Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Bl1gWx2LZFE4vhGXXCfWX6Nbw78.roa
File: Bl1gWx2LZFE4vhGXXCfWX6Nbw78.roa (raw, json)
Hash identifier: 5KXa4aiWdVRgBTLzWXSSzWr8BO8EXQl6FM7nZQSh8Ig=
Subject key identifier: 06:5D:60:5B:1D:8B:64:51:38:BE:11:97:5C:27:D6:5F:A3:5B:C3:BF
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03805D9B
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Bl1gWx2LZFE4vhGXXCfWX6Nbw78.roa
Signing time: Tue 08 Feb 2022 12:11:08 +0000
ROA not before: Tue 08 Feb 2022 12:11:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64267
IP address blocks: 193.161.245.0/24 maxlen: 24
193.142.4.0/24 maxlen: 24
193.142.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58744219 (0x3805d9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Feb 8 12:11:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=065d605b1d8b645138be11975c27d65fa35bc3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6f:4e:f7:4f:27:d2:af:27:af:94:74:30:35:
36:ba:1f:a4:cf:e9:f1:f0:f6:86:ab:69:e9:63:77:
dd:4a:42:bf:73:37:d2:93:f4:a1:1f:b9:d9:bc:e9:
b1:df:0d:07:94:51:0b:fa:18:25:e9:89:e6:e9:4e:
4b:7c:0b:c2:5e:29:e7:ff:e7:71:95:d9:13:fb:d8:
a6:da:63:9f:00:49:cc:84:9c:f8:fa:d3:d4:91:d9:
85:5f:33:74:b2:82:29:e4:e2:70:3a:f5:4b:1a:b2:
07:ff:73:03:f8:f6:4f:00:da:f4:ec:ab:9e:78:c3:
13:f3:30:d6:19:f5:19:94:e4:d8:43:bf:86:73:95:
df:d0:a7:39:fd:c1:e2:8c:6b:e4:ee:15:6c:9a:bc:
f0:bf:f3:fc:e1:3c:02:c0:7e:c4:f0:be:3e:24:73:
75:bb:ca:02:68:72:5b:97:43:a4:8b:ed:b5:06:7c:
9a:da:0f:9a:0e:36:21:05:ad:72:7b:67:8f:9a:0f:
f5:42:53:ca:ee:6c:fb:41:de:ca:91:94:3b:ba:d4:
18:d8:71:03:7a:99:cf:d6:c7:94:e5:19:fc:5c:9b:
85:93:aa:de:4f:aa:ce:17:33:a6:cd:cb:30:97:3c:
e6:3c:c6:90:f9:4b:d9:40:30:13:68:22:0c:3c:b0:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5D:60:5B:1D:8B:64:51:38:BE:11:97:5C:27:D6:5F:A3:5B:C3:BF
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Bl1gWx2LZFE4vhGXXCfWX6Nbw78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.4.0/24
193.142.18.0/24
193.161.245.0/24
Signature Algorithm: sha256WithRSAEncryption
65:2b:34:b6:2f:fc:f1:7e:36:55:2b:38:b6:88:e3:b4:7b:7e:
37:4a:02:76:52:a2:99:c3:96:75:ab:48:b0:6c:3a:60:36:3c:
70:fa:ff:a3:04:d3:59:2e:c2:4b:d8:d1:5d:e9:2e:31:c8:17:
fc:4e:07:5c:f3:6d:9a:2a:b5:cd:62:a7:ec:e5:f4:e6:03:c0:
84:03:6c:df:ee:66:7f:79:0f:9d:e9:5f:56:47:a6:86:45:fa:
59:ad:31:da:47:ee:bc:95:f2:31:2c:62:1e:0c:47:fd:7c:36:
93:f5:0e:1c:1a:23:d1:cc:e3:f0:4d:fa:84:76:10:67:02:4f:
a7:88:f1:80:6a:5a:de:cf:5d:b7:d3:6f:fa:ed:6b:42:62:44:
ed:31:c3:19:94:3b:5c:8d:97:59:5d:2e:14:e0:68:fc:20:57:
a2:b4:a1:55:64:99:ef:62:ad:10:19:4f:89:a1:d0:82:44:59:
fa:f7:30:f7:5d:f6:f1:07:26:7d:d6:ad:c7:29:da:d7:f8:66:
5d:42:1d:4d:09:38:98:d2:81:91:d3:8c:29:6a:87:ab:26:29:
19:8a:64:67:43:05:2a:2b:ac:9f:4b:a7:6c:7d:38:69:8b:97:
fa:74:73:9e:0b:94:f6:cb:fe:a2:86:0e:75:67:40:af:b3:03:
8a:b5:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org