Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/2Dtbc1POLVeWo5i82iGkzEr7B1E.roa
File: 2Dtbc1POLVeWo5i82iGkzEr7B1E.roa (raw, json)
Hash identifier: nf42YbCl8Kv+D6j/pVoV9UJiwD/8b1rYnKmaaUbPWKM=
Subject key identifier: D8:3B:5B:73:53:CE:2D:57:96:A3:98:BC:DA:21:A4:CC:4A:FB:07:51
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0185485A17AB48AF175A9BDF4B48BF69C9FC
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/2Dtbc1POLVeWo5i82iGkzEr7B1E.roa
Signing time: Sun 25 Dec 2022 08:15:41 +0000
ROA not before: Sun 25 Dec 2022 08:15:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.154.107.0/24 maxlen: 24
141.98.157.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:48:5a:17:ab:48:af:17:5a:9b:df:4b:48:bf:69:c9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 25 08:15:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d83b5b7353ce2d5796a398bcda21a4cc4afb0751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:94:16:2e:73:b7:25:ea:4b:29:47:33:81:bd:
1a:01:4e:85:df:62:43:60:ae:bb:7a:1b:6d:1e:f2:
82:3d:a8:c0:79:43:ab:89:af:fd:b6:52:14:5f:bb:
13:fd:9d:73:f2:0b:d0:e1:43:1d:7a:9a:56:ae:e7:
a9:73:7c:0d:d9:36:3b:89:ee:a0:5d:b9:30:2f:e4:
88:2e:ea:23:6e:d1:d6:3b:84:44:ea:ae:b2:f1:8b:
21:52:30:63:c1:f7:94:b1:f5:68:0c:68:15:e8:41:
fa:97:ff:dc:7e:89:c0:13:e1:56:3a:ff:d0:69:23:
fb:f3:19:4f:39:15:b8:4f:be:9e:ff:d0:b1:c5:a4:
dc:10:40:64:da:6a:79:e3:2b:50:39:26:1f:ef:ad:
66:53:40:43:71:30:11:30:d7:d9:e8:a6:7e:bc:aa:
35:24:3f:40:71:16:79:00:08:9b:18:a7:5a:50:84:
f7:ce:db:15:f4:9a:20:ef:5f:90:47:31:8a:1d:c8:
6b:71:37:b7:dc:5c:f3:d3:5f:7c:e7:7f:29:fb:b6:
ab:e3:ec:66:7f:08:a2:62:cd:af:42:83:d7:e5:90:
fb:dc:5f:d9:d7:b5:46:76:27:a3:99:56:2c:90:1a:
b7:14:13:de:80:b5:05:92:1e:76:d3:08:97:e3:53:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3B:5B:73:53:CE:2D:57:96:A3:98:BC:DA:21:A4:CC:4A:FB:07:51
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/2Dtbc1POLVeWo5i82iGkzEr7B1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.107.0/24
141.98.157.0/24
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:52:15:9c:4e:7f:59:55:be:51:6e:02:19:16:c6:16:e9:76:
20:c9:53:45:cb:1f:cf:f6:95:18:63:82:35:d0:17:53:69:39:
af:57:02:fe:f9:24:a7:d7:56:bd:ff:1f:e9:50:78:69:c5:15:
c4:ab:cc:fb:39:27:77:f6:53:c3:75:b7:12:41:10:9c:55:13:
e8:c8:bc:7a:8d:0f:5c:a9:a7:a1:95:bf:13:35:4b:5f:86:5f:
02:5b:5c:92:81:d5:33:02:b5:6f:33:ff:36:4e:d3:9e:1a:e6:
be:3f:97:ed:a6:0b:fc:63:a4:c1:f5:d9:73:1c:74:57:f0:c4:
65:b4:32:b3:fb:34:44:7e:1e:8a:8d:70:a3:69:1a:5e:2b:4f:
b2:3c:20:d3:52:45:2b:d9:11:62:e2:20:02:3e:f9:2a:12:3d:
27:ce:4d:e1:97:09:42:98:27:7e:ca:4a:e7:46:f5:e1:e9:2f:
29:13:1f:95:07:54:8d:7b:3c:8e:dc:39:b6:7f:2c:d4:4c:bf:
62:50:46:9f:cf:1d:47:c2:4c:f5:5c:ac:4e:fb:e1:36:10:a2:
27:81:fd:a2:9b:0f:de:e4:06:1b:0e:29:dc:a0:bb:4e:85:f1:
b7:fc:43:c8:8c:96:5d:da:c9:2a:55:ba:36:85:80:f7:6e:93:
b8:da:a3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:51 2024 by rpki-client on console-ams.rpki-client.org