Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/0kXv99ITTsZRI7oIAMXnsI5kf0w.roa
File: 0kXv99ITTsZRI7oIAMXnsI5kf0w.roa (raw, json)
Hash identifier: TYkk+Ea1xzFH1a6bcfFBiboMwjOJoIRWLPS6dJIg6z8=
Subject key identifier: D2:45:EF:F7:D2:13:4E:C6:51:23:BA:08:00:C5:E7:B0:8E:64:7F:4C
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01851B0C16A7C6481E1694BD2D8555BF714B
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/0kXv99ITTsZRI7oIAMXnsI5kf0w.roa
Signing time: Fri 16 Dec 2022 13:07:34 +0000
ROA not before: Fri 16 Dec 2022 13:07:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.176.54.0/24 maxlen: 24
193.176.55.0/24 maxlen: 24
45.154.104.0/23 maxlen: 24
91.199.168.0/24 maxlen: 24
141.98.156.0/23 maxlen: 24
147.78.120.0/23 maxlen: 24
45.149.186.0/23 maxlen: 24
45.158.8.0/23 maxlen: 24
195.206.230.0/24 maxlen: 24
195.206.231.0/24 maxlen: 24
176.105.224.0/23 maxlen: 24
195.206.234.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
45.142.236.0/23 maxlen: 24
45.142.238.0/23 maxlen: 24
193.111.117.0/24 maxlen: 24
45.158.170.0/23 maxlen: 24
45.158.168.0/23 maxlen: 24
193.151.182.0/23 maxlen: 24
193.151.180.0/23 maxlen: 24
195.20.98.0/24 maxlen: 24
194.104.156.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
194.105.21.0/24 maxlen: 24
152.89.250.0/23 maxlen: 24
193.29.96.0/23 maxlen: 24
193.29.98.0/23 maxlen: 24
194.147.4.0/23 maxlen: 24
194.147.6.0/23 maxlen: 24
194.5.146.0/23 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:0c:16:a7:c6:48:1e:16:94:bd:2d:85:55:bf:71:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 16 13:07:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d245eff7d2134ec65123ba0800c5e7b08e647f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:b2:2c:47:6f:70:49:b8:8c:9b:b4:fa:a1:
f9:16:d5:af:cf:cf:27:e8:3c:24:54:98:44:5a:6c:
f7:45:5f:38:d8:1d:21:27:cd:1d:9f:2a:8b:ea:ee:
99:f7:ed:ed:fb:9c:75:89:0e:1d:8c:13:3b:8b:16:
d6:03:50:25:6e:db:0b:5b:61:26:78:8a:88:18:86:
ab:27:c0:ea:a4:74:43:0e:de:f0:09:de:17:cc:9f:
58:09:2f:cc:52:2b:ec:02:07:8a:5c:05:e5:fb:ec:
da:cb:6b:0b:64:40:99:ef:f1:73:76:28:32:d9:1f:
9c:b9:b3:2d:80:2f:91:25:7b:54:48:e2:30:5e:18:
eb:65:86:54:69:41:8b:b2:35:05:56:35:b3:5f:a2:
c9:d5:35:3e:ff:2d:58:62:e2:70:e5:f0:66:16:98:
44:11:ba:90:6a:73:31:30:7e:d5:36:ab:72:41:79:
a3:0a:95:0f:0b:bb:17:9d:d2:bb:6b:94:4f:bd:1d:
bf:01:9a:43:a7:cf:bf:37:5b:87:8a:2b:30:d9:ad:
8c:e4:6d:62:b1:6a:3a:0a:b5:be:8d:59:0e:6e:f4:
8d:af:09:d4:be:b2:45:4c:b3:63:c1:5e:a6:53:05:
9d:4e:1d:b6:eb:fe:5b:bb:66:25:1b:36:2c:9f:51:
6a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:45:EF:F7:D2:13:4E:C6:51:23:BA:08:00:C5:E7:B0:8E:64:7F:4C
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/0kXv99ITTsZRI7oIAMXnsI5kf0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/22
45.149.186.0/23
45.153.6.0/23
45.154.104.0/23
45.158.8.0/23
45.158.168.0/22
91.199.168.0/24
141.98.156.0/23
147.78.120.0/23
152.89.250.0/23
176.105.224.0/23
193.29.96.0/22
193.111.117.0/24
193.142.22.0/24
193.151.180.0/22
193.176.54.0/23
194.5.146.0/23
194.104.156.0/24
194.105.21.0/24
194.147.4.0/22
195.20.98.0/23
195.20.105.0/24
195.206.230.0/23
195.206.234.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:d5:b6:e5:d5:41:7c:0f:9c:44:99:69:a0:f6:53:c4:f9:b7:
1c:a8:ff:38:ff:10:cc:a7:9b:1f:0a:79:e9:ec:07:85:b1:9a:
eb:bf:f7:d6:53:c6:39:42:8a:c0:05:53:6f:6b:f6:cf:72:12:
7b:07:79:3a:8c:57:a0:d9:8c:23:ae:79:0b:2c:02:79:cc:70:
47:77:eb:b3:a1:d8:b1:71:86:66:59:b9:e5:de:c5:53:f0:c5:
21:5f:b8:d2:fa:0d:c9:26:9e:8f:5e:ac:f6:17:e9:76:ae:81:
64:73:5c:f8:04:00:9c:3c:63:fa:af:8c:ef:08:b2:38:76:84:
4e:e9:5b:0e:f7:fc:29:d6:d5:5a:56:54:94:38:f7:61:57:7f:
0b:54:33:cb:46:59:0b:dc:e6:a7:72:f1:bc:b5:57:78:84:5f:
b9:fd:b7:47:44:89:23:6b:ac:30:33:bd:7b:e4:ba:a9:a4:3a:
d0:1d:26:2b:f7:65:8a:a1:0f:ea:b2:29:48:5b:77:0b:1e:cf:
13:b5:eb:0d:84:96:80:20:cf:88:bb:ea:cc:52:93:96:1d:1d:
28:fb:17:73:6c:d4:f1:f1:3e:0d:12:f6:33:69:d7:a6:ee:86:
22:32:77:9f:12:a0:1c:d7:31:9d:37:2b:a3:7e:63:32:cd:4a:
b4:04:4d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org