Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/HqoLzXNnMhurv-GWbyCY1EMe8Ko.roa
File: HqoLzXNnMhurv-GWbyCY1EMe8Ko.roa (raw, json)
Hash identifier: dK11EmCepM52RiTgXkdJIDCIQG1QAj7axX2Gyw/mcyg=
Subject key identifier: 1E:AA:0B:CD:73:67:32:1B:AB:BF:E1:96:6F:20:98:D4:43:1E:F0:AA
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182A5316A2FCDDA6F3E1EE20FC724C7531E
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/HqoLzXNnMhurv-GWbyCY1EMe8Ko.roa
Signing time: Tue 16 Aug 2022 05:47:35 +0000
ROA not before: Tue 16 Aug 2022 05:47:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 193.161.245.0/24 maxlen: 24
91.206.2.0/24 maxlen: 24
45.142.238.0/23 maxlen: 24
194.104.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a5:31:6a:2f:cd:da:6f:3e:1e:e2:0f:c7:24:c7:53:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Aug 16 05:47:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1eaa0bcd7367321babbfe1966f2098d4431ef0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9a:ae:fd:52:12:fc:3f:53:95:63:d4:83:56:
42:5a:7b:bb:b8:59:00:5b:7d:3a:1d:88:ad:27:70:
ce:ab:91:de:3b:6a:55:22:69:ee:b2:67:fe:b2:2a:
51:c9:4b:78:a5:91:ef:ab:ee:11:d7:ef:b0:bb:02:
eb:ba:97:3b:bc:e0:91:21:24:d3:da:f2:12:89:ca:
2e:b6:df:af:56:e5:ba:f1:e8:a8:37:b5:a4:b3:3b:
d1:77:97:ba:f0:79:c1:62:eb:f3:3d:e2:44:c4:e3:
7c:1f:e2:39:ff:73:f7:0b:af:c2:64:3b:cb:cd:d3:
68:92:cf:a4:0a:25:4e:c1:a8:8b:9c:07:00:7a:47:
2b:78:55:37:67:c1:e6:5d:04:01:2e:b0:02:1c:ed:
91:5c:0d:77:ca:98:d3:2e:33:41:61:1f:a2:6f:e8:
f9:b7:2a:12:c6:95:46:ba:ad:40:c3:ce:c7:cf:d6:
34:cb:1e:a3:a6:07:eb:a1:7e:93:d2:77:c5:9d:73:
4f:0e:51:f4:a7:ec:81:1d:58:0f:58:43:0f:82:fb:
10:7f:cd:b8:b5:8d:88:43:05:e5:be:e1:3f:a7:9b:
f7:5e:e5:45:14:a7:87:83:85:1a:ac:95:68:a0:88:
da:b7:a8:70:14:c9:00:fb:a2:db:7b:d9:bf:00:68:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:AA:0B:CD:73:67:32:1B:AB:BF:E1:96:6F:20:98:D4:43:1E:F0:AA
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/HqoLzXNnMhurv-GWbyCY1EMe8Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.238.0/23
91.206.2.0/24
193.161.245.0/24
194.104.158.0/24
Signature Algorithm: sha256WithRSAEncryption
76:31:b0:e9:06:84:9d:29:5c:36:94:57:ef:0d:be:3d:fa:37:
0f:d0:c1:04:ee:40:5a:6a:2e:df:1f:fe:aa:ff:4d:08:3b:77:
e3:11:4f:4a:b4:cf:98:f4:61:c0:29:b0:23:44:1f:d5:6f:ef:
83:a0:59:77:15:75:35:e1:dd:89:d5:66:d3:84:09:26:2c:7d:
f7:0a:7c:f4:f8:a2:07:a9:b4:2f:03:dc:1a:99:8e:c3:d9:d6:
4f:66:51:e2:95:da:d7:d6:40:40:07:71:dc:8b:4c:27:28:82:
46:5b:27:33:44:88:55:a4:73:c2:7c:5b:32:3d:04:e2:ac:e7:
98:7f:32:6a:c9:90:20:1c:37:88:86:9e:df:18:71:91:06:e1:
0d:bb:fa:1b:6c:65:86:88:99:18:5b:6f:25:0d:9d:df:66:a3:
19:ed:45:1a:60:e7:15:25:c9:51:26:f5:0f:96:d6:78:68:eb:
70:c3:d4:e9:5f:cf:7b:e5:c4:74:1e:16:ae:24:75:5e:26:3d:
55:9c:8f:c5:61:55:ae:12:2d:ca:c0:b6:8b:74:f0:7b:82:0c:
b8:7c:b5:5b:1b:af:73:96:cf:51:9c:2c:4d:f2:af:bf:80:de:
11:d3:76:98:75:19:e3:d9:de:2d:03:ca:3a:f5:4d:6a:d4:f0:
30:83:9e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org