Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/A1V3cHTrO0WZya8D5GRFQEYhCeA.roa
File: A1V3cHTrO0WZya8D5GRFQEYhCeA.roa (raw, json)
Hash identifier: 8QkpSI0Zfwxp9JZI0RYsQWBIS9E+S9EUdQZCqDfI2W0=
Subject key identifier: 03:55:77:70:74:EB:3B:45:99:C9:AF:03:E4:64:45:40:46:21:09:E0
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01823B64455F8304C4F4F03C85771571EC55
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/A1V3cHTrO0WZya8D5GRFQEYhCeA.roa
Signing time: Tue 26 Jul 2022 16:43:23 +0000
ROA not before: Tue 26 Jul 2022 16:43:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 193.111.116.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3b:64:45:5f:83:04:c4:f4:f0:3c:85:77:15:71:ec:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 26 16:43:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0355777074eb3b4599c9af03e4644540462109e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:3e:31:9f:9a:5f:b6:93:93:51:b5:dc:1e:
a3:90:cf:03:b9:09:2e:35:79:aa:83:6e:72:e3:bf:
d8:fe:3b:d5:12:5d:78:94:4e:3d:60:84:7b:ec:fe:
f5:26:40:b5:ca:be:05:71:dd:15:76:2c:b9:7f:9e:
36:17:bb:ed:77:7f:43:d8:fe:c7:1d:51:de:93:24:
37:34:72:da:ba:d3:bf:21:7a:f7:91:0a:f5:61:ef:
28:84:28:4d:da:c1:9f:d1:34:b3:98:f9:02:40:ef:
15:ac:69:fc:fc:6e:00:5c:ef:a5:07:b3:38:68:be:
1d:e1:b4:fa:c0:fe:41:0d:2e:ab:21:ab:70:18:c4:
ec:1d:ea:8b:6a:98:cc:bb:a1:11:fc:91:7d:02:ca:
fb:a4:31:83:e1:76:29:8d:b5:71:8f:ad:5a:40:04:
6d:3f:7a:32:ec:27:02:01:03:97:b2:aa:c1:83:cf:
d8:81:a7:71:61:b6:09:d2:b0:0e:42:7b:01:db:e1:
fa:22:1a:a2:58:72:71:79:00:c4:f3:76:e4:34:5b:
50:23:52:45:ee:ce:95:b0:8f:8a:f0:d0:68:21:a4:
16:81:ac:b5:54:eb:4e:52:f9:4a:1e:90:8d:05:45:
21:80:47:c4:a1:84:96:29:09:9e:b6:d5:bf:7f:fe:
72:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:55:77:70:74:EB:3B:45:99:C9:AF:03:E4:64:45:40:46:21:09:E0
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/A1V3cHTrO0WZya8D5GRFQEYhCeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.116.0/24
195.20.99.0/24
195.20.105.0/24
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
84:9d:6e:f8:8a:f1:44:9f:91:c8:05:6f:16:67:ae:32:0f:bd:
3b:cb:08:17:a5:c3:35:c4:b6:e0:27:8a:47:80:6b:4d:ac:2a:
1c:da:8b:65:66:86:64:d1:bf:1f:f0:da:fd:ec:3e:fe:52:c8:
11:c2:36:34:eb:49:69:b6:75:92:b8:8b:2a:ce:c5:b4:b6:a2:
0b:57:cf:35:72:d3:c9:e0:17:5a:0a:b9:fd:6a:45:f9:3a:44:
f2:f6:08:89:9a:fe:11:d1:f8:ee:5f:75:9b:5e:24:ed:4d:0a:
e4:85:61:24:d5:f8:92:73:10:d1:f0:b3:d1:95:4a:d0:b3:7f:
4e:6e:dd:d0:d8:0e:0e:93:34:cf:96:6c:5e:8d:f2:85:34:4e:
be:a2:7e:da:5d:65:7e:59:49:d3:81:cb:28:93:9e:68:46:73:
6b:c8:f9:81:92:9d:4c:c5:0e:52:fd:68:5b:60:4e:ac:d4:5b:
f3:95:cc:90:07:a5:29:91:b2:f5:a8:a6:58:d6:33:5e:e8:94:
66:f6:d3:4c:5c:4f:da:cc:5c:c4:0b:3e:9d:52:c6:1c:af:6f:
b3:9a:40:b9:79:ce:4e:a3:e7:30:f5:98:9b:6e:9b:88:65:25:
91:85:db:4f:09:35:b4:a4:d2:a6:f0:7c:0e:56:a0:ba:ed:0a:
1d:3b:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org