Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9qDpTk-vofDMK1lxg5l7kb6_41o.roa
File: 9qDpTk-vofDMK1lxg5l7kb6_41o.roa (raw, json)
Hash identifier: nArLrKHQu9od9QseOTrFHNqo/IPgovAxFneRNFE+PKY=
Subject key identifier: F6:A0:E9:4E:4F:AF:A1:F0:CC:2B:59:71:83:99:7B:91:BE:BF:E3:5A
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183CC3B85AF18891B38B0AD0189C4FC2CD8
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9qDpTk-vofDMK1lxg5l7kb6_41o.roa
Signing time: Wed 12 Oct 2022 12:46:36 +0000
ROA not before: Wed 12 Oct 2022 12:46:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.176.54.0/24 maxlen: 24
193.176.55.0/24 maxlen: 24
45.154.104.0/23 maxlen: 24
45.154.106.0/23 maxlen: 24
91.199.168.0/24 maxlen: 24
141.98.156.0/23 maxlen: 24
147.78.122.0/23 maxlen: 24
147.78.120.0/23 maxlen: 24
45.149.186.0/23 maxlen: 24
45.149.184.0/23 maxlen: 24
45.158.10.0/23 maxlen: 24
45.158.8.0/23 maxlen: 24
45.153.4.0/23 maxlen: 23
195.206.230.0/24 maxlen: 24
195.206.231.0/24 maxlen: 24
176.105.224.0/23 maxlen: 24
195.206.234.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
195.206.235.0/24 maxlen: 24
45.142.236.0/23 maxlen: 24
45.142.238.0/23 maxlen: 24
193.111.116.0/24 maxlen: 24
193.111.117.0/24 maxlen: 24
45.158.170.0/23 maxlen: 24
45.158.168.0/23 maxlen: 24
193.151.182.0/23 maxlen: 24
193.151.180.0/23 maxlen: 24
195.20.98.0/24 maxlen: 24
194.104.156.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
194.105.21.0/24 maxlen: 24
152.89.248.0/23 maxlen: 24
152.89.250.0/23 maxlen: 24
193.29.96.0/23 maxlen: 24
193.29.98.0/23 maxlen: 24
194.147.4.0/23 maxlen: 24
194.147.6.0/23 maxlen: 24
194.5.146.0/23 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:cc:3b:85:af:18:89:1b:38:b0:ad:01:89:c4:fc:2c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 12 12:46:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6a0e94e4fafa1f0cc2b597183997b91bebfe35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:05:15:e0:55:52:16:bc:7b:88:d5:5e:38:
91:2f:a1:82:2e:f0:f8:0d:5a:59:8d:fc:5c:57:70:
47:23:15:3c:1c:ae:4b:73:bd:ee:80:1f:e6:19:ba:
b4:8a:f2:db:65:c7:00:42:64:78:8f:83:f2:d7:9a:
52:9b:20:51:ec:e1:27:ca:35:0c:5a:96:74:f8:06:
50:7a:67:af:9d:0e:77:75:31:30:79:c3:31:d0:49:
d7:f7:ff:36:1e:f1:52:5b:f5:1a:86:93:d6:0f:86:
3a:43:c5:a5:c0:0d:dd:8b:29:14:cb:9e:be:f5:eb:
48:b5:e0:cd:78:5a:27:b3:bc:d1:aa:27:3c:7f:a2:
de:d1:41:a2:ce:41:e1:a4:a0:fe:7b:d0:52:09:9e:
8f:bd:4b:42:79:4f:d0:c0:21:9d:27:e5:1c:5a:53:
ec:e5:66:13:90:2c:6e:ce:bd:88:67:37:92:77:5b:
01:c8:95:f4:c1:52:40:49:4c:15:e7:27:95:52:9f:
76:e6:14:c0:23:1d:ca:2c:08:b2:51:be:df:d5:32:
ea:62:61:12:15:b9:c5:cc:97:ca:ea:bd:9b:e1:d0:
c7:c4:e8:b6:4d:d5:e0:1e:fb:a8:a2:02:6f:5c:14:
8f:05:ca:3f:7a:fa:bd:47:bf:ef:66:0c:24:db:b1:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A0:E9:4E:4F:AF:A1:F0:CC:2B:59:71:83:99:7B:91:BE:BF:E3:5A
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9qDpTk-vofDMK1lxg5l7kb6_41o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/22
45.149.184.0/22
45.153.4.0/22
45.154.104.0/22
45.158.8.0/22
45.158.168.0/22
91.199.168.0/24
141.98.156.0/23
147.78.120.0/22
152.89.248.0/22
176.105.224.0/23
193.29.96.0/22
193.111.116.0/23
193.142.22.0/24
193.151.180.0/22
193.176.54.0/23
194.5.146.0/23
194.104.156.0/24
194.104.158.0/24
194.105.21.0/24
194.147.4.0/22
195.20.98.0/23
195.20.105.0/24
195.206.230.0/23
195.206.234.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:12:d3:52:a3:68:15:a5:84:ac:70:1e:80:1c:af:31:9d:40:
91:75:ba:13:c0:05:c6:29:cc:9f:29:86:60:6c:4c:26:5d:99:
fa:0e:bc:4f:2e:76:b4:95:24:d9:62:64:38:68:5b:1a:5c:f4:
5a:48:83:eb:97:4f:04:72:ea:af:5a:fa:b9:54:b2:ae:38:f5:
47:89:f2:6e:d9:89:1f:d6:01:89:b5:42:5d:6d:1c:91:d2:d4:
e0:84:b2:f5:c7:ac:79:55:5a:5b:bc:81:45:c5:73:29:92:b0:
4a:03:43:78:04:99:46:37:df:0d:d1:46:c5:b3:66:51:92:8b:
a1:a2:1f:3c:2d:c4:db:1d:e4:ea:72:31:5d:21:14:a6:f5:25:
f9:ec:a0:3c:1d:8d:2f:9e:da:57:42:73:16:bd:1b:a3:9e:61:
a5:f1:4e:61:d6:f2:35:cc:3d:fa:49:b2:3f:20:ff:4b:e8:8a:
d1:f8:69:7c:d0:12:fc:6e:42:a5:aa:1a:1d:8e:2a:2e:9b:1f:
cf:bf:e7:b6:21:35:a5:c7:e8:ef:b4:6d:b8:00:af:c9:db:be:
1d:8c:9d:5e:e4:ae:56:88:bf:e9:61:24:eb:e1:4a:8b:60:7c:
f1:d6:61:52:e8:0e:25:c6:39:cb:c4:fb:c8:a5:30:88:3a:96:
67:43:88:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org