Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/0DlFsCb-HHU1_DmFih9lnMN2FIk.roa
File: 0DlFsCb-HHU1_DmFih9lnMN2FIk.roa (raw, json)
Hash identifier: fF6WSBFP+70KEln18kiafwipxwpw5hPTeetZYHH+kY0=
Subject key identifier: D0:39:45:B0:26:FE:1C:75:35:FC:39:85:8A:1F:65:9C:C3:76:14:89
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01853DF17F7EB319AD378FDCE9EA52528827
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/0DlFsCb-HHU1_DmFih9lnMN2FIk.roa
Signing time: Fri 23 Dec 2022 07:45:15 +0000
ROA not before: Fri 23 Dec 2022 07:45:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 45.146.83.0/24 maxlen: 24
45.154.106.0/24 maxlen: 24
193.151.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3d:f1:7f:7e:b3:19:ad:37:8f:dc:e9:ea:52:52:88:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 23 07:45:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d03945b026fe1c7535fc39858a1f659cc3761489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5c:dd:1c:fd:b4:10:33:89:75:c5:51:96:b7:
ee:d7:57:53:94:f4:54:c5:92:6c:c2:41:65:94:15:
fa:46:6c:42:9a:2f:5a:0f:1b:05:41:5e:25:fa:4c:
28:7b:6b:f7:80:d6:76:56:ed:9f:7b:6b:3e:a8:af:
03:3d:0f:5a:7e:5c:80:9f:5e:6e:51:ee:da:dd:2d:
cf:ae:b5:79:db:46:40:8f:e1:2e:ff:a8:d2:08:ec:
2e:59:90:5a:9c:07:f6:b1:44:2f:e2:ff:55:ce:bf:
c0:b3:f9:cf:1a:5e:d2:60:80:0e:07:d6:7a:04:c5:
73:55:0c:26:a9:d8:fe:f9:6d:31:fb:f8:90:93:ba:
d3:1f:35:d1:19:12:48:a9:af:99:01:c2:7e:af:20:
14:dd:af:92:9d:32:21:5b:19:c7:32:97:10:f7:b4:
10:3d:ee:cb:77:b4:5e:97:51:21:e1:4b:07:7f:99:
ee:98:59:14:9d:75:a1:54:63:7e:1b:69:96:76:2c:
fe:1e:bd:9d:ab:4c:08:65:01:17:bc:7b:e8:41:9d:
56:84:9c:f4:75:0f:99:06:69:9e:57:47:3b:33:6e:
87:85:37:05:7c:28:cc:ff:de:f7:df:49:62:18:a6:
2f:eb:f9:03:02:99:38:9a:8d:0b:21:3c:53:c1:27:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:39:45:B0:26:FE:1C:75:35:FC:39:85:8A:1F:65:9C:C3:76:14:89
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/0DlFsCb-HHU1_DmFih9lnMN2FIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.83.0/24
45.154.106.0/24
193.151.183.0/24
Signature Algorithm: sha256WithRSAEncryption
17:bc:5d:da:24:d7:a1:e1:9a:69:80:d5:f1:56:1e:c8:6c:7d:
d4:e1:01:ad:07:87:66:08:53:8c:51:18:7e:64:bc:e9:23:4c:
2e:ac:a0:13:2a:79:9d:ff:4a:17:7e:10:f6:71:33:23:30:d4:
4b:b9:2f:2c:a2:66:a4:74:9c:80:6a:2b:66:20:c5:59:38:f4:
7b:64:24:b0:4c:88:b0:01:7c:c3:2c:90:be:d9:13:33:2f:bc:
3d:e3:97:a7:3b:52:fd:44:15:a3:a5:e3:b9:93:45:f5:01:c7:
d4:1e:68:6a:03:e6:da:d4:e9:39:16:2e:59:13:87:02:88:36:
2d:92:a3:c5:34:8a:ac:63:af:b0:37:bd:e4:cf:1c:7a:02:ed:
a2:8d:e0:e5:1a:a3:64:6e:17:d2:39:18:b2:3a:d1:df:cd:06:
d6:a4:c6:c8:45:9d:6d:6a:e2:a1:4a:d9:33:80:7a:f2:39:b8:
11:36:f0:df:4e:ba:91:7b:a8:4a:4f:e8:31:8b:35:b5:d5:f2:
23:c6:57:8e:d9:d9:1d:7e:ae:14:53:1c:f7:9c:d6:e3:b6:f3:
1a:9f:50:41:0e:da:71:4f:65:f1:5c:ad:a9:6a:f6:7a:88:6e:
ed:db:42:25:d7:95:df:7b:63:82:72:b3:59:c3:ac:e7:25:7c:
5c:a2:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org