Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/C0R0JhQUe1fJVe_sCj0zdJ84toI.roa
File: C0R0JhQUe1fJVe_sCj0zdJ84toI.roa (raw, json)
Hash identifier: s584oubJ77QM/7hcGpv7yT6wycG7buUpbwQPK0z7ffk=
Subject key identifier: 0B:44:74:26:14:14:7B:57:C9:55:EF:EC:0A:3D:33:74:9F:38:B6:82
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183A6A3A53F263EFCDAFA6966D98D1453BD
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/C0R0JhQUe1fJVe_sCj0zdJ84toI.roa
Signing time: Wed 05 Oct 2022 05:34:45 +0000
ROA not before: Wed 05 Oct 2022 05:34:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 194.113.227.0/24 maxlen: 24
45.146.80.0/23 maxlen: 24
194.105.21.0/24 maxlen: 24
45.152.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a6:a3:a5:3f:26:3e:fc:da:fa:69:66:d9:8d:14:53:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 5 05:34:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b44742614147b57c955efec0a3d33749f38b682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:6c:27:b7:75:0e:c0:c3:51:be:50:4a:05:
0d:a9:89:e2:b3:ac:72:9b:a1:1f:e2:5c:03:c7:e2:
e6:cb:8f:e8:cf:fe:fb:0e:04:71:a3:5d:ac:49:7c:
2b:3c:5f:fe:ac:e5:d6:c8:8b:85:97:17:10:33:47:
c4:ab:c4:5e:fd:bc:01:c4:2b:cd:63:9d:a8:d7:80:
b9:0e:4e:2e:d8:7c:ab:0a:79:46:79:77:60:13:3a:
ef:18:04:f2:45:f3:54:dd:71:35:5a:a4:b1:87:3b:
17:a4:c3:c9:86:60:06:62:7e:24:92:c1:60:b0:8e:
df:87:1e:7b:f9:fc:0a:69:44:75:b2:11:bc:bc:70:
15:e4:f4:7a:0c:38:56:5a:50:41:23:6a:5e:2a:49:
d4:b8:5a:ce:e9:6b:1a:b5:31:ea:6c:e6:1b:a4:7b:
39:41:4e:f0:35:84:0d:dd:a1:a3:0c:66:5f:fb:25:
61:1b:66:ac:d1:cf:93:42:0c:9a:3f:78:c5:09:14:
87:f9:a6:fe:0c:5a:75:eb:09:30:e5:39:ff:16:72:
7a:ef:aa:eb:87:de:78:5e:18:fa:1d:71:fd:22:22:
4c:8f:55:2b:17:7a:98:ee:37:3c:d9:54:8a:be:7f:
9a:1f:0f:35:11:0b:9a:41:75:e9:0f:ff:10:10:3b:
16:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:44:74:26:14:14:7B:57:C9:55:EF:EC:0A:3D:33:74:9F:38:B6:82
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/C0R0JhQUe1fJVe_sCj0zdJ84toI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/23
45.152.242.0/23
194.105.21.0/24
194.113.227.0/24
Signature Algorithm: sha256WithRSAEncryption
19:08:ea:6d:44:2b:ab:f8:8d:36:6a:dc:e7:17:05:b7:74:ba:
58:37:81:bb:14:5e:9a:0e:74:91:91:59:28:1b:4f:82:a1:c8:
d1:92:ed:90:02:61:35:f6:bd:5a:5d:9d:f0:b1:e8:5b:ec:d9:
e0:28:21:bc:e2:43:fa:24:47:88:35:14:85:7c:5d:54:4d:76:
f3:93:2c:99:26:58:17:dd:2e:e4:f6:ad:12:82:3d:c7:cc:24:
4e:f7:39:0b:a7:16:2f:49:1a:a4:51:62:62:4f:b8:3b:23:c7:
22:58:68:76:a3:1b:ce:9a:7c:63:5f:24:04:65:97:31:7a:7e:
40:82:81:f0:a4:6a:13:54:ef:b2:60:44:06:ab:84:b7:33:05:
b4:d0:ec:c5:d4:6f:5e:dc:b1:36:7c:5e:f6:c5:69:b4:b0:d1:
a9:30:97:94:21:eb:b7:fc:42:24:42:cf:74:8b:63:33:f5:85:
7a:aa:ea:34:4d:c9:98:07:ea:7d:23:f6:61:57:33:71:5a:a3:
aa:56:47:ec:a9:4d:29:b2:16:57:b9:c5:3f:d2:2b:ae:b5:3e:
d8:dc:b3:25:c1:95:d0:b4:0a:79:26:69:99:e9:9e:0f:5c:2d:
56:18:8f:ca:a4:e5:64:8f:31:ed:77:ee:71:9f:5d:0f:80:07:
e0:4e:0b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org