Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/DkM-NRmVW3RtOScHS8YQ_iwmBNc.roa
File: DkM-NRmVW3RtOScHS8YQ_iwmBNc.roa (raw, json)
Hash identifier: 94W9oMVW3O3Y8wu86+/uxXtkq6tYuwfztoPf9HNe3e4=
Subject key identifier: 0E:43:3E:35:19:95:5B:74:6D:39:27:07:4B:C6:10:FE:2C:26:04:D7
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184ECA66D52BE2E8B1D0DC18384C7ADE70D
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/DkM-NRmVW3RtOScHS8YQ_iwmBNc.roa
Signing time: Wed 07 Dec 2022 12:54:00 +0000
ROA not before: Wed 07 Dec 2022 12:54:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1299
IP address blocks: 193.111.116.0/24 maxlen: 24
45.152.242.0/23 maxlen: 23
193.142.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:a6:6d:52:be:2e:8b:1d:0d:c1:83:84:c7:ad:e7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 7 12:54:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0e433e3519955b746d3927074bc610fe2c2604d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bc:a2:24:17:2b:fa:6c:bd:2e:b3:e4:a2:ad:
62:3b:64:fd:ff:1e:9d:c4:f4:b2:a2:ea:2a:fa:1e:
75:3d:d6:61:52:26:a0:21:96:b2:22:0d:ff:71:56:
ae:db:13:89:ea:e0:0e:0d:cd:99:31:e7:0a:1e:8f:
ad:10:e7:c4:bf:ee:86:f9:6e:e4:71:f0:56:d1:c1:
54:7b:d9:ab:a9:bf:f5:a3:8d:86:5b:7a:5c:4d:ca:
9a:e8:1c:7d:20:79:38:3b:b1:5e:89:6b:3b:52:98:
e3:a7:dc:98:82:c9:9c:49:9d:f3:ef:20:14:3a:cf:
0b:3d:b8:c7:b4:6d:1d:c0:48:88:d2:f5:c8:e4:59:
ff:71:5e:77:90:f7:3d:8a:69:6f:23:6c:4a:2e:85:
bb:75:78:28:b2:b9:9f:18:d1:af:d1:5a:e3:e3:92:
d4:44:6d:a9:1f:24:56:1b:27:f8:ba:2a:a6:85:82:
f6:fe:0e:1e:a4:d3:8f:7c:b7:e2:c9:05:ba:98:2c:
23:a3:54:59:73:73:b6:dc:4e:e2:03:e9:7d:95:ac:
dc:51:85:dc:7a:03:26:7f:2b:c4:24:eb:ac:24:75:
f1:27:33:5b:d7:7f:9e:32:0b:09:5c:3b:ef:fd:4d:
a3:09:96:29:5e:2c:8d:23:34:85:e1:b7:7b:1c:e4:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:43:3E:35:19:95:5B:74:6D:39:27:07:4B:C6:10:FE:2C:26:04:D7
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/DkM-NRmVW3RtOScHS8YQ_iwmBNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.242.0/23
193.111.116.0/24
193.142.6.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0b:21:39:89:2b:4c:0c:5d:fe:f3:82:50:d8:a4:5a:15:36:
e2:58:b0:51:1a:8a:39:2c:30:6b:c5:15:1e:d2:3c:c1:19:fa:
cf:1d:64:02:04:c3:81:0e:4f:3a:6a:f0:f9:d4:95:07:b9:95:
89:0f:ca:22:f4:f9:06:c8:e2:d7:ea:45:9e:9c:34:08:e0:53:
54:46:85:8c:f8:79:9a:d1:44:92:c2:87:58:ff:7e:2e:82:cd:
38:6b:15:a6:44:ed:50:6c:2d:85:35:e0:0f:ff:7a:8e:9f:d5:
67:96:4b:72:ed:c8:5d:24:1d:58:28:0c:d2:57:7a:a8:fa:5e:
4a:28:d6:af:63:16:df:41:2f:49:6d:f1:c6:f8:61:bf:41:95:
5a:e8:44:21:a5:94:e1:f2:51:e3:e5:e9:df:0a:5a:a5:1a:5d:
9c:04:2f:15:13:b7:36:03:d6:bb:74:ed:42:e6:e4:75:38:1d:
3f:6c:86:f6:1a:ce:17:df:33:c8:23:42:9e:0a:2f:b4:a5:d6:
00:6e:17:8c:d7:59:b2:ce:45:84:1d:c6:26:54:2b:87:b2:97:
11:77:2c:34:83:38:56:58:46:ff:53:b4:10:be:71:7c:cf:ef:
d0:35:72:70:80:c0:a6:4a:83:ff:25:53:f9:ce:f6:47:5c:b2:
3e:81:48:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org