Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/KfFhK3PSGJ8VyoXCqILUDm9enmE.roa
File: KfFhK3PSGJ8VyoXCqILUDm9enmE.roa (raw, json)
Hash identifier: kFxc1ZHGDK7e3PJZM+SAR/Pwj2/bczKrdOjxsYN853c=
Subject key identifier: 29:F1:61:2B:73:D2:18:9F:15:CA:85:C2:A8:82:D4:0E:6F:5E:9E:61
Certificate issuer: /CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Certificate serial: 1C62DA22
Authority key identifier: 5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/KfFhK3PSGJ8VyoXCqILUDm9enmE.roa
Signing time: Sat 01 Jan 2022 04:52:32 +0000
ROA not before: Sat 01 Jan 2022 04:52:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39855
IP address blocks: 185.116.15.0/24 maxlen: 24
212.26.203.0/24 maxlen: 24
185.116.14.0/24 maxlen: 24
212.26.202.0/24 maxlen: 24
185.116.13.0/24 maxlen: 24
212.26.201.0/24 maxlen: 24
185.116.12.0/24 maxlen: 24
212.26.200.0/24 maxlen: 24
217.8.103.0/24 maxlen: 24
217.8.102.0/24 maxlen: 24
217.8.101.0/24 maxlen: 24
217.8.100.0/24 maxlen: 24
212.19.207.0/24 maxlen: 24
212.19.211.0/24 maxlen: 24
212.19.210.0/24 maxlen: 24
212.19.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476240418 (0x1c62da22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Validity
Not Before: Jan 1 04:52:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29f1612b73d2189f15ca85c2a882d40e6f5e9e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:57:dd:ef:5c:10:15:d9:70:b3:a6:41:77:b0:
4b:73:37:1d:86:a5:3c:f0:12:42:69:96:64:da:80:
34:f5:cd:f2:60:51:e2:16:39:43:ad:dc:f3:ba:f1:
9b:9a:9a:31:9b:08:49:e6:b1:4f:79:4f:11:71:0f:
e1:d5:ef:92:5d:db:6c:c5:52:b8:50:c6:8e:25:ad:
29:61:98:31:4f:f1:17:0d:c1:76:10:91:46:7a:7c:
a5:c6:9d:64:45:c7:01:52:b8:c2:d4:65:2f:7a:ba:
36:16:e5:ac:f7:7c:be:9b:00:bb:2d:e6:af:69:7a:
89:98:5f:87:46:52:ff:af:23:c7:53:0e:ed:cb:ed:
f4:a9:09:0a:f0:d8:22:9c:3a:0e:be:41:20:b2:31:
6d:41:e4:03:ec:b5:bf:4a:56:03:f5:86:ec:45:9e:
8b:b0:be:73:82:3a:d7:ea:c9:15:53:b5:17:b1:27:
9b:1f:cb:56:d0:81:5f:12:b3:ad:ca:8c:05:1a:cf:
cb:38:cc:36:d4:c1:7a:3f:a9:87:be:2c:23:a4:ea:
f8:74:57:48:d7:dd:fc:24:d7:28:2f:ab:b5:85:1b:
02:17:eb:a5:10:1e:04:27:98:cd:fd:eb:8a:40:11:
2a:a8:f5:70:c1:9f:87:fd:0d:81:c2:78:04:d3:30:
08:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F1:61:2B:73:D2:18:9F:15:CA:85:C2:A8:82:D4:0E:6F:5E:9E:61
X509v3 Authority Key Identifier:
keyid:5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/KfFhK3PSGJ8VyoXCqILUDm9enmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/XgnAoHQRyUcw4NLy2girl5Y621s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.12.0/22
212.19.207.0/24
212.19.209.0-212.19.211.255
212.26.200.0/22
217.8.100.0/22
Signature Algorithm: sha256WithRSAEncryption
54:b7:93:ac:26:5a:46:ee:cb:ad:6d:cf:0c:b6:c8:05:41:17:
39:f6:0b:ea:ac:e2:5f:23:9d:17:7a:a6:c8:06:54:15:4e:a7:
12:67:fc:4a:5f:65:26:04:0c:95:ce:72:91:1f:51:24:c8:75:
ac:ee:50:ba:f3:c3:f2:e8:39:3f:11:57:4f:c9:8d:99:12:4e:
16:49:15:43:a0:1c:bf:33:6b:7b:cc:72:50:db:72:7a:53:6e:
0e:6f:3b:8b:d3:82:e7:55:e1:be:ba:b5:d1:b5:f4:25:85:2d:
b7:b9:ce:2a:f7:8a:18:ad:29:bb:f5:62:3d:dd:b6:28:dd:b4:
88:90:d7:2a:66:4d:79:2d:e2:53:17:d5:d2:9b:04:19:81:c3:
c1:c8:a3:37:5e:c3:15:92:68:fd:9e:bb:dc:b2:4c:08:9a:d3:
2d:bb:b5:0c:30:78:c5:37:07:e2:fc:c0:6c:e0:10:c4:25:fa:
ce:04:df:96:3f:19:30:c1:f0:8d:92:2e:61:ee:26:39:9b:f3:
26:9f:e3:58:3e:15:59:89:c1:cd:d2:fb:08:e3:d5:24:3d:3d:
0f:41:2a:c5:85:f7:22:58:70:14:08:1a:fa:8f:53:1f:f1:a7:
78:f4:67:7e:8d:c9:27:e6:a0:1c:ce:b5:4f:bc:24:8e:8d:1f:
c1:17:e6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:38 2023 by rpki-client on console.sobornost.net