Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/2Cx8Pt09aqX7vz51SKKR6h8VPA8.roa
File: 2Cx8Pt09aqX7vz51SKKR6h8VPA8.roa (raw, json)
Hash identifier: hAVdCAR8k7/01JTT6f1WA3f2/GJxNz3NbYbln3PU+iI=
Subject key identifier: D8:2C:7C:3E:DD:3D:6A:A5:FB:BF:3E:75:48:A2:91:EA:1F:15:3C:0F
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182F413ED13EDA853CDE5E8268F27DF89BC
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/2Cx8Pt09aqX7vz51SKKR6h8VPA8.roa
Signing time: Wed 31 Aug 2022 13:25:22 +0000
ROA not before: Wed 31 Aug 2022 13:25:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203232
IP address blocks: 194.5.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f4:13:ed:13:ed:a8:53:cd:e5:e8:26:8f:27:df:89:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Aug 31 13:25:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d82c7c3edd3d6aa5fbbf3e7548a291ea1f153c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:28:c8:82:dd:bf:df:b4:70:7b:5a:63:88:
96:e7:49:6b:03:21:fd:87:59:77:b3:fe:c5:4a:81:
58:56:65:60:31:f5:96:9f:c6:98:d4:58:48:a1:74:
30:72:67:ef:1d:0d:74:1b:39:ba:d8:a0:6a:f3:cd:
9f:ae:fc:6d:24:89:f2:8b:d9:00:0c:32:4d:81:74:
58:9c:31:de:6a:bb:d9:cf:1c:1f:d1:87:47:d5:6e:
17:e8:cc:dd:e7:a7:1b:df:01:6b:77:a8:a0:70:9f:
fc:7a:5a:51:64:f7:c8:df:be:70:34:60:5d:d3:36:
3a:61:a8:fc:9e:44:d0:7b:23:94:d3:ac:df:9e:fe:
81:d0:d4:1a:fc:6a:7c:93:cc:f8:89:8c:88:82:5a:
04:be:9b:3c:c7:56:aa:8a:89:ac:4b:a3:b0:4c:af:
59:13:a2:9f:3e:60:bd:c4:50:40:79:be:08:08:bc:
1c:b0:3c:40:46:81:02:6d:8e:9b:9b:b2:c0:42:45:
6a:de:8d:ea:44:61:63:f5:73:63:50:61:e7:46:21:
cb:4b:19:a3:4b:da:5b:c6:69:da:da:b6:ff:c2:a5:
e3:2e:d7:39:87:4a:5c:a9:98:f9:77:7d:e8:9d:4b:
db:17:65:27:f7:4c:25:06:f3:0a:73:ce:49:c9:e6:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2C:7C:3E:DD:3D:6A:A5:FB:BF:3E:75:48:A2:91:EA:1F:15:3C:0F
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/2Cx8Pt09aqX7vz51SKKR6h8VPA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.146.0/24
Signature Algorithm: sha256WithRSAEncryption
53:85:d7:cd:56:6e:9b:2b:dd:31:f3:00:78:fa:ae:fd:27:ba:
59:6c:ab:3a:eb:b8:c8:61:fa:89:3d:2a:43:e5:6d:dc:d2:61:
be:fa:b3:35:cd:29:a8:4a:41:89:27:02:ca:8b:b4:95:c6:75:
d0:82:6c:f5:4b:99:b8:7a:4d:f7:75:fc:4b:ca:d5:a7:61:f4:
07:76:ce:86:a3:f4:22:e5:95:4d:db:c0:0b:37:53:3b:ad:cc:
61:5a:99:ac:f4:e3:93:0f:ef:5d:55:e6:5c:2f:31:83:16:c1:
48:70:18:1e:8a:fc:82:90:a8:cb:52:f4:5f:64:96:0c:58:bb:
ed:bf:04:7e:50:b5:3c:a7:97:26:66:7c:c1:0b:97:56:d7:3c:
30:cc:2c:35:3f:9e:0f:1a:bb:e1:fc:13:e5:fd:5c:80:4f:e8:
77:82:fa:5f:ec:7f:30:fe:42:44:67:8b:64:56:81:a7:8d:80:
06:85:8f:4d:fe:15:8b:84:b9:04:bf:e9:91:05:bb:0e:b1:66:
89:86:37:4a:e2:af:fd:58:72:d8:43:90:e1:f8:77:9b:21:9a:
96:32:46:fd:2e:b3:39:b2:87:bd:79:bf:c5:e2:a2:e1:69:14:
79:e0:d9:6f:d0:e0:39:f5:d2:40:a9:d4:c6:61:62:02:a2:62:
f2:74:58:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org