
188.64.9.0/24 maxlen: 24
188.64.10.0/24 maxlen: 24
188.64.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:09:ee:a1:c4:dd:a6:1d:2a:4e:85:ef:9c:6e:89:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: May 23 10:40:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b23221c8321907293b4e1adfd83fe191947d763d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:20:53:00:ca:e5:db:c2:1f:6c:f7:7b:ab:
1d:b9:2b:e1:cd:54:e6:82:d3:b3:84:b0:99:0e:8c:
46:d1:1b:e8:af:6a:c0:d2:be:fb:5c:78:da:e1:0c:
23:6a:66:4b:7d:c4:85:54:f4:d3:8d:30:66:93:37:
fc:bf:4d:51:22:86:93:67:d0:c6:2d:a1:ec:94:2f:
86:a1:b5:54:40:35:cb:7b:28:e0:33:1a:29:8b:ce:
d5:57:e1:43:44:2a:5d:c1:23:18:19:88:0b:7a:b2:
c2:d3:f0:27:f1:71:61:60:e5:20:e1:49:49:6d:c9:
8a:2d:60:49:62:f0:9a:b0:2b:38:cc:59:3f:76:6c:
cb:9c:c9:e0:7f:33:8e:04:f0:e8:55:1f:e5:e3:43:
11:46:78:15:a4:25:a9:35:d0:a5:88:d8:75:ff:3b:
e6:5b:b9:32:b8:50:1d:c0:d5:c1:96:c3:df:7a:ef:
4b:8a:bf:c0:0d:82:88:df:e7:ad:4f:82:5e:70:01:
67:c0:34:35:7b:3c:8a:94:34:f6:e5:35:0e:36:ba:
ca:39:ff:e5:78:21:ed:df:87:1d:d1:be:68:9e:32:
8e:6f:e7:9e:dd:6a:d6:6e:ca:25:b5:f3:72:74:22:
24:76:80:ad:17:e5:b1:10:07:7a:8f:01:a7:00:cb:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:32:21:C8:32:19:07:29:3B:4E:1A:DF:D8:3F:E1:91:94:7D:76:3D
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/sjIhyDIZByk7Thrf2D_hkZR9dj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.10.0/24
5.178.12.0/23
5.178.15.0/24
46.23.100.0/22
46.23.110.0/24
62.217.129.0-62.217.131.255
62.217.134.0/24
62.217.138.0/24
62.217.140.0-62.217.142.255
62.217.146.0-62.217.149.255
62.217.151.0/24
62.217.156.0/22
188.64.8.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:39:93:7f:e6:c7:7f:3e:f0:d3:c8:27:e1:d8:68:e1:14:3c:
56:4c:0b:7e:53:0c:f3:5d:99:2f:01:b0:93:8a:16:ff:14:34:
3d:bb:48:bb:2b:4e:32:30:e3:33:82:29:0e:3e:d6:43:14:a3:
18:87:8b:57:a1:63:af:8b:72:4a:17:f2:29:ec:71:4a:93:5d:
65:d6:f4:ff:67:10:2e:31:65:86:b6:73:bb:bf:f4:e7:85:2b:
fa:25:d4:2d:ff:9a:f1:68:2d:e4:09:6d:6a:e3:c1:3c:7f:9e:
fc:08:7e:ed:a1:10:97:61:4f:51:39:a6:d9:56:47:6f:65:41:
85:6a:b9:21:47:ee:01:9f:42:1f:32:6c:89:c7:4e:a2:64:56:
98:2d:c8:69:3a:c9:18:7f:c9:b4:14:3e:e4:e3:2e:41:43:bb:
44:a9:2e:bf:eb:2f:dc:c6:03:45:c3:40:7a:7c:e2:1e:c9:ae:
23:20:63:94:a6:f1:10:af:b2:49:c0:3a:c0:53:2d:2a:8d:cf:
36:1c:5b:bd:fe:54:50:f4:40:03:ff:43:73:91:dd:dc:c9:fe:
e6:48:39:6c:92:2e:a8:d9:ee:bd:5c:a4:9a:a6:2b:ad:af:fd:
a2:56:5d:c9:24:1c:75:97:5e:01:28:66:c1:5e:89:89:e0:f7:
aa:a1:a7:94
-----BEGIN CERTIFICATE-----
MIIFXTCCBEWgAwIBAgISAY+lCe6hxN2mHSpOhe+cbokEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjQwNTIzMTA0MDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjMyMjFjODMyMTkwNzI5M2I0ZTFhZGZkODNmZTE5MTk0N2Q3NjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr94gUwDK5dvCH2z3e6sduSvhzVTm
gtOzhLCZDoxG0Rvor2rA0r77XHja4QwjamZLfcSFVPTTjTBmkzf8v01RIoaTZ9DG
LaHslC+GobVUQDXLeyjgMxopi87VV+FDRCpdwSMYGYgLerLC0/An8XFhYOUg4UlJ
bcmKLWBJYvCasCs4zFk/dmzLnMngfzOOBPDoVR/l40MRRngVpCWpNdCliNh1/zvm
W7kyuFAdwNXBlsPfeu9Lir/ADYKI3+etT4JecAFnwDQ1ezyKlDT25TUONrrKOf/l
eCHt34cd0b5onjKOb+ee3WrWbsoltfNydCIkdoCtF+WxEAd6jwGnAMsx/wIDAQAB
o4ICaTCCAmUwHQYDVR0OBBYEFLIyIcgyGQcpO04a39g/4ZGUfXY9MB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvc2pJaHlESVpCeWs3VGhyZjJEX2hrWlI5ZGowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQABbIKAwQB
BbIMAwQABbIPAwQCLhdkAwQALhduMAwDBAA+2YEDBAI+2YADBAA+2YYDBAA+2Yow
DAMEAj7ZjAMEAD7ZjjAMAwQBPtmSAwQBPtmUAwQAPtmXAwQCPtmcAwQCvEAIMA0G
CSqGSIb3DQEBCwUAA4IBAQCLOZN/5sd/PvDTyCfh2GjhFDxWTAt+UwzzXZkvAbCT
ihb/FDQ9u0i7K04yMOMzgikOPtZDFKMYh4tXoWOvi3JKF/Ip7HFKk11l1vT/ZxAu
MWWGtnO7v/TnhSv6JdQt/5rxaC3kCW1q48E8f578CH7toRCXYU9ROabZVkdvZUGF
arkhR+4Bn0IfMmyJx06iZFaYLchpOskYf8m0FD7k4y5BQ7tEqS6/6y/cxgNFw0B6
fOIeya4jIGOUpvEQr7JJwDrAUy0qjc82HFu9/lRQ9EAD/0Nzkd3cyf7mSDlski6o
2e69XKSapiutr/2iVl3JJBx1l14BKGbBXomJ4PeqoaeU
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:18 2025 by rpki-client