Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/56Yi1oy5QhfG2a5nIsEfmHAvrKE.roa
File: 56Yi1oy5QhfG2a5nIsEfmHAvrKE.roa (raw, json)
Hash identifier: dpp54inlv0f6SR0656G9zfUGcvT9fPorAfikTyGt44s=
Subject key identifier: E7:A6:22:D6:8C:B9:42:17:C6:D9:AE:67:22:C1:1F:98:70:2F:AC:A1
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01849EB5ACBC877DF86F6A36533EC5D2BD61
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/56Yi1oy5QhfG2a5nIsEfmHAvrKE.roa
Signing time: Tue 22 Nov 2022 09:40:17 +0000
ROA not before: Tue 22 Nov 2022 09:40:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
45.146.81.0/24 maxlen: 24
45.146.80.0/24 maxlen: 24
45.149.186.0/23 maxlen: 24
193.176.128.0/24 maxlen: 24
194.147.6.0/23 maxlen: 24
193.142.4.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
45.158.8.0/24 maxlen: 24
45.158.8.0/23 maxlen: 23
45.153.4.0/23 maxlen: 24
45.153.4.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
45.153.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:b5:ac:bc:87:7d:f8:6f:6a:36:53:3e:c5:d2:bd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 22 09:40:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e7a622d68cb94217c6d9ae6722c11f98702faca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f8:5b:57:8b:4e:2b:68:f7:f9:97:c7:91:59:
5d:01:6f:51:3a:14:71:00:b9:d1:4a:f0:45:d9:1d:
f4:cd:ae:3b:93:79:3b:68:38:2c:bc:c2:94:45:c7:
71:6f:09:f0:8e:f8:f0:9d:73:54:ba:ba:b0:31:8e:
6c:22:23:52:08:1d:93:85:fb:f8:a9:a8:55:0e:77:
68:21:9e:c7:88:32:a9:e1:e9:29:3b:e8:f6:3e:5a:
c6:c1:35:eb:97:21:a6:67:46:d9:80:27:46:c7:aa:
23:35:58:42:d1:60:51:57:67:21:90:b5:be:c6:07:
aa:11:00:f6:d9:6b:82:7e:ce:1c:7d:b2:e5:f9:2b:
ea:ad:be:94:a7:75:2a:9a:13:5c:5e:4f:70:97:22:
e5:31:a3:dd:e9:8f:e5:e9:7f:30:fd:ad:4a:8e:23:
9e:33:cb:4e:40:28:d3:50:26:21:bb:62:96:49:0d:
e3:fc:47:2c:2f:64:85:7a:b8:95:8c:c3:02:c7:37:
82:9f:8e:d4:cc:2d:ff:05:a6:ee:ca:13:50:08:0c:
09:c4:94:d9:5d:b8:7d:46:b5:dc:27:dc:d7:c9:89:
47:d2:69:22:32:5b:ee:cb:e7:f9:13:83:ef:43:03:
b4:80:de:59:f7:05:54:bd:8c:ed:4b:6b:da:38:3f:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A6:22:D6:8C:B9:42:17:C6:D9:AE:67:22:C1:1F:98:70:2F:AC:A1
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/56Yi1oy5QhfG2a5nIsEfmHAvrKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/23
45.149.186.0/23
45.153.4.0/22
45.158.8.0/23
147.78.122.0/23
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.5.148.0/23
194.147.6.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:d1:24:8a:f5:fa:10:65:3c:3d:d8:c1:e1:ba:ab:0b:01:d7:
8b:4a:47:9f:01:c3:cf:43:f2:1a:9e:62:28:4e:0c:d9:fe:54:
2e:bf:c3:ab:f0:b7:26:05:48:f6:44:ab:56:7a:a0:24:28:0f:
fd:ba:a9:97:c1:b1:33:30:9f:16:a1:9c:e0:70:f6:48:f0:89:
33:3a:dd:73:cc:c4:5c:58:de:be:86:25:d1:ed:6a:a6:dd:b9:
52:a7:67:c4:ed:4b:26:5e:86:22:11:5e:73:d4:f2:e8:24:c2:
3a:c9:03:a7:80:4c:fd:e6:70:92:96:46:da:01:6a:15:3d:57:
72:51:46:5e:22:dc:c0:39:d9:1c:4c:1c:ea:e2:d7:b6:2e:13:
26:e6:16:0f:cb:be:2e:5c:d3:ce:bb:91:d6:6c:71:13:7e:99:
f7:5e:0b:89:f1:5a:91:fe:5f:7a:40:2b:fd:ca:07:17:22:18:
17:7d:13:b1:3d:f2:dc:7c:9a:70:9f:37:3e:e5:28:9d:3e:fa:
be:e6:cd:24:3f:99:d8:c8:69:bb:9d:df:44:b3:ac:8a:07:43:
dd:0f:de:bf:86:f4:79:f0:39:ba:fa:cd:ab:2a:87:dc:fc:b7:
1d:65:4c:59:4f:95:1e:ae:4b:6f:93:c6:64:14:d6:24:00:1e:
69:be:54:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org