Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/2kpHPvG6rZ__UTv3_q_J1HW4oEY.roa
File: 2kpHPvG6rZ__UTv3_q_J1HW4oEY.roa (raw, json)
Hash identifier: kHJ4v4IrCo/2VFMRPxuUcm+eN+iP2NQZ6c/WmliGyGE=
Subject key identifier: DA:4A:47:3E:F1:BA:AD:9F:FF:51:3B:F7:FE:AF:C9:D4:75:B8:A0:46
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184C4E4354EFCFE3CAB2B8B8FD0FE36114A
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/2kpHPvG6rZ__UTv3_q_J1HW4oEY.roa
Signing time: Tue 29 Nov 2022 19:36:41 +0000
ROA not before: Tue 29 Nov 2022 19:36:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 45.146.82.0/24 maxlen: 24
45.154.104.0/24 maxlen: 24
192.166.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c4:e4:35:4e:fc:fe:3c:ab:2b:8b:8f:d0:fe:36:11:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 29 19:36:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da4a473ef1baad9fff513bf7feafc9d475b8a046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:d1:35:4a:5c:b1:ae:fd:88:a3:d4:89:4d:
b3:a5:9f:d1:15:e9:89:60:81:57:fa:ef:01:96:a1:
cd:07:49:0f:4d:79:2b:c4:a3:fc:f6:20:9c:34:cc:
b1:0f:14:c4:51:bd:a2:35:13:5c:60:b1:89:31:d1:
0a:80:b4:28:47:d5:a3:9a:fa:93:78:8b:90:5e:d8:
a3:a3:63:31:53:db:c9:b0:d8:30:02:d0:e0:71:bd:
0d:4b:d8:4d:97:f9:13:db:60:74:b3:cf:9a:74:e8:
b0:00:9c:98:cd:51:c7:3b:4e:f3:68:06:59:b9:57:
7f:91:f9:8f:83:92:d1:cc:41:18:2d:41:8c:bd:bb:
88:7e:b7:7d:58:21:a5:80:ec:6a:e4:26:6d:31:80:
1d:a2:e7:b1:9b:de:fa:a9:12:59:5e:0e:91:ac:a1:
e8:33:12:13:b6:72:27:55:cd:44:c9:86:bd:4a:1b:
db:c8:3e:15:eb:05:ae:f4:79:1b:f0:d1:69:3c:d4:
24:23:73:37:7c:c2:e9:b2:0f:77:09:af:bb:3a:d7:
bd:de:f6:a5:e2:e9:42:34:4d:aa:25:4d:67:2b:b7:
c7:39:84:a8:6d:fa:fb:fd:74:01:78:d3:f9:a6:87:
7a:78:a5:b2:6d:96:1b:fc:1d:9c:35:e4:ae:e1:4f:
c0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4A:47:3E:F1:BA:AD:9F:FF:51:3B:F7:FE:AF:C9:D4:75:B8:A0:46
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/2kpHPvG6rZ__UTv3_q_J1HW4oEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.82.0/24
45.154.104.0/24
192.166.83.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:8c:d9:f0:5c:36:a5:d6:64:24:69:52:cb:37:62:7b:a2:17:
b6:97:24:c0:4e:e9:ca:6a:85:27:8f:e0:a3:be:91:94:ee:58:
7b:e3:06:f5:41:72:58:c7:e3:2e:59:99:69:fe:06:5f:59:4a:
9a:15:87:dd:8e:81:d4:1d:83:60:cc:51:49:b5:c1:45:54:71:
19:ee:a8:e9:2f:8f:f0:e5:fe:8d:31:94:c1:be:6e:20:7b:65:
32:a5:d5:0a:b2:c4:68:91:14:fa:ae:ac:6b:e4:fc:4e:5d:1f:
d8:c5:38:8f:3d:ed:8e:af:28:ce:57:44:34:6a:ed:3a:9b:fc:
6c:08:3e:7b:ce:a8:b8:05:a9:cc:43:7b:90:b7:b6:c7:36:43:
da:0e:a7:12:1c:68:db:2f:78:b0:b6:a2:75:3a:32:ee:1d:09:
b1:d9:53:d2:d9:ed:a7:29:a3:a0:1c:17:1a:eb:f2:f1:de:29:
65:96:95:c6:70:5d:b0:e4:b1:b7:b2:e8:91:43:2b:45:35:f6:
13:6e:68:62:44:c5:c0:12:9c:9f:db:cd:a2:ae:26:aa:97:8d:
76:8f:ba:fe:98:c6:7c:7b:e0:04:74:35:da:81:60:8a:95:1d:
10:2d:37:63:ed:c5:15:e0:06:5f:ac:c4:2d:85:b0:1c:b1:c1:
06:4c:ee:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org