Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ed_tVLq_y1bjvkLDLvTJWhnELbc.roa
File: ed_tVLq_y1bjvkLDLvTJWhnELbc.roa (raw, json)
Hash identifier: PSAKJq4Qf2D/V7/l7lYFbvGcK+VCzLZgjQLxg2NDzBQ=
Subject key identifier: 79:DF:ED:54:BA:BF:CB:56:E3:BE:42:C3:2E:F4:C9:5A:19:C4:2D:B7
Certificate issuer: /CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Certificate serial: 0184C88DB948A62488C422C871B08FDFC7F5
Authority key identifier: 21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ed_tVLq_y1bjvkLDLvTJWhnELbc.roa
Signing time: Wed 30 Nov 2022 12:40:41 +0000
ROA not before: Wed 30 Nov 2022 12:40:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 82.118.28.0/22 maxlen: 24
213.225.238.0/24 maxlen: 24
45.146.105.0/24 maxlen: 24
45.146.104.0/24 maxlen: 24
45.146.106.0/24 maxlen: 24
212.2.239.0/24 maxlen: 24
45.80.4.0/22 maxlen: 24
141.98.74.0/23 maxlen: 24
141.98.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:8d:b9:48:a6:24:88:c4:22:c8:71:b0:8f:df:c7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21814cf2ca3e1799349ccd4c7e6a76d63f834a3d
Validity
Not Before: Nov 30 12:40:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79dfed54babfcb56e3be42c32ef4c95a19c42db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:31:d7:30:e4:d9:fd:59:f4:97:f4:60:32:
db:f9:fc:34:76:1a:ac:6f:7c:91:5b:bd:d4:64:a5:
39:cc:ce:68:04:ee:66:ef:9c:0b:a6:d8:5d:0f:45:
16:0f:2e:23:4e:3e:92:88:27:51:ec:73:38:61:91:
23:9c:86:4f:a6:8f:a3:c4:05:b6:de:c7:1a:2f:2f:
b1:6d:ce:bf:09:57:cb:e2:d4:9e:34:2a:3a:8e:6f:
a4:39:34:b8:4f:02:3c:55:f9:37:5a:6a:24:ea:65:
3c:2c:75:e6:24:9a:3b:d3:97:48:a7:3c:74:d6:48:
9a:8f:4a:99:7d:05:c2:ca:c1:9f:2c:7c:d0:70:f2:
cf:6b:ef:81:8e:0b:9d:3d:0f:e2:41:f5:29:61:c9:
b4:ef:91:14:c4:5f:66:84:86:2e:8a:5e:df:6c:d1:
ae:e7:96:e0:8b:91:b1:43:18:fb:9b:52:36:e6:ab:
31:42:72:e5:ec:1b:ef:2c:c3:f2:48:07:06:76:ac:
b3:0c:e1:b5:ed:d1:f4:96:d4:45:20:1a:3c:d6:db:
d3:0a:52:f5:e3:36:fd:94:80:dc:37:d3:8a:c8:b4:
40:48:e0:4e:b4:3a:3b:4a:fe:6a:80:51:ba:19:ea:
4b:7f:39:9d:8f:2e:1e:75:1a:76:bc:98:f2:2e:c9:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DF:ED:54:BA:BF:CB:56:E3:BE:42:C3:2E:F4:C9:5A:19:C4:2D:B7
X509v3 Authority Key Identifier:
keyid:21:81:4C:F2:CA:3E:17:99:34:9C:CD:4C:7E:6A:76:D6:3F:83:4A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYFM8so-F5k0nM1Mfmp21j-DSj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/ed_tVLq_y1bjvkLDLvTJWhnELbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/01f853-d445-4ace-a8d8-22701b4bb407/1/IYFM8so-F5k0nM1Mfmp21j-DSj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.4.0/22
45.146.104.0-45.146.106.255
82.118.28.0/22
141.98.72.0/24
141.98.74.0/23
212.2.239.0/24
213.225.238.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e9:4a:b3:a7:49:fa:69:c3:1e:e8:96:70:66:3a:16:ec:fd:
0c:33:1c:49:7f:bb:25:2b:4e:5f:66:31:0c:c2:ad:64:8b:8a:
ef:40:38:fb:7b:3f:cc:e0:2b:5b:39:49:dd:9a:a2:eb:38:0a:
ae:cd:28:0e:4d:ed:16:19:06:33:71:ff:8c:6b:77:22:8e:07:
e2:96:62:f4:fb:04:4a:fa:f8:53:87:9f:0e:f7:a6:9f:6b:ef:
4b:da:94:d9:05:9e:7b:ad:0d:fc:54:d4:7a:ff:11:7b:4e:ef:
b8:9a:4b:da:86:01:3e:43:21:9e:49:96:70:a8:4a:eb:21:31:
5f:7f:b3:dd:da:bd:26:8a:2b:49:de:e8:3b:ed:d5:a8:2b:46:
99:84:b4:5b:e0:12:18:2f:29:ff:6a:a1:a4:b5:a7:ca:4b:a8:
74:1f:dd:65:61:92:d0:6d:b7:aa:3f:da:8c:e2:88:19:fd:9f:
01:89:b9:b3:aa:d1:b1:ae:53:fb:d4:a2:db:92:54:d7:20:ab:
89:42:17:24:40:2e:b0:2a:60:32:c7:e6:07:a4:a1:d3:e7:cd:
09:da:b0:65:a3:c5:7f:a5:84:e2:d7:5d:ec:f1:7c:36:69:71:
8a:f8:6c:12:b4:ee:47:f1:51:aa:f4:a9:5d:00:60:56:2b:85:
e3:60:80:fd
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYTIjblIpiSIxCLIcbCP38f1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxODE0Y2YyY2EzZTE3OTkzNDljY2Q0YzdlNmE3NmQ2M2Y4
MzRhM2QwHhcNMjIxMTMwMTI0MDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWRmZWQ1NGJhYmZjYjU2ZTNiZTQyYzMyZWY0Yzk1YTE5YzQyZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2akx1zDk2f1Z9Jf0YDLb+fw0dhqs
b3yRW73UZKU5zM5oBO5m75wLpthdD0UWDy4jTj6SiCdR7HM4YZEjnIZPpo+jxAW2
3scaLy+xbc6/CVfL4tSeNCo6jm+kOTS4TwI8Vfk3Wmok6mU8LHXmJJo705dIpzx0
1kiaj0qZfQXCysGfLHzQcPLPa++BjgudPQ/iQfUpYcm075EUxF9mhIYuil7fbNGu
55bgi5GxQxj7m1I25qsxQnLl7BvvLMPySAcGdqyzDOG17dH0ltRFIBo81tvTClL1
4zb9lIDcN9OKyLRASOBOtDo7Sv5qgFG6GepLfzmdjy4edRp2vJjyLslyMQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFHnf7VS6v8tW475Cwy70yVoZxC23MB8GA1UdIwQY
MBaAFCGBTPLKPheZNJzNTH5qdtY/g0o9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgt
MjI3MDFiNGJiNDA3LzEvZWRfdFZMcV95MWJqdmtMREx2VEpXaG5FTGJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMWY4NTMtZDQ0NS00YWNlLWE4ZDgtMjI3MDFiNGJiNDA3
LzEvSVlGTThzby1GNWswbk0xTWZtcDIxai1EU2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQCLVAEMAwD
BAMtkmgDBAAtkmoDBAJSdhwDBACNYkgDBAGNYkoDBADUAu8DBADV4e4wDQYJKoZI
hvcNAQELBQADggEBABPpSrOnSfppwx7olnBmOhbs/QwzHEl/uyUrTl9mMQzCrWSL
iu9AOPt7P8zgK1s5Sd2aous4Cq7NKA5N7RYZBjNx/4xrdyKOB+KWYvT7BEr6+FOH
nw73pp9r70valNkFnnutDfxU1Hr/EXtO77iaS9qGAT5DIZ5JlnCoSushMV9/s93a
vSaKK0ne6Dvt1agrRpmEtFvgEhgvKf9qoaS1p8pLqHQf3WVhktBtt6o/2oziiBn9
nwGJubOq0bGuU/vUotuSVNcgq4lCFyRALrAqYDLH5gekodPnzQnasGWjxX+lhOLX
XezxfDZpcYr4bBK07kfxUar0qV0AYFYrheNggP0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:50 2024 by rpki-client on console-fra.rpki-client.org