Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/3r4vUm6PD_hgFdRN3vcCBu5KqWA.roa
File: 3r4vUm6PD_hgFdRN3vcCBu5KqWA.roa (raw, json)
Hash identifier: 2Ob3c7QJb3SNbBPWpmj3jJEjWESt5AD5jgX5p/mbxk0=
Subject key identifier: DE:BE:2F:52:6E:8F:0F:F8:60:15:D4:4D:DE:F7:02:06:EE:4A:A9:60
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01849EB5ADB2361DDC1850CA2E6126039705
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/3r4vUm6PD_hgFdRN3vcCBu5KqWA.roa
Signing time: Tue 22 Nov 2022 09:40:17 +0000
ROA not before: Tue 22 Nov 2022 09:40:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 194.113.227.0/24 maxlen: 24
45.152.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:b5:ad:b2:36:1d:dc:18:50:ca:2e:61:26:03:97:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 22 09:40:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=debe2f526e8f0ff86015d44ddef70206ee4aa960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:6f:13:f5:68:b8:6b:7f:d8:70:db:9a:9f:
f1:b2:b7:07:d4:21:e3:97:bf:65:9b:30:fc:a1:cb:
d8:26:69:ac:4b:ba:0b:6d:7d:07:5e:c5:5c:49:86:
35:9f:e3:a3:4d:20:8d:74:e0:d8:be:5d:cc:ea:fd:
42:a4:8b:db:76:2d:86:60:2d:fb:b4:d2:0b:29:7c:
31:54:30:63:7e:ad:9c:6d:4a:6a:01:d9:ea:43:e6:
a5:42:af:81:34:98:b2:4d:b5:b5:8a:25:d3:bb:6c:
37:46:d4:f8:4d:d3:85:91:09:af:27:fd:25:31:d0:
a0:5d:db:4e:28:88:17:8f:1b:49:f4:cc:ad:17:c3:
bc:d3:3e:a2:ef:3b:c0:82:e5:5c:9e:8d:49:ec:6d:
ca:64:6c:38:f9:01:ea:2b:db:7f:91:c0:11:b4:78:
94:19:82:96:5d:ca:d2:38:d7:33:9f:02:0f:c3:dc:
47:e3:d2:a3:fd:a7:82:47:30:8e:7b:af:25:e6:2b:
1f:cd:34:8a:da:2b:a7:c5:26:8b:d1:5a:d1:86:31:
83:44:1e:8e:93:5a:58:c6:64:36:20:2f:27:bb:3c:
63:7b:0a:cc:fc:19:3a:2f:74:49:5c:0b:03:fc:a5:
77:13:45:51:59:fb:a4:bc:e3:8e:f7:bb:bf:40:2e:
a9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BE:2F:52:6E:8F:0F:F8:60:15:D4:4D:DE:F7:02:06:EE:4A:A9:60
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/3r4vUm6PD_hgFdRN3vcCBu5KqWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.242.0/23
194.113.227.0/24
Signature Algorithm: sha256WithRSAEncryption
42:36:89:c3:ca:d9:97:65:c7:34:64:67:39:30:dc:ea:fc:a9:
ef:37:ad:6d:40:15:48:a7:60:62:df:6a:1a:f4:e5:79:ce:fa:
42:53:69:b8:fe:10:09:be:3d:bc:de:3d:0a:61:17:35:30:68:
77:b4:f3:86:ac:83:fa:4e:65:8e:07:3c:d5:d8:a9:8f:40:f0:
c2:cb:f4:1f:e7:c1:cb:0a:c5:41:6c:51:b1:61:81:d6:fd:19:
f1:b5:85:40:9c:fe:2b:9b:30:20:de:3b:83:2c:6e:f6:02:01:
b8:db:35:f5:d3:2b:ec:2e:c6:b3:95:09:7d:11:3d:38:b7:08:
dd:1c:6a:b5:64:0b:89:51:85:74:87:03:93:45:76:c6:95:c2:
c6:0f:ed:a8:74:11:b0:55:fe:f1:e7:73:cf:41:9e:f7:62:32:
7a:9f:af:b3:ef:e3:c5:8e:3b:f1:5d:c3:08:33:c6:29:3e:75:
ca:ae:18:f2:0b:ba:cb:9b:05:7f:47:4c:d9:f5:f3:e6:ea:ea:
36:95:66:3c:42:ec:70:e3:33:fe:89:38:9c:3d:67:94:66:c0:
ed:78:4c:38:88:97:b9:34:f9:ff:2d:e2:88:01:4a:c1:6f:1f:
6b:02:76:12:d3:a3:38:69:fa:5b:78:c5:f4:39:62:32:fa:59:
4b:69:58:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org