Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/5oKakEqobfKZOyiKXZovQC_nbkM.roa
File: 5oKakEqobfKZOyiKXZovQC_nbkM.roa (raw, json)
Hash identifier: n0MQX5KoBokO1RdFD6ouzZeak3GhiOufojSY+iNwN5k=
Subject key identifier: E6:82:9A:90:4A:A8:6D:F2:99:3B:28:8A:5D:9A:2F:40:2F:E7:6E:43
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0472E6A5
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/5oKakEqobfKZOyiKXZovQC_nbkM.roa
Signing time: Fri 06 May 2022 11:01:04 +0000
ROA not before: Fri 06 May 2022 11:01:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
91.198.66.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.176.128.0/24 maxlen: 24
193.142.4.0/24 maxlen: 24
147.78.122.0/23 maxlen: 23
194.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74639013 (0x472e6a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: May 6 11:01:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6829a904aa86df2993b288a5d9a2f402fe76e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:61:b6:79:fd:be:e9:64:c7:cb:48:f0:cf:
51:93:74:e1:76:2e:88:f9:c5:ea:30:b3:87:d2:04:
e7:31:c5:d3:17:96:a6:39:e1:9d:df:1c:e3:81:ce:
17:ec:51:9c:70:8b:d9:a9:1e:42:e1:11:ac:90:d6:
78:f6:ff:a2:09:d2:ae:c9:0c:d3:57:d3:d8:41:46:
9a:e8:3c:b6:95:3d:32:f5:13:06:09:19:cb:12:71:
f8:19:e1:b6:c1:c6:3d:bb:03:ff:7a:9f:24:a4:be:
0f:06:7d:c5:b8:0f:d5:30:0a:bd:db:e6:4a:54:e0:
90:3d:5d:d1:8e:2f:ff:54:34:dc:a7:98:f5:54:59:
8c:b9:0c:14:4c:f4:31:52:a0:c8:8c:c6:0a:08:54:
dd:b5:9b:58:1d:d7:01:0f:d4:0c:a5:f6:8d:47:d0:
c7:0c:34:2e:49:e8:50:a8:ab:5c:35:1e:28:bb:6d:
a9:cb:4f:14:c9:3d:e3:37:45:47:2a:9d:ad:03:94:
e0:91:83:45:04:35:b6:cd:90:87:7f:1b:63:41:61:
82:df:0a:33:38:a0:21:e3:8a:d8:43:89:79:07:2e:
5e:f3:66:c0:aa:56:66:fd:9a:62:38:0e:1f:33:70:
12:fa:e6:fb:fb:12:7d:7c:3a:ee:04:6d:b8:b4:e0:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:82:9A:90:4A:A8:6D:F2:99:3B:28:8A:5D:9A:2F:40:2F:E7:6E:43
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/5oKakEqobfKZOyiKXZovQC_nbkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
91.198.66.0/24
147.78.122.0/23
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.113.226.0/24
Signature Algorithm: sha256WithRSAEncryption
22:99:40:02:86:26:b3:d4:7e:22:5a:39:89:59:72:aa:48:5d:
11:17:e8:dc:a2:6a:e8:07:dc:2c:d5:67:e1:2d:cd:05:8f:b9:
7b:a9:a4:e9:fd:49:f9:c5:89:45:aa:7c:34:fd:b9:64:3f:d4:
cd:16:f1:25:e4:38:dc:83:30:e9:e3:28:80:c3:a9:e2:f1:e0:
d8:ed:99:81:f8:e1:1e:83:7d:be:5f:bb:49:c5:b6:82:88:2f:
ac:e1:99:03:b2:36:13:62:e6:57:fa:f6:73:52:80:a2:5b:99:
e3:5a:f6:87:1a:47:50:5e:95:2f:13:ea:ea:3e:c8:c3:4b:b6:
56:38:db:88:f2:39:c5:85:3e:56:c1:fc:bd:91:f2:e7:fe:c9:
47:b4:e7:a6:07:83:76:3b:57:56:50:9a:2d:31:5a:45:72:d9:
78:98:b1:89:a4:7e:15:d7:1a:77:d4:fd:ba:f6:6f:95:0a:32:
14:c8:bd:93:f5:65:ba:e3:12:d6:4f:78:42:ba:8b:76:dc:bb:
a8:4e:62:29:72:49:28:9c:bb:d1:eb:90:29:30:6a:c4:54:18:
5e:21:b8:a3:cc:60:ea:78:80:94:c2:9f:98:fd:43:1e:1f:af:
84:d4:e7:6b:ea:01:12:35:79:05:e6:fb:1b:c8:40:27:bf:f7:
19:66:d1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org