Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1jb_XaBAfvvuZHZChd84xnfKBD8.roa
File: 1jb_XaBAfvvuZHZChd84xnfKBD8.roa (raw, json)
Hash identifier: J40enJeqseWuiMJ0TDjgNdePYoyP2/IpspQf5z5RWz8=
Subject key identifier: D6:36:FF:5D:A0:40:7E:FB:EE:64:76:42:85:DF:38:C6:77:CA:04:3F
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0181FCCB9826FB5F942188B799631ABF09D8
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1jb_XaBAfvvuZHZChd84xnfKBD8.roa
Signing time: Thu 14 Jul 2022 13:00:10 +0000
ROA not before: Thu 14 Jul 2022 13:00:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.176.54.0/24 maxlen: 24
193.176.55.0/24 maxlen: 24
91.199.168.0/24 maxlen: 24
141.98.156.0/23 maxlen: 24
141.98.158.0/23 maxlen: 24
147.78.122.0/23 maxlen: 24
147.78.120.0/23 maxlen: 24
45.153.4.0/23 maxlen: 23
195.206.230.0/24 maxlen: 24
195.206.231.0/24 maxlen: 24
176.105.226.0/23 maxlen: 24
176.105.224.0/23 maxlen: 24
195.206.234.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
195.206.235.0/24 maxlen: 24
45.142.236.0/23 maxlen: 24
45.142.238.0/23 maxlen: 24
193.111.116.0/24 maxlen: 24
193.111.117.0/24 maxlen: 24
45.158.170.0/23 maxlen: 24
45.158.168.0/23 maxlen: 24
195.20.98.0/24 maxlen: 24
194.104.156.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
194.105.21.0/24 maxlen: 24
152.89.248.0/23 maxlen: 24
152.89.250.0/23 maxlen: 24
193.29.96.0/23 maxlen: 24
193.29.98.0/23 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:cb:98:26:fb:5f:94:21:88:b7:99:63:1a:bf:09:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 14 13:00:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d636ff5da0407efbee64764285df38c677ca043f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d4:85:04:a5:99:94:b4:14:21:58:66:63:b2:
5f:63:f1:af:c2:d1:cd:c7:fd:4c:7b:de:fe:4f:50:
b6:e9:9d:bd:48:e5:f1:a6:f9:d3:7e:a8:3d:91:7d:
e8:7b:e6:79:b7:b8:9f:28:24:30:1b:a6:62:24:6c:
ff:9e:71:5b:73:a7:5f:f7:41:65:03:44:22:58:49:
ac:a1:7e:6c:a5:f2:67:e6:07:d1:ff:fe:25:89:8c:
01:8e:1e:16:4f:56:6c:7c:3d:2d:52:94:26:4a:61:
bd:f6:e0:eb:0d:1b:b0:f4:92:88:a7:11:df:fe:de:
92:39:20:15:fe:e7:9c:ae:89:0b:ab:88:fb:52:14:
34:6e:f6:14:73:fc:9a:5f:93:9d:09:96:f6:bb:bf:
a6:ad:d3:ea:a9:02:a8:65:85:3f:16:51:1e:4d:6e:
c6:38:ed:ac:ac:67:fb:f6:b9:a1:af:9a:46:3e:33:
b5:b7:db:23:f6:a8:e4:64:0c:74:93:ba:be:6a:41:
bd:b0:b7:0b:bf:fe:eb:2a:b1:57:09:a8:73:55:cf:
3c:b5:a5:6e:2f:fe:c7:08:d8:6f:44:c8:2e:55:47:
67:54:9c:fa:49:af:64:28:b3:b1:82:8a:ec:9d:59:
c7:07:68:d9:15:bc:7d:4c:6b:42:fc:3a:84:b7:9d:
b1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:36:FF:5D:A0:40:7E:FB:EE:64:76:42:85:DF:38:C6:77:CA:04:3F
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/1jb_XaBAfvvuZHZChd84xnfKBD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/22
45.153.4.0/22
45.158.168.0/22
91.199.168.0/24
141.98.156.0/22
147.78.120.0/22
152.89.248.0/22
176.105.224.0/22
193.29.96.0/22
193.111.116.0/23
193.142.22.0/24
193.176.54.0/23
194.104.156.0/24
194.104.158.0/24
194.105.21.0/24
195.20.98.0/23
195.20.105.0/24
195.206.230.0/23
195.206.234.0/23
Signature Algorithm: sha256WithRSAEncryption
31:30:0c:66:57:c9:e0:c5:71:a1:de:73:5e:aa:ca:2b:9c:d1:
b8:4f:be:58:fe:57:85:54:d4:db:c6:7e:18:18:11:a7:5e:e0:
ca:73:f1:ca:8a:f4:0a:5b:a2:af:60:ec:e2:72:71:76:f2:71:
e7:80:4d:98:a6:7c:15:ef:ef:91:50:e5:7f:5c:29:33:52:7c:
e6:d8:07:18:b9:0c:90:8a:3c:db:2a:50:89:10:ea:41:37:06:
29:69:61:2d:7a:7d:3c:4f:24:e6:bf:31:b5:22:b2:f8:3b:22:
f8:b3:d5:f2:5d:9f:82:a1:28:d8:ce:7f:cf:8c:3c:b9:12:ec:
a0:77:45:8b:56:2c:54:36:e0:da:e6:6a:71:ed:63:2b:fa:70:
86:82:76:0d:0d:d5:8d:0b:ef:14:a0:8f:5f:83:09:c2:c9:89:
12:1e:01:3b:85:5c:3d:b3:8c:e8:9d:d6:6e:51:43:7e:52:22:
3d:9d:50:b5:8b:3d:ad:76:77:b7:a0:c0:ac:9e:0c:25:ae:62:
84:54:ae:06:f3:5e:3c:af:f0:37:3f:c9:59:ce:70:b4:a2:fe:
88:35:5b:a2:ba:a5:a5:33:73:dd:6d:26:01:5c:ee:de:06:6e:
aa:b9:f9:42:7d:3c:4c:e9:dc:d2:7f:c0:88:e6:0a:c9:1c:14:
95:3c:72:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org