Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/2VqaaO8kMY_UaA7ksytvGecQAnY.roa
File: 2VqaaO8kMY_UaA7ksytvGecQAnY.roa (raw, json)
Hash identifier: k6mAntf5Oc4awVacpPWdzlqwuXDKNK9Uoe57oGBI1fk=
Subject key identifier: D9:5A:9A:68:EF:24:31:8F:D4:68:0E:E4:B3:2B:6F:19:E7:10:02:76
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 050F5E0B
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/2VqaaO8kMY_UaA7ksytvGecQAnY.roa
Signing time: Sat 02 Jul 2022 05:32:25 +0000
ROA not before: Sat 02 Jul 2022 05:32:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 45.152.240.0/23 maxlen: 24
193.142.22.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84893195 (0x50f5e0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 2 05:32:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d95a9a68ef24318fd4680ee4b32b6f19e7100276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:da:bf:c7:a7:94:8f:6e:c3:c3:bf:95:8e:
5e:e8:db:9b:22:c1:df:f3:f3:5b:1f:f0:9d:6a:1e:
18:b5:23:21:2f:13:48:de:c4:a3:f3:38:b7:b2:0d:
71:00:3b:da:fe:14:cd:0e:a4:85:39:4e:a8:cc:00:
4b:0c:25:d0:0d:37:99:84:13:27:eb:1c:3e:d6:8d:
f4:c0:1c:af:91:32:27:be:28:18:c2:cd:76:ad:97:
c3:3f:43:be:98:3a:ca:93:fd:fc:30:24:4c:b0:d2:
45:34:2e:3f:37:99:c9:f8:3c:0e:8c:a3:b4:15:92:
2a:5b:9b:49:cd:28:ae:c1:2f:38:d0:c2:6c:5d:b6:
4c:17:13:64:4a:df:b3:d7:d0:a5:39:81:28:9a:eb:
52:20:a5:ee:b7:09:c8:0c:86:89:b5:64:5d:81:af:
17:f6:29:cf:db:64:63:c9:e6:f8:44:49:de:eb:c1:
59:97:76:ab:2b:f9:be:a3:ae:c7:03:6b:0c:1d:05:
85:ec:43:ac:54:43:15:18:6e:a6:b2:d8:68:4d:27:
00:4d:1d:e8:7b:b3:fb:93:76:7e:f8:d8:08:92:5e:
4e:71:c7:48:86:5b:fd:25:24:dc:2e:81:ac:38:5c:
fc:80:9a:0a:5c:21:82:41:e6:c6:12:7d:34:fb:6f:
fd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5A:9A:68:EF:24:31:8F:D4:68:0E:E4:B3:2B:6F:19:E7:10:02:76
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/2VqaaO8kMY_UaA7ksytvGecQAnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
193.142.22.0/24
194.113.226.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f3:92:84:58:1f:64:a0:1e:6a:9c:90:27:84:7f:15:08:55:
42:ad:f6:ea:b9:2e:25:f4:44:99:c8:a3:92:d0:6d:d0:3c:b5:
0b:6a:5c:4d:b1:d4:09:c7:b5:dc:bd:f6:3f:85:5e:48:18:c6:
06:d9:b3:74:a4:68:3b:9b:9b:36:ea:7b:02:87:76:7b:f1:49:
6b:21:25:2c:b4:3d:04:52:60:ec:22:f2:e1:4e:c5:a0:d4:98:
ce:d5:d9:44:12:98:82:53:8b:78:75:96:9b:8e:da:9e:1b:51:
e1:e3:f6:93:75:6e:23:3e:c9:bf:41:e0:cb:0d:2b:1d:0c:b4:
6b:c7:a1:f1:70:1e:98:83:63:b1:c4:60:40:fb:39:1a:cf:4e:
5e:19:3e:32:a8:0f:87:88:b7:35:99:d1:62:e2:c9:06:29:1c:
8f:66:b9:22:4d:55:30:08:0e:77:33:10:b2:dd:0d:72:f4:bb:
c3:b9:be:91:a8:41:02:19:ef:36:46:d3:44:59:13:bc:2a:71:
ac:42:e9:2d:04:a0:70:dd:10:e6:8b:b3:04:d6:d8:67:b4:bd:
4e:d5:cc:f0:e3:c2:b1:4c:7b:78:3f:8d:d7:89:42:c3:e4:cf:
1c:43:ce:b0:67:86:1b:73:54:b9:0d:d4:d9:b2:a9:03:3c:68:
df:cc:51:92
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEBQ9eCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDcw
MjA1MzIyNVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDk1YTlhNjhlZjI0
MzE4ZmQ0NjgwZWU0YjMyYjZmMTllNzEwMDI3NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALC+2r/Hp5SPbsPDv5WOXujbmyLB3/PzWx/wnWoeGLUjIS8T
SN7Eo/M4t7INcQA72v4UzQ6khTlOqMwASwwl0A03mYQTJ+scPtaN9MAcr5EyJ74o
GMLNdq2Xwz9Dvpg6ypP9/DAkTLDSRTQuPzeZyfg8DoyjtBWSKlubSc0orsEvONDC
bF22TBcTZErfs9fQpTmBKJrrUiCl7rcJyAyGibVkXYGvF/Ypz9tkY8nm+ERJ3uvB
WZd2qyv5vqOuxwNrDB0FhexDrFRDFRhuprLYaE0nAE0d6Huz+5N2fvjYCJJeTnHH
SIZb/SUk3C6BrDhc/ICaClwhgkHmxhJ9NPtv/cMCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBTZWppo7yQxj9RoDuSzK28Z5xACdjAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
LzJWcWFhTzhrTVlfVWFBN2tzeXR2R2VjUUFuWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAS2Y8AMEAMGOFgMEAMJx4jANBgkq
hkiG9w0BAQsFAAOCAQEAifOShFgfZKAeapyQJ4R/FQhVQq326rkuJfREmcijktBt
0Dy1C2pcTbHUCce13L32P4VeSBjGBtmzdKRoO5ubNup7Aod2e/FJayElLLQ9BFJg
7CLy4U7FoNSYztXZRBKYglOLeHWWm47anhtR4eP2k3VuIz7Jv0Hgyw0rHQy0a8eh
8XAemINjscRgQPs5Gs9OXhk+MqgPh4i3NZnRYuLJBikcj2a5Ik1VMAgOdzMQst0N
cvS7w7m+kahBAhnvNkbTRFkTvCpxrELpLQSgcN0Q5ouzBNbYZ7S9TtXM8OPCsUx7
eD+N14lCw+TPHEPOsGeGG3NUuQ3U2bKpAzxo38xRkg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:05 2025 by rpki-client