Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6DUlZ0t0B8pk_UuxMG08LLsn3Uo.roa
File: 6DUlZ0t0B8pk_UuxMG08LLsn3Uo.roa (raw, json)
Hash identifier: Al1JCQnXc+z4u6On7IS6WDpBVyPVGCQrY6dcp5g9MsU=
Subject key identifier: E8:35:25:67:4B:74:07:CA:64:FD:4B:B1:30:6D:3C:2C:BB:27:DD:4A
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184E138042ADFEA8018471D77782FB38737
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6DUlZ0t0B8pk_UuxMG08LLsn3Uo.roa
Signing time: Mon 05 Dec 2022 07:37:35 +0000
ROA not before: Mon 05 Dec 2022 07:37:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 193.111.116.0/24 maxlen: 24
45.154.107.0/24 maxlen: 24
141.98.157.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e1:38:04:2a:df:ea:80:18:47:1d:77:78:2f:b3:87:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 5 07:37:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e83525674b7407ca64fd4bb1306d3c2cbb27dd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9d:1a:9f:90:4d:0e:5a:29:48:26:0f:c8:f3:
97:c0:74:75:a4:9f:85:c6:1f:99:79:89:54:5c:26:
02:98:0d:d4:4c:bc:ad:01:cc:82:50:dc:45:b8:e2:
1c:00:bb:b5:38:db:6b:4f:32:b1:a6:1d:43:5e:5f:
6e:24:01:a4:53:bb:62:94:6d:63:ba:73:38:4c:11:
d7:09:f2:de:60:16:00:ce:18:b2:e2:6c:8f:6f:17:
96:1d:5b:02:bc:4a:3f:c4:41:e7:3f:8a:fe:48:62:
97:35:eb:9a:c1:54:61:91:8d:d4:3f:39:39:00:6e:
8d:f4:bd:6d:80:66:21:50:c1:d0:95:be:b4:77:72:
31:b4:99:77:73:0f:db:51:96:1d:94:79:7a:56:1b:
d1:3d:ff:39:8a:17:29:2a:78:81:f9:6d:82:69:ba:
5f:3b:20:9b:fc:ed:28:32:ba:a4:bb:77:c0:77:4c:
e3:eb:a5:4b:23:b7:e6:9d:e5:e8:3f:42:47:b6:2b:
de:3f:25:a6:42:c0:77:6d:70:d3:99:2c:71:06:20:
67:56:a8:43:d5:ac:6a:15:4b:1d:a9:02:e2:ec:7d:
f8:bf:e3:a7:2f:17:73:cb:7a:ab:11:13:86:fc:82:
80:10:63:ea:5b:e6:43:e7:a5:b1:5b:5d:95:13:97:
9f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:35:25:67:4B:74:07:CA:64:FD:4B:B1:30:6D:3C:2C:BB:27:DD:4A
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6DUlZ0t0B8pk_UuxMG08LLsn3Uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.107.0/24
141.98.157.0/24
193.111.116.0/24
195.20.99.0/24
195.20.105.0/24
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2b:6e:b9:e7:25:3b:fb:46:40:72:65:54:fb:b9:5e:3e:05:
f2:80:6f:40:31:19:42:d6:a0:eb:82:f5:7b:48:ba:57:b3:bd:
ae:ab:8b:74:1e:4b:a4:71:7f:76:b1:c4:56:2c:77:01:66:d2:
72:5d:95:7d:68:5e:78:79:0d:f5:e3:64:7b:44:63:3d:7d:a5:
9a:be:d4:7f:a8:8a:bd:a3:9f:d1:bf:65:38:3a:92:5f:e0:c7:
00:5b:45:90:c8:d2:f0:f4:0d:5f:02:6c:d2:b2:ae:21:db:56:
81:c8:b3:f4:3b:e8:e5:28:a1:28:fe:fc:f1:e6:c4:f8:69:d9:
f4:44:67:09:1a:8d:15:9a:0b:64:79:85:ed:95:4a:07:89:5f:
df:83:e2:68:86:c1:71:d7:de:3d:34:0e:3b:63:c4:b0:70:06:
3e:a0:4f:db:91:21:a3:8e:c9:20:dc:fe:7b:5a:c8:9e:6a:b6:
e2:c0:34:02:4c:e3:fa:72:83:c8:15:16:65:ba:7a:1b:d0:37:
a4:ff:c3:dc:10:72:70:1c:f1:d1:0d:4c:f8:31:5b:77:42:79:
0e:1f:54:bc:d2:eb:85:38:db:fd:e0:a9:cf:3e:a0:75:66:4d:
16:ab:9a:7c:b7:d3:0d:45:52:e9:88:8d:82:dd:8f:28:03:47:
34:f7:e2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org