Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/5QMuzuuNUr4_gNxUkqRFy4taZH0.roa
File: 5QMuzuuNUr4_gNxUkqRFy4taZH0.roa (raw, json)
Hash identifier: TmihbrBl8nBaiJivAtWayD3Js/ibac6j1k4yCKf/SLg=
Subject key identifier: E5:03:2E:CE:EB:8D:52:BE:3F:80:DC:54:92:A4:45:CB:8B:5A:64:7D
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184CA31EFF575C2D272EE5267C0B7FB2C32
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/5QMuzuuNUr4_gNxUkqRFy4taZH0.roa
Signing time: Wed 30 Nov 2022 20:19:41 +0000
ROA not before: Wed 30 Nov 2022 20:19:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
45.146.81.0/24 maxlen: 24
45.146.80.0/24 maxlen: 24
45.149.186.0/23 maxlen: 24
193.176.128.0/24 maxlen: 24
194.147.6.0/23 maxlen: 24
193.142.4.0/24 maxlen: 24
194.5.148.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
45.158.8.0/24 maxlen: 24
45.158.8.0/23 maxlen: 23
45.153.6.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ca:31:ef:f5:75:c2:d2:72:ee:52:67:c0:b7:fb:2c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 30 20:19:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e5032eceeb8d52be3f80dc5492a445cb8b5a647d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ad:6a:2a:96:d8:76:ba:91:35:28:c1:cd:2f:
a2:c2:5d:82:de:b3:19:b5:bb:93:78:eb:49:4e:68:
b6:3f:15:c4:d5:e8:5e:35:90:67:51:89:44:b2:11:
bc:97:4e:d9:fb:19:a2:6b:20:4b:ab:77:f3:3b:a9:
e4:9d:9c:c9:18:49:76:6b:b2:f8:54:6c:46:29:a0:
67:cc:50:1f:7c:06:ba:82:83:8f:bb:5e:c2:43:d6:
cd:ef:d6:65:df:03:5c:b6:d9:55:67:fe:8c:8c:79:
b6:07:80:6c:b9:4c:d5:c7:3a:9c:a3:ce:fb:ca:00:
d7:e6:a4:c6:2d:a0:89:40:79:e0:84:1e:4b:a1:fa:
bc:0d:b8:fa:bf:86:73:75:d2:94:14:4b:c6:53:5c:
fb:3d:da:04:f0:17:d2:ff:a1:5f:27:76:63:75:04:
5d:26:82:fc:75:f2:3b:35:20:44:f2:8a:a2:99:1c:
d9:42:6b:c8:1c:ab:f1:09:d2:f4:8e:59:61:a7:6f:
32:cc:df:87:e4:de:1c:00:dc:4c:ef:73:11:a1:0e:
31:63:52:f1:c2:e0:e4:ad:f0:78:0c:72:6e:f3:25:
73:3e:b5:cd:7b:03:fd:bd:0e:0a:80:d8:d5:9d:02:
41:c7:e4:96:45:60:f7:9a:c9:77:ee:42:6b:17:c3:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:03:2E:CE:EB:8D:52:BE:3F:80:DC:54:92:A4:45:CB:8B:5A:64:7D
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/5QMuzuuNUr4_gNxUkqRFy4taZH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/23
45.149.186.0/23
45.153.6.0/23
45.158.8.0/23
147.78.122.0/23
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.5.148.0/23
194.147.6.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:ab:dd:27:14:54:3b:39:c4:40:92:7c:2e:db:f6:10:d1:ee:
11:d5:68:5a:7f:c6:4f:b0:92:ad:f6:76:51:97:e6:90:4a:6f:
25:38:7e:a1:a1:2b:13:93:bd:80:0e:2d:83:25:fb:6b:d6:49:
e5:d5:ca:7b:1e:97:ba:66:52:53:2b:ba:0d:50:eb:ca:13:89:
f0:c3:8f:d3:c0:a5:4a:db:e1:ae:09:ad:66:df:e7:9b:80:d6:
9c:cc:30:5d:f4:73:34:d6:d6:0d:62:0c:06:a2:15:36:6c:97:
1a:5a:8b:b3:ee:28:04:a3:0f:71:8c:dc:38:a9:e5:e4:70:a8:
da:d2:84:8a:72:d5:0f:26:dc:06:94:71:77:f0:3c:2c:87:8b:
db:86:53:76:cd:e7:2d:e3:b0:60:a5:05:98:44:5e:ca:74:ee:
0e:5a:fc:25:1d:5d:8c:8e:83:f3:cc:77:c1:53:f7:db:f2:fb:
6b:6c:c1:51:2c:3e:9a:01:39:fc:80:f4:89:98:be:c8:8f:83:
72:87:52:8e:53:ea:be:bd:32:bc:55:a7:25:ad:34:f1:f7:bd:
1f:35:3a:de:a0:2f:c1:b0:63:9e:b3:48:7c:91:cf:46:47:f2:
14:81:16:97:da:c1:99:30:f5:a0:d9:6f:be:ca:c5:b6:fc:c7:
33:c0:21:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:07 2025 by rpki-client