Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/4U7Fl84WRut7OWZqnIeMY1w-lq8.roa
File: 4U7Fl84WRut7OWZqnIeMY1w-lq8.roa (raw, json)
Hash identifier: aaUZtW51CoqfMHXcTN4uSPDJC6oGAxlncH5KH9kja8E=
Subject key identifier: E1:4E:C5:97:CE:16:46:EB:7B:39:66:6A:9C:87:8C:63:5C:3E:96:AF
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183DA7B0197DB3D6D89A04D7975F4464F60
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/4U7Fl84WRut7OWZqnIeMY1w-lq8.roa
Signing time: Sat 15 Oct 2022 07:10:37 +0000
ROA not before: Sat 15 Oct 2022 07:10:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 147.78.121.0/24 maxlen: 24
195.20.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:da:7b:01:97:db:3d:6d:89:a0:4d:79:75:f4:46:4f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 15 07:10:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e14ec597ce1646eb7b39666a9c878c635c3e96af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6a:c8:76:a0:43:59:f3:1a:b2:68:97:f7:6a:
ea:3f:53:c8:43:e9:5d:5d:11:53:68:4d:e0:07:36:
84:6c:f7:12:17:85:20:a8:98:9a:42:18:e5:7a:51:
33:fd:9f:76:ee:92:27:40:8f:57:39:b9:23:89:41:
f4:b1:3c:ae:9e:03:c5:fa:b7:4c:32:9b:13:38:f2:
43:3d:3d:db:fa:4d:25:19:9f:62:b2:72:67:05:8e:
08:08:62:93:a8:4f:75:18:9d:9b:6d:94:ab:fa:7e:
34:f4:37:3d:41:0d:5d:ab:12:7c:54:42:45:4c:91:
a2:f4:82:71:45:44:8b:10:82:84:f1:c9:31:8d:77:
f8:16:18:1b:fb:e0:cd:46:0e:c1:2a:72:06:17:78:
4a:51:6f:f8:fe:12:79:94:3c:cc:1d:5b:2f:4c:c3:
e9:6c:d8:41:4d:99:9c:84:dd:89:e6:db:7d:7e:f7:
b4:29:f4:95:17:b4:23:fe:2f:e5:2a:22:a1:e5:f5:
c4:07:52:81:0d:5a:04:c0:89:36:a1:98:f1:a1:c7:
de:92:1c:4a:57:70:47:f2:06:75:06:aa:c2:cb:1b:
3f:74:98:92:75:0b:f0:ab:6d:8a:92:5a:dd:17:7b:
8c:bd:7b:60:49:a4:92:c3:c8:de:75:48:b0:f9:7a:
56:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4E:C5:97:CE:16:46:EB:7B:39:66:6A:9C:87:8C:63:5C:3E:96:AF
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/4U7Fl84WRut7OWZqnIeMY1w-lq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.121.0/24
195.20.104.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ce:00:41:9d:2c:6d:ab:a9:d5:9d:4a:87:54:3f:1a:7e:cd:
46:12:63:10:8b:6c:1e:53:57:43:18:0a:12:bc:26:a3:28:ec:
5d:31:b6:8f:ba:6a:da:ad:08:ad:dd:c9:72:95:ea:6c:cb:fb:
cf:12:a7:c8:48:9b:bd:88:8c:87:f2:46:db:38:8d:55:41:80:
0c:e7:0e:8a:3e:8d:0e:f2:d9:02:1f:f2:5b:49:5c:21:a2:bd:
43:3f:99:97:03:98:8b:e7:1e:8c:ac:b2:7a:f8:fe:fe:e6:33:
2c:04:7e:8b:a3:44:ef:f7:9b:94:ec:67:f8:14:f5:85:cf:62:
a4:3c:56:9c:9c:4c:63:27:31:59:57:c6:b4:b8:72:2d:ac:6d:
21:3e:1c:f0:f7:9e:82:28:46:58:2d:85:2e:e2:22:07:36:7a:
e0:0c:38:75:17:03:c0:b3:df:4e:4f:3d:b7:8d:ca:db:eb:72:
a8:20:47:15:52:d0:7f:0d:ec:61:9d:f5:52:35:de:18:5c:f4:
f8:3a:6e:d7:84:c6:5e:62:7c:7f:4d:26:fa:76:a6:5d:d7:99:
d2:0c:56:94:28:d1:19:44:56:94:69:98:61:c2:bd:f3:0b:0a:
a0:04:54:4f:95:d0:49:c3:e0:e8:5c:5a:4b:7f:08:12:db:55:
a6:a8:07:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org