Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/2ooGQ4TOJCmkBZEvzEH6_1N_wBA.roa
File: 2ooGQ4TOJCmkBZEvzEH6_1N_wBA.roa (raw, json)
Hash identifier: 7+VTe1Z7cN8NoxMKa/odrp4KKV6nBdYxH/dbYq2xw3Y=
Subject key identifier: DA:8A:06:43:84:CE:24:29:A4:05:91:2F:CC:41:FA:FF:53:7F:C0:10
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183FE3CABBDE377B2A3829E80F5208C1F05
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/2ooGQ4TOJCmkBZEvzEH6_1N_wBA.roa
Signing time: Sat 22 Oct 2022 05:48:52 +0000
ROA not before: Sat 22 Oct 2022 05:48:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397423
IP address blocks: 192.166.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fe:3c:ab:bd:e3:77:b2:a3:82:9e:80:f5:20:8c:1f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 22 05:48:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da8a064384ce2429a405912fcc41faff537fc010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:4a:77:0d:f0:8e:f8:44:6f:5b:3b:76:8c:
1b:70:40:ba:49:fc:a0:74:f6:fb:61:31:36:c4:53:
c3:3d:cd:67:3d:c9:4f:af:f4:1e:03:76:84:6d:73:
a5:d9:a0:a8:6d:cb:b5:8a:90:ff:50:7d:0b:27:4d:
8a:04:97:ab:36:9e:bc:8f:25:0d:8a:63:02:03:ca:
44:7d:86:68:70:fd:d2:a3:a9:8e:87:41:f8:2d:b8:
ee:e2:1b:34:8a:17:bb:d3:f6:0e:59:ef:48:e3:07:
1a:d6:49:bc:38:73:cf:57:a1:63:9e:bc:d8:5b:19:
ed:68:9a:9b:98:55:08:e2:59:d8:c5:5f:01:1a:d8:
f6:e2:23:3d:15:63:86:03:6e:0b:36:ac:b9:1b:d1:
23:ac:a4:94:40:c3:4d:4f:f4:c1:02:c6:e3:56:0e:
9d:14:3a:f8:ed:d2:79:5e:84:a4:bc:90:c2:31:b7:
45:81:c7:38:b9:0f:f2:e5:2b:c7:ce:fa:71:07:6a:
ee:2e:7b:e2:52:6c:a2:62:23:10:21:0a:ab:f5:95:
ef:22:10:3c:da:a0:3c:7a:af:37:a8:17:81:a1:fd:
98:47:a0:41:bc:ef:0d:ff:3e:a3:ae:3c:86:c8:9c:
48:67:e9:fd:71:1b:20:d9:d4:37:f2:fc:0f:a8:8d:
cc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:8A:06:43:84:CE:24:29:A4:05:91:2F:CC:41:FA:FF:53:7F:C0:10
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/2ooGQ4TOJCmkBZEvzEH6_1N_wBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.82.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:cf:4a:db:86:bc:03:de:f5:f7:9d:9b:3f:99:17:fb:fb:b2:
46:6f:22:fc:b7:f9:48:91:41:f4:ba:71:4c:9d:8e:d9:51:2b:
ff:a3:dc:82:57:9a:0e:3b:cd:10:67:a7:1e:bb:01:0a:f9:4c:
21:df:96:b7:f3:1a:85:84:ea:7b:4c:69:93:ba:86:8d:34:ab:
9a:4f:dd:29:65:ae:f2:d3:fa:0b:6a:88:d9:31:74:46:ce:bd:
bd:d2:9a:11:06:a9:09:e7:7d:8d:28:7b:35:75:78:e2:62:5d:
2d:53:2c:df:5e:20:96:4f:6b:43:19:e7:f7:7f:7b:7e:d6:40:
56:12:29:77:4c:99:3b:12:65:5d:63:e3:01:39:ff:89:ed:eb:
97:71:08:70:5a:14:a9:bb:e6:b6:63:32:b0:b0:04:15:33:e9:
12:6a:ee:2c:f0:d4:1f:b8:e2:0f:08:c9:8a:c5:8c:f7:ff:de:
1a:e3:6f:f2:34:5d:3f:a7:33:bb:d8:42:42:97:d6:52:4f:dd:
9d:60:dc:4e:95:2a:45:5d:f8:de:f8:c4:f1:c0:1d:5b:8a:4f:
68:8b:fc:c2:3d:a3:e0:06:f9:cd:2a:e4:2b:63:ff:0f:f9:a1:
18:df:51:9f:c3:33:e0:5a:12:3b:da:25:20:aa:02:ff:a4:c6:
93:7b:ec:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org