Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9sAIWH3zsxyrtQ-nvjeu-aLBJm8.roa
File: 9sAIWH3zsxyrtQ-nvjeu-aLBJm8.roa (raw, json)
Hash identifier: N4QoJHbrFjWfNBh9jI09preMkRiVG9HMqIXDQX+Ea78=
Subject key identifier: F6:C0:08:58:7D:F3:B3:1C:AB:B5:0F:A7:BE:37:AE:F9:A2:C1:26:6F
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182B26369E91031812804DC41A6C3E30105
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9sAIWH3zsxyrtQ-nvjeu-aLBJm8.roa
Signing time: Thu 18 Aug 2022 19:17:15 +0000
ROA not before: Thu 18 Aug 2022 19:17:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
194.104.156.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
194.105.21.0/24 maxlen: 24
192.166.82.0/24 maxlen: 24
192.166.83.0/24 maxlen: 24
193.176.128.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.142.4.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
45.158.10.0/23 maxlen: 24
45.158.8.0/24 maxlen: 24
45.158.8.0/23 maxlen: 23
192.166.114.0/24 maxlen: 24
195.206.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b2:63:69:e9:10:31:81:28:04:dc:41:a6:c3:e3:01:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Aug 18 19:17:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f6c008587df3b31cabb50fa7be37aef9a2c1266f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7c:15:1c:84:17:e7:27:51:c2:10:0a:32:7a:
52:62:88:09:61:cc:24:79:43:8d:df:f4:d6:de:a7:
17:4e:29:75:97:9b:aa:4b:19:4c:fe:98:e8:db:d4:
5b:0d:9e:08:3f:c2:f9:a2:96:26:4c:0a:35:c6:e2:
fb:b5:bc:1e:dd:87:c4:62:68:16:2f:50:fe:b2:6d:
53:0b:06:26:57:e8:3e:2f:d7:52:a7:a4:e5:08:59:
bb:08:43:ef:be:c8:18:2b:21:9d:88:54:0e:ac:20:
5e:92:ef:27:a8:c4:dd:28:2c:08:c5:2f:25:69:3e:
8e:aa:47:56:30:be:d2:60:2c:e9:ee:26:fe:c0:12:
ed:e6:98:35:64:20:c1:13:5f:b1:8e:e7:99:8a:b6:
3e:e8:3d:67:1d:3c:00:6c:1e:a1:6b:90:2d:0f:ba:
c2:82:87:60:90:54:75:64:f6:8b:89:c1:58:8c:74:
dd:d1:19:66:84:40:c0:dc:b8:e2:01:f5:8d:ad:03:
d2:31:cf:f4:52:cd:ce:8e:29:b9:b1:38:74:7e:66:
c8:39:4e:68:98:f1:21:52:e1:02:7f:4e:d8:b4:86:
c1:18:ae:53:8b:2e:03:0c:8f:46:a8:dd:77:4a:4e:
30:d0:5d:db:53:3c:14:53:ba:06:51:3c:23:7b:72:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C0:08:58:7D:F3:B3:1C:AB:B5:0F:A7:BE:37:AE:F9:A2:C1:26:6F
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/9sAIWH3zsxyrtQ-nvjeu-aLBJm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
45.158.8.0/22
147.78.122.0/23
192.166.82.0/23
192.166.114.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.5.148.0/23
194.104.156.0/24
194.105.21.0/24
194.113.226.0/24
195.206.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9e:a1:96:8b:61:87:d8:47:18:58:51:e8:12:22:ff:c1:be:
ac:66:dd:00:69:ce:bd:52:0e:bb:99:c9:8e:bc:6e:3c:55:75:
dc:81:94:2a:e3:59:5c:9d:4d:29:bd:bf:35:e9:41:91:79:fd:
8b:ae:8f:a1:45:6d:97:b2:1e:60:6d:ec:e2:f2:7e:78:4c:5b:
5d:8e:a7:cc:7a:93:af:16:e5:ad:bf:4b:b6:a4:c2:bf:20:57:
2f:db:cd:05:ec:89:c4:4c:7f:e9:be:29:e1:38:16:cf:91:5b:
41:0d:2f:bd:87:85:09:c5:84:60:c1:22:b1:3b:3f:8e:be:02:
24:4a:11:ad:fa:59:91:aa:67:1e:d7:e8:c5:ca:ad:e8:08:33:
6f:f9:86:1e:e9:79:78:e0:fa:b4:5b:1f:29:03:d1:21:47:4d:
14:63:78:76:a5:bc:96:0f:74:89:74:46:db:d7:ff:69:5d:3d:
c5:09:11:fd:53:e9:d4:85:b3:0e:57:d4:d2:a4:f3:c2:35:90:
47:d4:ef:2c:ba:19:8c:8c:4d:60:0d:cc:3d:23:04:55:5f:9e:
82:ff:c2:a1:20:ed:21:fa:01:41:0b:2d:dd:7f:ea:f7:f1:90:
28:ab:11:76:db:98:1c:df:ec:7c:f7:4c:ad:e0:35:66:bc:41:
50:81:db:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org