Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f2e659-5bb1-46b5-b55d-bd717752f2f6/1/flrnDdjhOd7wmW5Ph8ymkCq2v6U.roa
File: flrnDdjhOd7wmW5Ph8ymkCq2v6U.roa (raw, json)
Hash identifier: N1CaplSn66e0djtS2mk3he+4wrwAVLe47rL3nBGWL/4=
Subject key identifier: 7E:5A:E7:0D:D8:E1:39:DE:F0:99:6E:4F:87:CC:A6:90:2A:B6:BF:A5
Certificate issuer: /CN=abe098801f54c9a3c47ae2f358b8e3fbd468614f
Certificate serial: 03E13DF0
Authority key identifier: AB:E0:98:80:1F:54:C9:A3:C4:7A:E2:F3:58:B8:E3:FB:D4:68:61:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-CYgB9UyaPEeuLzWLjj-9RoYU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f2e659-5bb1-46b5-b55d-bd717752f2f6/1/flrnDdjhOd7wmW5Ph8ymkCq2v6U.roa
Signing time: Sat 01 Jan 2022 15:04:25 +0000
ROA not before: Sat 01 Jan 2022 15:04:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202599
IP address blocks: 185.159.213.0/24 maxlen: 24
185.159.212.0/22 maxlen: 22
185.159.212.0/24 maxlen: 24
185.159.214.0/24 maxlen: 24
185.159.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65093104 (0x3e13df0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe098801f54c9a3c47ae2f358b8e3fbd468614f
Validity
Not Before: Jan 1 15:04:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e5ae70dd8e139def0996e4f87cca6902ab6bfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:85:4f:e4:b3:23:71:92:fd:19:18:84:70:
d8:eb:c4:80:21:39:bc:87:dc:1c:f9:ba:bd:dd:53:
2a:64:05:fe:70:80:92:55:4b:34:3b:d9:02:42:df:
1f:66:3e:c7:ae:60:51:0b:b3:e6:5a:9f:72:1a:4a:
b6:a8:bc:64:59:7b:8f:7c:f6:46:0b:75:58:6b:a0:
2a:51:70:98:33:4f:73:f3:e1:07:b6:06:16:e8:44:
36:e1:b1:fa:4e:3f:1e:71:05:cd:d8:ad:61:69:ac:
b4:a7:ab:5e:f4:1d:a4:9f:34:7d:c3:36:d2:82:73:
ce:e4:aa:4a:95:71:ea:10:b2:cb:f1:82:28:e5:b4:
03:c0:ab:2c:1f:68:e5:64:9f:cc:0f:c6:5e:7e:0e:
8d:e7:c3:97:33:53:25:3f:08:c5:34:3b:98:0d:80:
ff:4b:29:79:4a:df:1b:50:bd:db:f9:30:f7:00:fd:
25:85:f4:af:14:d2:46:92:0b:22:02:2b:9e:86:48:
a0:fb:af:15:ad:b0:78:63:19:24:36:4e:e0:bf:25:
04:b5:6f:bb:4d:61:55:8d:7a:01:cd:30:7d:5f:e9:
d4:e2:ea:85:57:18:65:19:48:60:4e:77:48:1b:7a:
a7:2e:cf:2d:4c:d2:30:5f:70:8b:01:71:ef:0a:84:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5A:E7:0D:D8:E1:39:DE:F0:99:6E:4F:87:CC:A6:90:2A:B6:BF:A5
X509v3 Authority Key Identifier:
keyid:AB:E0:98:80:1F:54:C9:A3:C4:7A:E2:F3:58:B8:E3:FB:D4:68:61:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CYgB9UyaPEeuLzWLjj-9RoYU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f2e659-5bb1-46b5-b55d-bd717752f2f6/1/flrnDdjhOd7wmW5Ph8ymkCq2v6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f2e659-5bb1-46b5-b55d-bd717752f2f6/1/q-CYgB9UyaPEeuLzWLjj-9RoYU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.212.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:cb:67:25:b2:ad:45:36:99:6f:d0:51:bc:2f:8d:88:7c:44:
03:d6:a1:b0:96:e9:8f:37:30:bb:a0:be:51:d0:79:56:23:66:
78:09:77:21:44:ef:c6:68:8b:5e:c7:7f:30:01:7a:f6:22:ae:
69:37:e1:67:61:2c:ce:72:b9:08:8c:38:d4:01:3d:ea:ea:e3:
e4:82:9e:a6:d4:af:76:97:5b:e4:10:72:a0:55:ec:f8:fd:09:
1d:40:32:ce:23:d7:4a:08:05:6b:a7:a9:1b:72:be:89:0b:a5:
63:cd:40:b9:cc:d5:6c:cf:d9:f8:91:50:ac:63:d2:de:95:16:
bf:5c:f6:69:4e:13:03:3a:7c:af:45:28:9a:5b:22:5c:c7:5a:
a1:40:d7:6d:b5:34:6a:64:4e:42:5f:9d:d6:d8:3e:ad:5e:2c:
14:ff:e5:1d:b8:e2:9e:7f:f8:03:50:d1:d5:d4:49:dd:62:aa:
f0:eb:56:68:13:89:81:97:75:3d:0b:c3:63:88:5f:e6:38:72:
b8:6f:c1:42:22:1d:c5:45:b7:57:ac:60:8f:77:7f:8e:25:4f:
9c:5d:c7:06:1d:7a:d3:99:b8:14:15:0b:24:90:1a:e2:c7:32:
04:83:f2:18:2a:52:03:8e:03:d9:7e:a8:00:c9:cd:ee:4d:ec:
39:03:93:e6
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA+E98DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YmUwOTg4MDFmNTRjOWEzYzQ3YWUyZjM1OGI4ZTNmYmQ0Njg2MTRmMB4XDTIyMDEw
MTE1MDQyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoN2U1YWU3MGRkOGUx
MzlkZWYwOTk2ZTRmODdjY2E2OTAyYWI2YmZhNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKv8hU/ksyNxkv0ZGIRw2OvEgCE5vIfcHPm6vd1TKmQF/nCA
klVLNDvZAkLfH2Y+x65gUQuz5lqfchpKtqi8ZFl7j3z2Rgt1WGugKlFwmDNPc/Ph
B7YGFuhENuGx+k4/HnEFzditYWmstKerXvQdpJ80fcM20oJzzuSqSpVx6hCyy/GC
KOW0A8CrLB9o5WSfzA/GXn4OjefDlzNTJT8IxTQ7mA2A/0speUrfG1C92/kw9wD9
JYX0rxTSRpILIgIrnoZIoPuvFa2weGMZJDZO4L8lBLVvu01hVY16Ac0wfV/p1OLq
hVcYZRlIYE53SBt6py7PLUzSMF9wiwFx7wqE10MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBR+WucN2OE53vCZbk+HzKaQKra/pTAfBgNVHSMEGDAWgBSr4JiAH1TJo8R6
4vNYuOP71GhhTzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3EtQ1lnQjlVeWFQRWV1THpXTGpqLTlSb1lVOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWYvZjJlNjU5LTViYjEtNDZiNS1iNTVkLWJkNzE3NzUyZjJmNi8x
L2Zscm5EZGpoT2Q3d21XNVBoOHlta0NxMnY2VS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYv
ZjJlNjU5LTViYjEtNDZiNS1iNTVkLWJkNzE3NzUyZjJmNi8xL3EtQ1lnQjlVeWFQ
RWV1THpXTGpqLTlSb1lVOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArmf1DANBgkqhkiG9w0BAQsFAAOC
AQEAfMtnJbKtRTaZb9BRvC+NiHxEA9ahsJbpjzcwu6C+UdB5ViNmeAl3IUTvxmiL
Xsd/MAF69iKuaTfhZ2EsznK5CIw41AE96urj5IKeptSvdpdb5BByoFXs+P0JHUAy
ziPXSggFa6epG3K+iQulY81AuczVbM/Z+JFQrGPS3pUWv1z2aU4TAzp8r0Uomlsi
XMdaoUDXbbU0amROQl+d1tg+rV4sFP/lHbjinn/4A1DR1dRJ3WKq8OtWaBOJgZd1
PQvDY4hf5jhyuG/BQiIdxUW3V6xgj3d/jiVPnF3HBh1605m4FBULJJAa4scyBIPy
GCpSA44D2X6oAMnN7k3sOQOT5g==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net