Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/16RLG-u4fhVEFbUXxmFFd_QVnUY.roa
File: 16RLG-u4fhVEFbUXxmFFd_QVnUY.roa (raw, json)
Hash identifier: En2vo8rgg85hU0P1R5Jx+wKwCxFIPSwtf4xA6NO3hSA=
Subject key identifier: D7:A4:4B:1B:EB:B8:7E:15:44:15:B5:17:C6:61:45:77:F4:15:9D:46
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018276C11C26342FE082D9A66470C4B7F6A7
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/16RLG-u4fhVEFbUXxmFFd_QVnUY.roa
Signing time: Sun 07 Aug 2022 05:22:23 +0000
ROA not before: Sun 07 Aug 2022 05:22:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
194.104.156.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
194.105.21.0/24 maxlen: 24
192.166.83.0/24 maxlen: 24
193.176.128.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.142.4.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
45.158.10.0/23 maxlen: 24
45.158.8.0/24 maxlen: 24
45.158.8.0/23 maxlen: 23
192.166.114.0/24 maxlen: 24
195.206.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:76:c1:1c:26:34:2f:e0:82:d9:a6:64:70:c4:b7:f6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Aug 7 05:22:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7a44b1bebb87e154415b517c6614577f4159d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:d6:93:d0:9d:5d:d9:95:c5:41:14:c7:92:
6a:b2:81:64:38:1b:05:5b:c3:75:27:7e:7c:d5:e0:
8f:8c:22:c9:b9:c7:45:81:aa:a8:94:85:1b:1a:45:
74:93:cb:11:e7:30:6f:0c:f2:80:e5:d8:51:a4:87:
1d:ae:11:6c:a3:4b:2c:ef:5f:10:a1:51:85:3b:51:
5f:7f:c1:6c:7b:7d:a2:ae:6a:4a:c3:db:f0:6e:10:
fc:9e:e3:7e:0f:2a:e8:d9:6d:e8:d6:bd:b4:f6:1d:
3e:a8:54:a9:67:e0:cc:41:59:53:25:e3:40:7a:b5:
81:00:56:44:5e:8a:a8:ca:53:8f:e9:19:5a:9f:71:
6d:09:3a:56:2d:65:33:07:ff:da:b5:36:43:13:b1:
7b:a9:ff:2e:93:bf:6a:71:4d:21:04:ed:95:cd:68:
e4:d6:86:72:05:2e:fe:f5:11:d7:92:11:2c:11:09:
89:a5:21:87:95:13:36:b3:7b:16:42:83:65:21:f5:
7b:72:dc:41:4a:8e:65:ac:89:8b:d2:22:94:f3:73:
af:99:f7:55:f2:ad:f3:ee:45:44:2a:2b:a5:43:c0:
05:31:d4:c0:8a:a3:72:f8:e1:c4:20:30:53:24:4d:
3d:e5:49:ed:fd:5a:ed:da:52:de:3d:ba:8b:7c:28:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A4:4B:1B:EB:B8:7E:15:44:15:B5:17:C6:61:45:77:F4:15:9D:46
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/16RLG-u4fhVEFbUXxmFFd_QVnUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
45.158.8.0/22
147.78.122.0/23
192.166.83.0/24
192.166.114.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.5.148.0/23
194.104.156.0/24
194.105.21.0/24
194.113.226.0/24
195.206.230.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:7a:22:13:c2:6a:1d:39:64:b6:5f:05:92:d1:43:1c:7b:81:
1e:a0:19:69:3c:32:8b:bf:45:88:ab:af:71:89:97:6c:24:5b:
8e:40:80:8f:0b:5e:03:a9:60:30:47:6c:5f:2b:b1:76:9c:34:
f6:78:10:ae:25:33:9e:77:8d:68:39:7f:e0:83:ba:67:82:70:
5a:01:c0:a4:11:bd:d0:5b:50:23:6c:84:cf:9e:4d:fe:7c:e8:
e0:d2:ee:8b:17:f7:ee:57:ce:ff:8e:4a:af:37:e7:9e:16:d6:
48:c8:3f:bc:0f:49:19:b8:20:16:47:14:fd:52:2d:6f:2c:c0:
5b:4a:20:6f:1f:c2:4d:ef:80:66:52:0c:d3:58:ba:27:81:a7:
3d:c8:96:3b:56:b6:b6:8c:ba:bf:2d:4a:42:48:1b:b2:55:1b:
d6:9a:d4:6c:6c:d5:22:3a:fc:1f:c1:bf:28:17:52:3f:3e:39:
77:7d:ca:39:dc:76:1a:ee:b5:3e:5b:01:d0:47:08:79:e0:fe:
5c:9a:40:13:12:d2:6a:90:cf:86:ce:d7:db:7b:08:e2:f6:bf:
81:99:b9:a2:11:af:23:1b:3a:5b:2e:be:d6:db:76:f4:41:cf:
96:8a:19:46:87:f9:d1:fe:79:ef:32:7a:3b:41:db:2e:b9:91:
f1:5b:47:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org