Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/DCaH_maTfgkxXFZLNVLE7XbWQI8.roa
File: DCaH_maTfgkxXFZLNVLE7XbWQI8.roa (raw, json)
Hash identifier: cWMudPvhjeADe8aFhI5cXptrwobp8d5TiXq18V1PU0U=
Subject key identifier: 0C:26:87:FE:66:93:7E:09:31:5C:56:4B:35:52:C4:ED:76:D6:40:8F
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01826214C46711ED85EF8490816E7E1C2CE8
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/DCaH_maTfgkxXFZLNVLE7XbWQI8.roa
Signing time: Wed 03 Aug 2022 05:01:44 +0000
ROA not before: Wed 03 Aug 2022 05:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 193.161.245.0/24 maxlen: 24
91.206.2.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:14:c4:67:11:ed:85:ef:84:90:81:6e:7e:1c:2c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Aug 3 05:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c2687fe66937e09315c564b3552c4ed76d6408f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:1b:39:7b:48:9a:53:77:b7:cd:7c:6b:fa:
14:b6:5b:eb:0e:79:14:f6:26:b9:58:f7:25:44:9d:
fb:7b:52:61:56:f7:45:f8:55:9c:00:75:45:40:18:
b5:dc:74:62:76:77:84:9f:27:b4:52:bd:c2:87:39:
07:e0:97:12:b9:96:8a:bb:12:38:aa:64:a0:68:0b:
bb:4b:b3:66:ac:cc:f7:cd:fb:da:3c:46:13:e5:70:
9d:e5:a0:c2:86:3a:8d:1d:a1:94:d9:19:91:46:f1:
d6:82:72:26:4c:c9:d1:22:bb:1c:3e:24:d0:1f:31:
86:2a:db:2f:c5:e8:de:2e:40:e9:51:b0:fc:b6:bb:
db:37:11:45:6d:9c:51:57:3a:c9:e1:4e:3d:3f:60:
90:9b:9e:45:91:2d:6d:41:9b:81:f0:fc:92:9f:0a:
5e:29:64:cb:a6:aa:f9:9f:c1:fb:f3:90:50:ae:d1:
41:51:69:9e:ac:6a:60:15:71:da:c5:06:0b:93:00:
a1:82:13:93:6b:97:ba:1b:fe:45:70:b5:df:16:f8:
83:1c:3b:3d:b0:3b:95:d8:4a:c3:14:9b:b6:c1:d2:
d4:69:33:a3:58:56:c1:80:93:85:cb:71:78:60:82:
19:1b:8e:fd:a6:88:2e:b4:6c:91:8f:33:99:9f:17:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:26:87:FE:66:93:7E:09:31:5C:56:4B:35:52:C4:ED:76:D6:40:8F
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/DCaH_maTfgkxXFZLNVLE7XbWQI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.2.0/24
193.161.245.0/24
194.104.158.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:81:4a:3c:0b:9e:31:16:11:94:44:92:16:2f:54:ce:15:e3:
1d:7d:8c:2e:0e:e8:e8:7a:37:0c:a1:28:b4:68:5d:dc:63:19:
7f:5b:36:ae:78:df:f5:68:72:ac:3b:72:cb:b4:f8:fe:2d:b7:
7a:9b:3b:29:f8:6d:ac:e1:ee:89:91:10:29:13:87:ea:db:04:
c3:40:ff:89:2d:69:7e:04:62:97:64:d2:cc:80:70:fa:01:e0:
cf:9d:02:e9:35:db:3d:ac:be:d6:8a:e1:0c:7c:b6:6d:32:b6:
8d:0c:17:d5:f9:b3:c3:10:df:6b:ba:e0:49:37:48:ba:b9:16:
ef:0b:54:8a:ec:6b:82:b1:6b:6b:16:ca:51:34:82:3b:12:30:
92:5a:60:28:c9:9e:3a:a8:21:10:b5:01:89:cc:de:75:69:93:
51:4f:c4:48:49:fe:3b:62:19:9d:c5:38:d3:22:99:64:8e:51:
08:48:e4:b8:52:94:ab:99:5e:ae:26:32:b1:36:21:f1:bc:1e:
21:00:81:5a:b8:31:75:1c:8e:28:9e:88:7e:34:f4:6d:fd:67:
0a:f7:a8:0d:66:55:b6:39:27:4b:ae:ea:ec:cd:12:c0:6c:ac:
a3:44:66:4a:33:4b:35:b4:fd:56:33:ad:31:3f:37:c5:15:5f:
8d:da:d9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org