Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/AEZ7HMBSSoLgohmZ03EnRzd0zUk.roa
File: AEZ7HMBSSoLgohmZ03EnRzd0zUk.roa (raw, json)
Hash identifier: DckW8J/ActT9ukP8cv3/OK1jr1C4Cd29uGMlFe7FHhM=
Subject key identifier: 00:46:7B:1C:C0:52:4A:82:E0:A2:19:99:D3:71:27:47:37:74:CD:49
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184C2C463BE806899597B26DB7315273C7C
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/AEZ7HMBSSoLgohmZ03EnRzd0zUk.roa
Signing time: Tue 29 Nov 2022 09:42:41 +0000
ROA not before: Tue 29 Nov 2022 09:42:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 193.29.96.0/24 maxlen: 24
45.158.8.0/24 maxlen: 24
45.158.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:c4:63:be:80:68:99:59:7b:26:db:73:15:27:3c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 29 09:42:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00467b1cc0524a82e0a21999d37127473774cd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:52:55:09:73:a2:ef:7d:c2:92:97:00:d5:20:
5e:b7:cc:9d:91:8c:ee:90:40:6d:35:20:1e:eb:c7:
71:5d:ee:8a:f6:8f:5d:4f:66:52:35:de:2f:a0:61:
1a:aa:ea:66:bf:4d:82:c4:12:e1:86:97:d2:f7:bf:
67:91:ec:c4:ac:19:95:6e:28:0e:10:53:79:1b:e4:
8a:f1:a0:aa:ea:2a:6e:d6:48:9e:4d:5d:9f:b5:c0:
b2:06:f9:7b:00:36:1f:ad:c8:33:76:50:0e:07:a1:
21:d9:e7:5d:8f:32:bf:5e:f6:7f:5f:7f:02:24:2d:
98:e4:ef:de:6d:91:8d:6d:39:65:68:3b:93:d0:6a:
43:aa:d4:4c:6d:c8:d5:c6:bd:9e:fc:33:b1:2d:1a:
77:0e:d3:ed:80:59:fd:77:cc:76:e5:5e:95:da:d8:
8f:52:35:6d:7e:2b:23:4d:94:ae:5f:e7:15:9b:e2:
8f:59:33:c7:0d:5a:01:ad:ab:ea:f4:46:e9:84:32:
eb:db:44:a0:41:a9:de:b5:ce:30:8a:f2:ef:34:90:
95:e1:fe:99:22:ea:7a:03:f8:2a:15:cc:c1:b7:4e:
92:a3:63:13:a4:c3:2a:de:e7:3a:4a:df:14:8b:27:
1f:c0:7d:5e:7f:33:cc:3e:d3:60:f0:59:20:63:e8:
71:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:46:7B:1C:C0:52:4A:82:E0:A2:19:99:D3:71:27:47:37:74:CD:49
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/AEZ7HMBSSoLgohmZ03EnRzd0zUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.8.0/23
193.29.96.0/24
Signature Algorithm: sha256WithRSAEncryption
62:6e:1e:19:56:14:85:6b:0b:8d:96:48:5a:40:e3:8e:c1:67:
93:23:88:3a:68:51:e3:1f:f8:b6:39:34:8d:62:72:5a:d6:78:
c4:45:ca:dd:44:3f:db:14:49:ca:77:7c:91:65:b0:c6:06:36:
17:a7:c8:65:93:09:3e:d6:77:54:d2:b6:1b:de:fe:fe:22:ab:
93:f8:f3:5a:b5:68:e9:81:24:6b:f1:df:d2:6d:aa:2d:4c:1b:
af:35:24:44:c7:c6:e3:d5:e1:c2:f4:f7:c5:d9:c2:60:d4:03:
3b:56:2c:6b:b7:b9:2d:39:90:3d:9c:f2:2e:d9:32:bf:6d:ca:
ac:33:55:21:cd:96:d0:74:48:80:a4:82:07:7a:c2:9b:49:5b:
3d:0c:d5:53:3f:a2:55:fb:81:02:6c:c1:cf:b5:fa:12:1a:2e:
71:ca:79:bf:64:c3:3a:4b:5b:0a:e9:ef:b3:34:05:54:15:09:
4e:ef:82:c8:d9:bd:06:1d:55:ad:87:3a:33:75:77:5b:1c:b0:
6c:0e:61:92:33:0a:86:d2:6d:95:4a:e6:ed:5a:bc:95:0a:79:
b0:51:0a:f1:08:de:eb:e0:54:66:dd:b7:b4:99:43:c3:d0:61:
e9:08:e6:fa:39:95:9e:6e:2b:d6:0d:97:76:6c:b1:62:59:8a:
26:5e:03:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:48 2025 by rpki-client