Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/DF1i6AaVMEM8hMb_KylQVQTPjgY.roa
File: DF1i6AaVMEM8hMb_KylQVQTPjgY.roa (raw, json)
Hash identifier: IrT/UBAe8v+1Mid8uUlr9Nm+OR47xAPVZ2Szns9y+sE=
Subject key identifier: 0C:5D:62:E8:06:95:30:43:3C:84:C6:FF:2B:29:50:55:04:CF:8E:06
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01847BF7220AF7DC5D2A74ED143EF76F9C7A
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/DF1i6AaVMEM8hMb_KylQVQTPjgY.roa
Signing time: Tue 15 Nov 2022 15:45:04 +0000
ROA not before: Tue 15 Nov 2022 15:45:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 193.161.245.0/24 maxlen: 24
45.142.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7b:f7:22:0a:f7:dc:5d:2a:74:ed:14:3e:f7:6f:9c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 15 15:45:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0c5d62e8069530433c84c6ff2b29505504cf8e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ea:08:51:a6:23:75:53:e9:36:87:dc:b2:ba:
8d:4c:a8:76:79:a5:d4:d7:0a:ed:a8:44:22:8e:77:
25:1a:43:de:7b:30:5e:67:34:1f:9b:b1:d3:76:fc:
62:63:ca:dc:b6:22:c0:76:c5:34:c3:0a:f4:eb:ca:
08:ab:29:28:32:38:4f:df:ca:95:fc:4e:69:89:78:
36:cf:20:c1:98:6a:a7:2a:2e:4e:04:7a:7a:6d:57:
f5:14:4d:76:2b:91:84:f6:a1:93:ba:ff:dc:54:23:
f1:46:bd:f1:14:03:a6:fc:6e:fa:ad:dd:58:38:3b:
43:d1:7c:c0:01:f1:b8:02:7f:50:c3:27:2d:f6:75:
87:e0:61:a8:62:c3:10:e3:4e:63:fa:94:30:35:63:
19:66:11:0f:b6:e8:42:2a:0e:1a:9c:b8:63:69:60:
fd:87:85:47:a1:52:f3:b4:cb:06:38:d1:c6:f6:1f:
63:8b:21:8f:54:7a:77:dd:20:5e:98:2f:e2:bc:e4:
81:6e:e6:66:a0:62:97:0c:c1:52:82:a0:85:fa:18:
f9:9f:1a:5c:c8:08:50:b9:8d:57:5e:0f:4f:68:61:
67:8e:89:7b:92:ab:d3:00:5f:ba:31:1c:08:06:20:
e0:aa:93:b9:26:46:01:9b:85:a5:19:16:76:f5:9b:
9a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5D:62:E8:06:95:30:43:3C:84:C6:FF:2B:29:50:55:04:CF:8E:06
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/DF1i6AaVMEM8hMb_KylQVQTPjgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.238.0/23
193.161.245.0/24
Signature Algorithm: sha256WithRSAEncryption
23:6a:5f:60:82:c1:f1:96:eb:e4:c5:18:a2:fa:f5:d1:1a:e6:
11:39:ef:65:e1:f7:a9:05:83:0b:40:f6:ea:77:69:e0:84:1e:
92:7d:23:cc:b6:d1:8e:bc:9c:61:57:a9:b5:54:04:58:61:63:
3e:c6:73:ff:4a:13:25:26:3c:99:b1:68:b2:31:00:74:1e:b6:
a8:a6:4d:5c:60:b3:0b:01:32:b8:d0:d2:85:df:da:90:12:f9:
eb:80:e3:7f:99:8b:9a:49:45:1e:85:01:6d:c6:fb:5e:00:ef:
0c:ce:18:ac:8e:05:b3:43:1b:c5:14:07:c1:d6:10:eb:59:d1:
2f:35:a6:7f:43:85:e1:f5:8a:61:93:90:f5:2f:4d:17:06:00:
43:69:82:0c:96:68:d3:47:35:7d:5b:b2:3e:69:60:42:72:74:
36:8c:ca:81:0f:7c:2e:9a:1f:b5:ab:3e:31:56:aa:60:6a:24:
f3:85:53:34:73:4b:5d:72:ca:95:c2:72:cf:85:ca:8f:67:87:
fe:d6:46:54:9f:3a:7b:fb:50:cc:ff:ab:1f:4c:3e:3c:39:70:
d9:73:4d:ab:c3:ad:0a:35:04:ff:96:62:3a:72:03:41:f6:ef:
f7:60:80:1f:bc:18:e4:7c:1e:b9:0d:3b:08:80:9d:53:68:31:
1a:59:85:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:45 2025 by rpki-client