Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/D898nzQwYivpH1_EAqxOAwhRnDU.roa
File: D898nzQwYivpH1_EAqxOAwhRnDU.roa (raw, json)
Hash identifier: 1J628yMmaMRDdzCxnXQwq/zbRvkNn8zUCZnFktFwsv8=
Subject key identifier: 0F:CF:7C:9F:34:30:62:2B:E9:1F:5F:C4:02:AC:4E:03:08:51:9C:35
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184516AE40AAB1B7919255FFE1839335451
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/D898nzQwYivpH1_EAqxOAwhRnDU.roa
Signing time: Mon 07 Nov 2022 09:27:50 +0000
ROA not before: Mon 07 Nov 2022 09:27:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 45.152.240.0/23 maxlen: 24
195.206.234.0/24 maxlen: 24
193.142.22.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:51:6a:e4:0a:ab:1b:79:19:25:5f:fe:18:39:33:54:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 7 09:27:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0fcf7c9f3430622be91f5fc402ac4e0308519c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0c:87:83:09:5d:c9:9c:e7:c3:b9:83:b7:72:
01:43:e3:34:fa:e4:e1:e5:66:4a:34:7f:99:f6:dc:
6d:16:17:74:0b:69:91:d8:9f:9e:80:8d:37:67:9b:
45:ce:8f:94:f7:03:0a:b0:74:8c:61:2e:71:58:79:
b7:e9:83:9d:61:bb:ac:fd:f2:59:e2:fe:63:dc:86:
47:bc:54:53:7d:19:c8:8f:89:42:23:6d:8c:0e:21:
d3:d9:59:35:e5:5c:22:be:7b:52:07:a1:cf:03:c3:
d4:f8:82:c5:48:c4:9e:45:f7:0c:25:d3:f2:fb:55:
7b:a9:96:a8:3f:af:77:8e:1b:10:b6:21:ce:75:b6:
69:82:5f:ce:a0:6c:ea:79:a5:08:13:91:c1:f2:23:
ed:12:2b:97:56:e7:c7:87:94:c0:3e:60:49:f9:bd:
c8:bb:0b:21:09:c4:05:11:dd:6f:74:18:1a:1f:3f:
18:95:6a:1d:52:91:7a:86:b8:85:90:a8:20:5f:0b:
58:99:b4:b0:f0:a8:85:f4:5c:41:a9:59:c8:8a:62:
c7:ac:24:29:8f:34:76:c7:c7:46:67:bc:10:45:c1:
e2:a9:00:e1:1a:22:92:6e:a5:ee:79:e8:a5:99:6f:
b9:df:4c:81:51:ec:aa:6b:f4:94:6b:11:2e:12:1d:
73:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CF:7C:9F:34:30:62:2B:E9:1F:5F:C4:02:AC:4E:03:08:51:9C:35
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/D898nzQwYivpH1_EAqxOAwhRnDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
193.142.22.0/24
194.113.226.0/24
195.206.234.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d6:25:e8:11:7a:e4:a7:62:eb:66:c1:06:84:f2:1f:9b:86:
c4:32:74:c3:08:ed:df:3b:a9:cc:65:f8:9a:11:bf:22:de:ae:
88:28:ee:af:b3:2c:30:24:82:a3:14:ec:c0:68:91:05:5a:42:
59:66:5d:b3:24:fb:8a:f1:6f:9a:6c:a2:a1:dc:52:1c:0a:65:
4e:c2:63:bf:64:73:38:42:40:1e:5b:b2:24:a8:26:05:b6:47:
40:46:44:ca:b9:c6:76:0a:6c:7d:dd:31:36:f8:60:bc:84:9a:
a1:b0:02:ba:f4:90:c9:f6:c8:4a:14:99:d2:ab:24:16:2f:c1:
34:3f:0c:5d:ae:b4:f1:b1:9f:b7:d7:b3:c5:f1:a1:25:6b:c9:
7f:b3:63:0c:d7:db:dd:cc:88:1e:2f:58:03:da:84:a6:1c:03:
20:83:6f:d0:40:55:cf:7d:96:49:25:b7:e6:31:42:2c:42:98:
6d:4e:aa:97:4d:a2:a1:49:48:be:b4:28:8b:d9:56:e6:ea:83:
19:8a:5b:9a:24:3d:f3:7c:57:25:35:be:d3:d1:47:be:7a:c0:
ae:2f:ab:4e:3e:c1:18:5b:4d:f4:f6:3f:58:6d:98:df:6d:ea:
eb:13:ef:f2:fa:53:3e:21:d8:16:eb:52:2d:25:63:f9:62:b6:
bb:27:0f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org