Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6SwNVVse78YUBAXdyBPT1XYBX9U.roa
File: 6SwNVVse78YUBAXdyBPT1XYBX9U.roa (raw, json)
Hash identifier: 7a6na03IjsZ18E/R6ZszHD1/GcqxdOAlHe8E9POO93Y=
Subject key identifier: E9:2C:0D:55:5B:1E:EF:C6:14:04:05:DD:C8:13:D3:D5:76:01:5F:D5
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183E5AF92F6B47DB1F322B4C14BE81052E6
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6SwNVVse78YUBAXdyBPT1XYBX9U.roa
Signing time: Mon 17 Oct 2022 11:23:52 +0000
ROA not before: Mon 17 Oct 2022 11:23:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60602
IP address blocks: 45.146.82.0/23 maxlen: 24
45.154.104.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e5:af:92:f6:b4:7d:b1:f3:22:b4:c1:4b:e8:10:52:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 17 11:23:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e92c0d555b1eefc6140405ddc813d3d576015fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cb:89:4c:b7:c6:25:27:fd:9c:58:b2:9d:b0:
b2:e5:5a:19:61:65:ec:73:76:6b:17:69:64:86:db:
65:16:e7:b3:6e:d5:1b:94:0c:31:a4:a7:d8:76:b0:
88:55:6e:c0:36:9d:96:a1:92:dd:c9:2c:7c:f7:52:
4e:04:22:52:21:4b:29:28:de:57:ac:15:73:bd:13:
a5:f1:2b:1f:b6:4f:01:e0:09:96:8b:4d:2c:12:7c:
a8:c9:4c:6b:e8:91:95:1a:05:16:33:e3:e2:d1:4f:
de:5c:86:e7:b5:b4:be:7d:cb:92:8c:d6:e7:c8:9f:
b1:fb:ed:9c:b2:77:7a:18:bc:bd:79:8e:16:e1:76:
87:fc:12:8a:3c:03:4b:c6:88:64:0f:0c:6e:b5:0b:
db:f8:65:5e:23:70:36:6f:25:33:04:69:58:4c:86:
c5:75:73:f8:02:98:73:d6:fe:38:f4:a2:8d:ee:9f:
ca:82:85:8b:70:62:09:d6:63:8e:5a:9b:b7:c4:a1:
af:fb:79:2e:46:a1:d4:79:49:ea:04:95:85:6e:c0:
ee:a0:69:b5:43:4f:d4:80:71:01:6c:11:6f:2e:07:
09:6f:1d:af:3a:4b:a2:38:9e:4c:78:03:a8:43:a0:
93:d1:6f:ad:a6:4f:79:dc:6d:a5:1a:87:cf:1b:ab:
a5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2C:0D:55:5B:1E:EF:C6:14:04:05:DD:C8:13:D3:D5:76:01:5F:D5
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6SwNVVse78YUBAXdyBPT1XYBX9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.82.0/23
45.154.104.0/23
Signature Algorithm: sha256WithRSAEncryption
75:ec:ab:a0:bf:ea:b2:aa:c1:f6:ea:36:66:51:96:ea:fd:a9:
b6:23:20:ba:58:36:84:e7:81:42:cc:d4:a1:1e:8f:98:dd:29:
01:5c:77:e7:47:cc:06:a1:97:fc:f7:ec:37:b4:77:29:88:23:
d9:98:56:d8:8c:4c:75:67:6e:5e:8e:70:fb:30:97:7d:c9:db:
4c:6f:2f:91:85:ea:1c:d7:bf:ab:5d:21:05:5c:46:a0:db:1e:
b9:55:c0:e5:47:ec:91:70:bb:00:62:46:16:ae:14:e2:b8:83:
b0:56:9a:1d:d9:c3:f9:8b:ff:67:2f:11:29:cd:6b:5f:0e:0c:
8d:81:89:7e:cb:64:79:ea:fe:fb:23:91:96:1b:d3:8d:61:af:
7d:a9:33:40:5d:59:78:ab:13:e4:ad:7f:05:02:7e:8c:e6:f9:
ce:e4:37:65:9e:ed:af:f2:4c:20:70:ff:ec:d1:bc:35:7a:e5:
7b:a9:a6:6e:08:20:a4:55:e0:89:85:9b:2d:d0:04:26:97:ef:
98:80:62:1f:0a:50:d1:48:af:36:c8:a9:31:b7:3f:d5:49:17:
5a:ea:fe:d3:20:70:b4:0f:ab:7d:5a:a7:f5:65:97:1f:b7:b4:
c6:ee:0d:c2:6f:5f:a9:14:a5:f7:24:b3:52:e2:07:7d:27:07:
b5:94:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org