Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1-4HjcA22M6wS4FWeK9EWgilS-iU.roa
File: 1-4HjcA22M6wS4FWeK9EWgilS-iU.roa (raw, json)
Hash identifier: ZJCdaIfI3yaWTrikEuBa0ybT69dphzlgpY5kqDrhWQY=
Subject key identifier: FB:81:E3:70:0D:B6:33:AC:12:E0:55:9E:2B:D1:16:82:29:52:FA:25
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 037AEEB9
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1-4HjcA22M6wS4FWeK9EWgilS-iU.roa
Signing time: Mon 07 Feb 2022 07:42:28 +0000
ROA not before: Mon 07 Feb 2022 07:42:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.146.80.0/23 maxlen: 23
45.146.82.0/23 maxlen: 23
152.89.248.0/22 maxlen: 22
193.29.96.0/22 maxlen: 22
141.98.156.0/22 maxlen: 22
194.5.146.0/23 maxlen: 23
194.5.148.0/23 maxlen: 23
193.142.4.0/24 maxlen: 24
176.105.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58388153 (0x37aeeb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Feb 7 07:42:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb81e3700db633ac12e0559e2bd116822952fa25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:8f:96:f9:ac:62:60:e2:f4:0d:a6:6a:fb:
ce:96:80:30:a6:4a:30:44:e9:1e:0c:fe:fe:b9:a7:
70:6e:8a:d2:3d:ab:6c:de:aa:45:72:26:f6:3a:b4:
d8:a8:a2:3c:f1:ef:4d:20:97:a9:a1:cd:eb:7f:96:
19:c5:86:38:33:0e:8d:c5:b9:7f:0d:51:87:34:fe:
4b:59:89:f5:6f:c5:ed:1f:89:bb:50:b0:58:d9:08:
7c:f7:a3:3f:b8:21:15:ef:e7:17:3a:11:8f:cc:d1:
60:15:49:f6:ae:58:06:5f:83:24:9c:58:20:74:49:
c0:32:28:ee:46:4a:48:02:b9:30:2e:a7:2e:d7:c0:
82:2e:16:d2:a0:26:1f:2d:b6:56:dd:95:5c:91:25:
0a:34:af:e9:85:8a:19:17:bf:61:39:2f:59:2a:81:
15:f2:a7:d8:97:cd:a8:f9:e6:ec:d4:55:4d:58:cb:
27:a0:88:87:2c:95:96:d9:9e:c4:ac:43:33:27:f9:
15:50:2f:b2:c1:a5:2e:08:ec:de:20:bc:eb:78:df:
14:45:87:89:60:d4:74:77:2c:7b:f0:46:16:61:d2:
77:85:7e:30:b0:4e:97:14:b8:ff:ef:68:74:22:50:
f3:ea:57:5c:b1:e2:11:02:c6:52:40:11:50:e2:a4:
a1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:81:E3:70:0D:B6:33:AC:12:E0:55:9E:2B:D1:16:82:29:52:FA:25
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1-4HjcA22M6wS4FWeK9EWgilS-iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/22
141.98.156.0/22
152.89.248.0/22
176.105.224.0/22
193.29.96.0/22
193.142.4.0/24
194.5.146.0-194.5.149.255
Signature Algorithm: sha256WithRSAEncryption
91:a9:02:79:a8:18:a3:6c:ae:df:aa:ea:b7:d8:e7:5a:af:03:
36:85:4b:a1:47:52:39:c0:3e:11:a0:d6:c5:58:b3:a8:71:09:
1c:a5:09:0a:4a:f9:41:46:1e:7d:77:0d:10:bf:8c:51:94:93:
63:89:4a:05:da:92:31:99:e1:92:f1:c4:02:73:dc:b0:d5:03:
54:5c:74:eb:d5:78:f4:38:31:26:0a:aa:df:4b:89:c2:bc:e7:
63:25:cf:9e:b1:33:11:87:8c:4c:b8:9e:fd:d8:18:11:7e:d6:
ac:93:da:11:a6:21:6c:30:85:93:8e:62:88:40:16:cc:dd:37:
06:cd:8c:67:5f:45:9f:a8:fe:5b:87:cd:2e:da:45:2f:05:51:
b9:a0:1e:5e:38:28:72:7f:0c:c1:d8:cb:b1:5a:20:5b:95:16:
51:66:b7:72:be:bc:a0:06:4c:c2:f9:4a:b6:11:37:cd:df:6c:
a7:89:1d:ea:2e:d2:6e:a4:dc:7c:a2:4b:50:4f:25:4b:be:47:
e7:de:de:45:80:d2:35:1e:c2:c6:99:78:d6:72:c4:bc:b4:3b:
00:68:36:30:d2:94:fb:ea:8f:22:5a:cd:9b:3b:91:8a:0c:55:
e8:a9:12:e4:64:6c:9a:04:7e:9e:a9:1c:a1:4b:dc:34:18:65:
ec:95:2c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org