Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/IM2XUxrb3KFYnB9I7b5AoOWsjPA.roa
File: IM2XUxrb3KFYnB9I7b5AoOWsjPA.roa (raw, json)
Hash identifier: VFl++S9jMKY625yVjvZWt+e6UD2R9QUHnnYlrWNP6fM=
Subject key identifier: 20:CD:97:53:1A:DB:DC:A1:58:9C:1F:48:ED:BE:40:A0:E5:AC:8C:F0
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184CA31EF486FE3EA2B5E52E92982CB25B0
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/IM2XUxrb3KFYnB9I7b5AoOWsjPA.roa
Signing time: Wed 30 Nov 2022 20:19:40 +0000
ROA not before: Wed 30 Nov 2022 20:19:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.176.54.0/24 maxlen: 24
193.176.55.0/24 maxlen: 24
45.154.104.0/23 maxlen: 24
91.199.168.0/24 maxlen: 24
141.98.156.0/23 maxlen: 24
147.78.122.0/23 maxlen: 24
147.78.120.0/23 maxlen: 24
45.149.186.0/23 maxlen: 24
45.149.184.0/23 maxlen: 24
45.158.8.0/23 maxlen: 24
195.206.230.0/24 maxlen: 24
195.206.231.0/24 maxlen: 24
176.105.224.0/23 maxlen: 24
195.206.234.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
195.206.235.0/24 maxlen: 24
45.142.236.0/23 maxlen: 24
45.142.238.0/23 maxlen: 24
193.111.116.0/24 maxlen: 24
193.111.117.0/24 maxlen: 24
45.158.170.0/23 maxlen: 24
45.158.168.0/23 maxlen: 24
193.151.182.0/23 maxlen: 24
193.151.180.0/23 maxlen: 24
195.20.98.0/24 maxlen: 24
194.104.156.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
194.105.21.0/24 maxlen: 24
152.89.250.0/23 maxlen: 24
193.29.96.0/23 maxlen: 24
193.29.98.0/23 maxlen: 24
194.147.4.0/23 maxlen: 24
194.147.6.0/23 maxlen: 24
194.5.146.0/23 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ca:31:ef:48:6f:e3:ea:2b:5e:52:e9:29:82:cb:25:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 30 20:19:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=20cd97531adbdca1589c1f48edbe40a0e5ac8cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:14:c4:9e:97:44:72:0c:23:72:73:57:70:
5a:34:45:e0:de:6a:ca:13:63:a8:2b:b1:aa:21:e9:
cc:ef:6a:32:e2:c6:9f:b5:d7:77:dd:23:28:ff:68:
cc:a0:f7:da:ae:dc:67:b5:25:68:26:54:5d:88:47:
dd:87:97:ec:ac:54:3f:73:fd:1f:58:41:bb:29:37:
10:fa:b9:a5:7b:13:eb:9f:c8:92:62:dc:a2:f4:d6:
b2:59:e3:b3:09:79:79:ef:57:34:59:d0:6d:64:5b:
cf:79:d0:5f:17:dc:b4:9e:4c:10:9e:4b:51:aa:1f:
62:fb:b2:a6:f7:22:01:eb:4a:58:2a:f9:d9:c0:3e:
e4:7a:62:10:55:81:db:72:95:7f:32:d6:96:5c:29:
ec:92:08:f3:ac:1e:7c:b8:a6:7f:4e:74:a1:89:5e:
1e:d5:cb:a6:04:68:64:60:63:9a:4a:25:36:dc:37:
f2:1f:d3:84:f5:06:43:a1:7e:05:98:a6:8d:50:53:
4e:62:23:46:0c:f2:2e:6b:30:cd:38:01:da:24:d9:
c1:0a:56:b1:c5:cf:e3:90:12:59:ea:2d:26:6a:da:
ac:44:53:31:00:4f:09:6d:2b:18:09:d1:df:79:c3:
4a:ea:d3:6a:27:49:b5:31:ec:d9:15:03:0c:6a:f3:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CD:97:53:1A:DB:DC:A1:58:9C:1F:48:ED:BE:40:A0:E5:AC:8C:F0
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/IM2XUxrb3KFYnB9I7b5AoOWsjPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/22
45.149.184.0/22
45.153.6.0/23
45.154.104.0/23
45.158.8.0/23
45.158.168.0/22
91.199.168.0/24
141.98.156.0/23
147.78.120.0/22
152.89.250.0/23
176.105.224.0/23
193.29.96.0/22
193.111.116.0/23
193.142.22.0/24
193.151.180.0/22
193.176.54.0/23
194.5.146.0/23
194.104.156.0/24
194.104.158.0/24
194.105.21.0/24
194.147.4.0/22
195.20.98.0/23
195.20.105.0/24
195.206.230.0/23
195.206.234.0/23
Signature Algorithm: sha256WithRSAEncryption
14:3c:b2:6f:13:01:69:55:d0:d9:25:fe:7c:de:26:82:e5:f4:
46:52:d0:1b:e7:2a:e2:88:9b:74:0c:ea:a6:94:1b:07:b9:a1:
79:b7:99:22:16:07:c2:5e:28:56:97:fd:50:62:20:c3:19:a5:
ed:3f:ea:22:9f:6d:37:7d:58:c4:8b:e2:77:e4:15:37:d0:6e:
11:fa:d8:24:4a:b3:6b:ab:af:9f:76:70:db:87:59:72:55:91:
c1:35:14:e5:9d:61:6d:61:16:7b:90:fa:7b:e8:bb:06:1d:44:
11:04:5d:ff:b9:d8:01:0e:92:cc:6d:e8:16:68:c8:ba:96:c4:
12:90:b9:01:68:ca:62:c2:1e:75:7f:e8:2e:60:7a:8c:1d:44:
a9:a0:95:24:10:03:47:3c:71:7c:99:64:59:4b:62:cd:7b:e0:
e5:4a:75:0d:22:2d:45:47:4f:f2:7c:80:37:d5:28:95:ea:d1:
94:34:7d:8d:1d:2e:77:f4:35:2e:cc:9a:34:50:f4:15:66:51:
f2:77:1d:bb:c1:ac:85:2d:53:83:f9:82:6d:1b:21:ca:bc:95:
38:b0:00:24:05:8e:af:51:23:15:a3:b9:9f:ef:4a:35:69:95:
d6:86:a4:91:e7:d4:95:fa:64:e9:8a:2b:bf:10:6c:34:70:d9:
9a:30:ef:d3
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAYTKMe9Ib+PqK15S6SmCyyWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMTMwMjAxOTQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGNkOTc1MzFhZGJkY2ExNTg5YzFmNDhlZGJlNDBhMGU1YWM4Y2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFcUxJ6XRHIMI3JzV3BaNEXg3mrK
E2OoK7GqIenM72oy4saftdd33SMo/2jMoPfartxntSVoJlRdiEfdh5fsrFQ/c/0f
WEG7KTcQ+rmlexPrn8iSYtyi9NayWeOzCXl571c0WdBtZFvPedBfF9y0nkwQnktR
qh9i+7Km9yIB60pYKvnZwD7kemIQVYHbcpV/MtaWXCnskgjzrB58uKZ/TnShiV4e
1cumBGhkYGOaSiU23DfyH9OE9QZDoX4FmKaNUFNOYiNGDPIuazDNOAHaJNnBClax
xc/jkBJZ6i0matqsRFMxAE8JbSsYCdHfecNK6tNqJ0m1MezZFQMMavNhkQIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFCDNl1Ma29yhWJwfSO2+QKDlrIzwMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvSU0yWFV4cmIzS0ZZbkI5STdiNUFvT1dzalBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAIt
juwDBAItlbgDBAEtmQYDBAEtmmgDBAEtnggDBAItnqgDBABbx6gDBAGNYpwDBAKT
TngDBAGYWfoDBAGwaeADBALBHWADBAHBb3QDBADBjhYDBALBl7QDBAHBsDYDBAHC
BZIDBADCaJwDBADCaJ4DBADCaRUDBALCkwQDBAHDFGIDBADDFGkDBAHDzuYDBAHD
zuowDQYJKoZIhvcNAQELBQADggEBABQ8sm8TAWlV0Nkl/nzeJoLl9EZS0BvnKuKI
m3QM6qaUGwe5oXm3mSIWB8JeKFaX/VBiIMMZpe0/6iKfbTd9WMSL4nfkFTfQbhH6
2CRKs2urr592cNuHWXJVkcE1FOWdYW1hFnuQ+nvouwYdRBEEXf+52AEOksxt6BZo
yLqWxBKQuQFoymLCHnV/6C5geowdRKmglSQQA0c8cXyZZFlLYs174OVKdQ0iLUVH
T/J8gDfVKJXq0ZQ0fY0dLnf0NS7MmjRQ9BVmUfJ3HbvBrIUtU4P5gm0bIcq8lTiw
ACQFjq9RIxWjuZ/vSjVpldaGpJHn1JX6ZOmKK78QbDRw2Zow79M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org