Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/GjPXaQthrKh15JvNFIIg1cakjnw.roa
File: GjPXaQthrKh15JvNFIIg1cakjnw.roa (raw, json)
Hash identifier: +B3+lcfMBHBgYmhsLWC7twCYjXFYVk3GO6JqkWsGJWs=
Subject key identifier: 1A:33:D7:69:0B:61:AC:A8:75:E4:9B:CD:14:82:20:D5:C6:A4:8E:7C
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01820213DC8D96F91A961A8C284BAA827D96
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/GjPXaQthrKh15JvNFIIg1cakjnw.roa
Signing time: Fri 15 Jul 2022 13:37:12 +0000
ROA not before: Fri 15 Jul 2022 13:37:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399471
IP address blocks: 194.147.7.0/24 maxlen: 24
194.147.6.0/24 maxlen: 24
193.151.182.0/24 maxlen: 24
193.151.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:02:13:dc:8d:96:f9:1a:96:1a:8c:28:4b:aa:82:7d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 15 13:37:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a33d7690b61aca875e49bcd148220d5c6a48e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:70:b3:fd:fd:19:0e:19:2e:20:a5:67:c2:e2:
60:c7:11:3f:f5:01:a9:09:77:42:be:c3:f7:dd:fa:
b5:e8:08:28:3f:79:fd:3a:e2:cc:7b:73:ab:1a:d7:
37:65:57:7a:e1:f4:2c:b9:7e:5f:74:33:e3:bb:f6:
cd:af:fd:d3:80:31:6a:ea:13:2e:00:09:68:26:fb:
37:c2:25:07:0a:6e:29:56:1f:2e:a3:92:a8:34:5e:
cb:01:41:ce:1c:bb:df:cd:b3:17:0b:18:1f:be:dd:
a0:6b:65:46:db:04:1e:7c:36:63:7e:8c:57:32:f6:
31:43:57:c4:ba:25:c3:78:00:aa:a6:8e:4f:38:3f:
09:a7:d8:36:1c:21:ae:8c:e3:a7:db:0f:30:59:c5:
76:4d:15:99:b5:0a:40:b9:00:3a:65:c1:e7:da:eb:
9f:2a:2b:20:0b:15:f6:75:93:5b:86:5d:b6:18:54:
aa:3b:3c:14:2a:4c:7a:fd:8d:13:6d:c5:15:d2:8e:
40:1a:90:1d:ad:5b:c1:2a:57:1e:46:2e:0d:e4:8b:
80:d7:89:fc:fb:49:ce:a2:6b:33:c7:92:ba:9f:64:
db:40:03:6d:92:d2:3f:79:cb:fe:7f:46:03:08:3f:
89:41:c7:38:73:aa:69:91:d9:84:96:5e:d6:fc:14:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:33:D7:69:0B:61:AC:A8:75:E4:9B:CD:14:82:20:D5:C6:A4:8E:7C
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/GjPXaQthrKh15JvNFIIg1cakjnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.181.0-193.151.182.255
194.147.6.0/23
Signature Algorithm: sha256WithRSAEncryption
98:41:0d:35:99:2e:37:9f:78:b6:dd:d1:8c:cb:0f:09:a7:d9:
72:97:73:6c:45:de:38:ca:42:15:cc:84:1f:54:09:bb:64:8f:
70:b1:e8:cb:f4:14:27:ff:97:c8:69:b6:45:00:ff:99:90:43:
9a:c3:25:e9:61:62:db:68:e5:c0:57:63:83:d4:b2:98:e6:c8:
a3:2d:c7:3a:29:88:04:5b:3c:1f:f8:32:06:ad:4b:02:ae:23:
99:bf:43:37:65:5d:33:6e:1c:68:86:2d:97:ee:e5:48:56:a4:
b6:5d:48:ef:47:71:b4:6c:f4:45:56:a8:7b:6c:72:61:ce:1d:
ca:5a:10:db:8d:9a:6d:c1:b7:8c:62:72:18:c4:26:71:c7:06:
30:20:29:bc:63:5f:d7:6f:1f:72:28:ab:63:30:d6:02:4c:31:
91:37:b3:d3:59:c1:3d:17:ec:88:28:7e:70:46:b2:c2:a3:fe:
3e:65:2f:4c:1e:e4:0c:be:03:2a:c6:af:9c:fa:96:1b:1f:55:
54:e6:6d:c4:e0:a9:74:92:da:df:60:63:e8:10:23:8c:fe:38:
42:b4:41:d1:3d:bc:4a:10:29:3b:2a:f1:55:11:f7:6c:45:26:
38:79:81:12:2e:e4:0c:7d:bc:e7:cf:9c:42:e1:df:56:95:fd:
a6:bb:e5:30
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYICE9yNlvkalhqMKEuqgn2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIwNzE1MTMzNzEyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTMzZDc2OTBiNjFhY2E4NzVlNDliY2QxNDgyMjBkNWM2YTQ4ZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnCz/f0ZDhkuIKVnwuJgxxE/9QGp
CXdCvsP33fq16AgoP3n9OuLMe3OrGtc3ZVd64fQsuX5fdDPju/bNr/3TgDFq6hMu
AAloJvs3wiUHCm4pVh8uo5KoNF7LAUHOHLvfzbMXCxgfvt2ga2VG2wQefDZjfoxX
MvYxQ1fEuiXDeACqpo5POD8Jp9g2HCGujOOn2w8wWcV2TRWZtQpAuQA6ZcHn2uuf
KisgCxX2dZNbhl22GFSqOzwUKkx6/Y0TbcUV0o5AGpAdrVvBKlceRi4N5IuA14n8
+0nOomszx5K6n2TbQANtktI/ecv+f0YDCD+JQcc4c6ppkdmEll7W/BSi3wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFBoz12kLYayodeSbzRSCINXGpI58MB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvR2pQWGFRdGhyS2gxNUp2TkZJSWcxY2Fram53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADBl7UD
BADBl7YDBAHCkwYwDQYJKoZIhvcNAQELBQADggEBAJhBDTWZLjefeLbd0YzLDwmn
2XKXc2xF3jjKQhXMhB9UCbtkj3Cx6Mv0FCf/l8hptkUA/5mQQ5rDJelhYtto5cBX
Y4PUspjmyKMtxzopiARbPB/4MgatSwKuI5m/QzdlXTNuHGiGLZfu5UhWpLZdSO9H
cbRs9EVWqHtscmHOHcpaENuNmm3Bt4xichjEJnHHBjAgKbxjX9dvH3Ioq2Mw1gJM
MZE3s9NZwT0X7IgofnBGssKj/j5lL0we5Ay+AyrGr5z6lhsfVVTmbcTgqXSS2t9g
Y+gQI4z+OEK0QdE9vEoQKTsq8VUR92xFJjh5gRIu5Ax9vOfPnELh31aV/aa75TA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org