Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/HWa6nWxpIC81uiOt0u1jqa8ti1c.roa
File: HWa6nWxpIC81uiOt0u1jqa8ti1c.roa (raw, json)
Hash identifier: p5FQiA7iUS9RA+w1EJAQumwyCwn844W7TU2+NK9gAew=
Subject key identifier: 1D:66:BA:9D:6C:69:20:2F:35:BA:23:AD:D2:ED:63:A9:AF:2D:8B:57
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183E918FBD3A9C97366F85B4DEA524A8167
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/HWa6nWxpIC81uiOt0u1jqa8ti1c.roa
Signing time: Tue 18 Oct 2022 03:17:52 +0000
ROA not before: Tue 18 Oct 2022 03:17:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 45.149.185.0/24 maxlen: 24
195.206.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e9:18:fb:d3:a9:c9:73:66:f8:5b:4d:ea:52:4a:81:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 18 03:17:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d66ba9d6c69202f35ba23add2ed63a9af2d8b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ba:df:05:3a:c7:1c:91:ae:0d:34:fb:b4:b7:
a1:90:b0:dd:3d:79:ce:0b:4c:4e:c4:e7:44:1f:9b:
37:b0:ee:17:0a:1f:fb:0a:e0:63:0a:08:a1:6a:44:
f5:f6:ee:23:ff:0b:5e:6f:d5:ba:35:21:cd:af:ac:
5a:03:23:7d:56:b0:ef:b8:ac:62:46:f7:f4:62:45:
9c:3a:24:56:b3:3e:35:fc:f5:61:27:cb:43:2c:8a:
9c:4f:d2:1d:cb:65:47:0c:94:ec:1b:68:73:75:40:
be:16:6c:14:e1:62:8f:54:51:f4:32:1d:00:83:a1:
36:49:6b:75:e5:9a:35:49:c4:5f:e8:65:8c:94:e4:
f8:81:d7:8f:0e:6b:f1:86:8c:81:20:f1:93:d7:c7:
cf:25:12:c4:a4:5b:01:38:ae:ae:b4:57:f0:cd:c5:
7f:c2:36:eb:3d:17:6d:ea:ec:1c:02:ab:42:19:c6:
e0:37:cd:90:8b:bd:c2:66:da:29:a9:b4:3c:77:da:
4e:7a:c6:53:68:dc:1d:01:d1:a3:d0:03:6a:59:70:
f3:d5:f1:d8:8c:26:69:70:a5:53:f6:69:2a:04:10:
8a:ba:fd:b3:36:69:8b:52:60:05:74:c1:06:09:ba:
82:b2:78:db:c6:e9:76:a8:81:15:84:f5:3d:5e:24:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:66:BA:9D:6C:69:20:2F:35:BA:23:AD:D2:ED:63:A9:AF:2D:8B:57
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/HWa6nWxpIC81uiOt0u1jqa8ti1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.185.0/24
195.206.234.0/24
Signature Algorithm: sha256WithRSAEncryption
92:6b:a7:a7:ac:b1:19:f5:6c:91:ee:ff:cb:13:26:27:e8:35:
8f:f6:3f:96:98:1a:c6:27:25:53:53:5a:e8:ed:a5:44:fd:cf:
b9:a1:65:75:87:c3:2a:c2:92:96:4d:70:95:a7:75:19:17:47:
1d:d3:19:14:3f:f1:5e:0b:ed:bb:98:66:c9:7d:06:69:4b:5e:
43:79:88:bc:25:c9:ee:8f:e7:f3:1c:f7:f8:27:52:1f:d4:2a:
84:7e:26:75:78:28:97:e8:bd:91:38:ca:91:6a:98:54:e8:2d:
25:a9:67:55:ec:29:43:6c:a1:6e:bf:d5:47:81:9d:3d:fd:27:
0a:38:35:15:cb:7d:24:ca:eb:d5:5a:bb:90:8c:df:56:7d:80:
e3:29:2e:e3:75:bb:3f:49:65:3c:90:f5:06:3d:82:15:1b:17:
2e:4a:09:35:fb:4d:35:03:70:46:f4:e6:65:aa:69:b9:e1:cf:
07:2b:11:8b:fb:74:6c:cc:45:eb:59:e8:09:48:9d:c3:c2:6d:
3a:43:8a:b4:d7:80:73:43:57:bf:09:a8:74:5f:7c:3c:30:c2:
2a:36:bd:a4:c4:46:cb:71:47:25:8f:6c:7a:cb:4e:f4:90:52:
cf:34:d9:63:64:da:12:45:c4:98:87:84:0b:9f:38:93:14:5d:
a2:3c:c8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org