Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6ixbuX06oFKcNgz_O2Q33RCHZL8.roa
File: 6ixbuX06oFKcNgz_O2Q33RCHZL8.roa (raw, json)
Hash identifier: zZk2t3DUzMk+eebObN8lJ/Op36pNrWvboA3hD1myRUI=
Subject key identifier: EA:2C:5B:B9:7D:3A:A0:52:9C:36:0C:FF:3B:64:37:DD:10:87:64:BF
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01830D2A3B8DAE99BFD3E78D5A2017254CD4
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6ixbuX06oFKcNgz_O2Q33RCHZL8.roa
Signing time: Mon 05 Sep 2022 10:20:15 +0000
ROA not before: Mon 05 Sep 2022 10:20:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
194.104.156.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
45.149.186.0/23 maxlen: 24
194.105.21.0/24 maxlen: 24
192.166.82.0/24 maxlen: 24
192.166.83.0/24 maxlen: 24
193.176.128.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.142.4.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
45.158.10.0/23 maxlen: 24
45.158.8.0/24 maxlen: 24
45.158.8.0/23 maxlen: 23
192.166.114.0/24 maxlen: 24
195.206.230.0/24 maxlen: 24
45.153.4.0/24 maxlen: 24
45.153.4.0/23 maxlen: 24
45.153.6.0/23 maxlen: 24
45.153.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0d:2a:3b:8d:ae:99:bf:d3:e7:8d:5a:20:17:25:4c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 5 10:20:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea2c5bb97d3aa0529c360cff3b6437dd108764bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e5:d8:41:c2:5b:6b:e9:cd:6a:7f:ec:72:81:
fb:c8:c7:6a:43:39:ef:48:db:f3:bb:cf:dc:62:5c:
6e:f3:cb:49:ce:b4:09:d8:9e:b5:2a:dd:c5:a5:b4:
d6:58:7b:97:9a:eb:4b:a5:2b:1c:bc:47:05:01:82:
24:c4:52:36:e0:f0:4d:e4:81:97:6e:ee:ce:5a:45:
e4:7d:0c:6b:63:30:82:a9:04:d8:a7:79:a1:99:81:
2a:4a:ca:ba:41:26:1a:02:1d:af:39:c1:51:79:98:
29:49:3a:0d:e4:58:82:0b:b7:5d:9b:7a:94:a2:0a:
43:42:a7:68:64:99:4e:fc:8d:48:97:df:3c:c3:ed:
b1:4e:35:9d:dd:01:19:8f:cc:cb:1e:f0:88:87:e5:
57:60:2b:20:74:7b:c9:a4:0f:f4:f9:ef:0a:c4:4e:
a0:67:8b:f7:37:bb:d5:ca:76:d8:4f:02:b7:be:8f:
fe:52:b9:72:b6:c9:10:ff:52:d1:b4:9e:4c:cb:c9:
a4:25:4b:5b:d7:15:31:62:05:7d:30:da:03:08:c3:
54:6a:33:52:dc:f0:09:7c:b3:5d:9e:ab:63:2f:6d:
6c:dc:6f:9f:14:4f:19:b4:99:02:fc:ea:60:c7:dd:
d0:56:8d:91:9d:cb:ac:28:3c:62:df:f9:4b:65:19:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2C:5B:B9:7D:3A:A0:52:9C:36:0C:FF:3B:64:37:DD:10:87:64:BF
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/6ixbuX06oFKcNgz_O2Q33RCHZL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.186.0/23
45.152.240.0/23
45.153.4.0/22
45.158.8.0/22
147.78.122.0/23
192.166.82.0/23
192.166.114.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.5.148.0/23
194.104.156.0/24
194.105.21.0/24
194.113.226.0/24
195.206.230.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d2:39:c9:6e:49:b9:fa:e4:ee:4b:b3:58:81:d0:60:ae:6f:
93:42:e3:75:f7:29:13:8f:20:ab:7b:af:51:4e:58:0e:68:2a:
95:88:f4:b1:72:1b:51:8d:f7:91:2e:a0:a4:dd:ba:65:33:16:
cd:59:9c:f5:07:a3:7f:b7:fa:a2:36:14:62:d9:b5:e2:46:ee:
60:5b:cc:ae:d4:64:f5:47:a6:0a:0b:86:4e:49:70:d1:7f:8b:
b2:48:ca:19:aa:d8:c2:77:e2:93:1b:5a:22:1d:8d:e4:12:89:
88:56:07:1b:44:c7:13:10:74:29:c5:12:79:bf:f1:9e:0d:b4:
75:62:b6:bd:59:d2:8f:07:dd:4b:71:51:3f:a4:5b:d5:91:9c:
da:f1:66:80:6b:99:90:0c:44:7b:8d:b3:21:1a:75:fc:83:a4:
fc:f2:1a:e4:4e:a2:d4:a4:33:b3:cc:73:6a:b4:ca:7f:71:f4:
d8:b0:1d:5b:f9:50:e9:d5:ec:8d:a2:14:4f:21:fd:34:60:4b:
a5:bf:ee:6e:d5:7d:9b:1f:f7:a6:21:bd:78:34:6d:75:75:47:
d4:bd:7f:1d:2d:f7:c4:a5:14:fd:5e:dc:f3:82:5e:e5:c4:02:
fc:7e:11:b9:ae:db:1c:67:11:6a:16:97:3d:5f:eb:20:37:7d:
5c:38:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org