Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ItFga4yyN0xZSVui0nMeWv12YQ4.roa
File: ItFga4yyN0xZSVui0nMeWv12YQ4.roa (raw, json)
Hash identifier: 4qFQnrRXqCaIB+qzmbMY/+vp22FEGWX5vyG4/ICeWwk=
Subject key identifier: 22:D1:60:6B:8C:B2:37:4C:59:49:5B:A2:D2:73:1E:5A:FD:76:61:0E
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182FEBEF1A8AF05C2F762C8AC19E368AF81
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ItFga4yyN0xZSVui0nMeWv12YQ4.roa
Signing time: Fri 02 Sep 2022 15:08:22 +0000
ROA not before: Fri 02 Sep 2022 15:08:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 176.105.225.0/24 maxlen: 24
195.206.234.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fe:be:f1:a8:af:05:c2:f7:62:c8:ac:19:e3:68:af:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 2 15:08:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22d1606b8cb2374c59495ba2d2731e5afd76610e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:2d:65:b4:93:75:3a:aa:33:19:22:c3:fe:
e3:2b:f1:28:18:d6:fb:a6:ca:83:f9:6f:5c:67:88:
84:c0:6e:a5:32:66:0c:7e:f6:66:79:88:c7:3f:8b:
d3:85:c6:4b:aa:d4:86:48:fd:67:c6:26:91:5b:a0:
93:e0:4d:d7:2c:43:38:f5:7b:65:7f:88:38:9f:62:
e5:ce:0e:ad:9e:57:af:b8:d1:32:eb:97:b2:d3:70:
3a:21:24:ce:c3:ee:0a:17:c7:f8:e7:3f:5c:7e:f5:
f1:56:78:a8:85:53:a8:69:c6:48:44:c1:ad:b9:91:
86:d6:62:d4:c7:de:de:11:9e:ee:a2:cf:eb:ce:b4:
16:24:b7:71:bb:0b:a6:50:84:fb:16:82:fd:03:7f:
14:8b:c6:54:c6:ef:81:d2:38:37:3a:c2:f5:bb:00:
cf:e0:76:47:4a:c8:65:68:2a:d6:47:0a:3d:5e:5d:
df:9b:d4:e8:ce:b6:07:5d:75:a3:05:81:89:e7:fa:
72:90:cf:ae:60:8c:f1:6e:87:16:0f:d3:5a:c2:a7:
81:c9:80:69:5a:04:34:a5:fc:46:7c:c5:58:3b:39:
dc:0e:04:6f:2d:32:d3:22:ee:ec:13:0c:a1:cb:79:
72:5e:66:e1:ab:04:b1:5e:f9:21:79:4f:68:4d:64:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D1:60:6B:8C:B2:37:4C:59:49:5B:A2:D2:73:1E:5A:FD:76:61:0E
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ItFga4yyN0xZSVui0nMeWv12YQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.225.0/24
194.104.158.0/24
195.206.234.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:84:22:8e:57:c7:d5:7d:0c:3f:a6:06:11:3c:d8:73:0b:40:
23:62:ea:5c:12:29:ba:79:6e:78:7c:9d:12:87:c6:58:29:3b:
61:7a:98:7f:0c:ea:02:1b:37:7e:c4:39:b7:91:ae:8c:f5:d1:
e8:a0:2c:de:24:a8:da:a5:c0:9a:57:8c:8d:6c:e4:90:76:ef:
a0:2d:1a:e7:aa:3b:2c:4a:5e:73:46:f1:d5:cc:82:21:85:e4:
cb:f1:a1:f9:1f:38:74:ea:9a:ed:ad:bb:16:99:9b:1a:bf:a6:
de:ab:79:4a:45:0c:d6:35:d4:1b:92:69:29:a7:c0:54:25:d8:
d0:ce:8e:19:a0:87:76:81:6b:d6:47:3a:ed:bd:69:24:fd:b5:
3d:89:93:32:99:16:d0:1f:b1:a2:78:4b:08:71:0f:11:a2:41:
a2:5f:34:34:c6:dc:87:06:8f:bd:d3:2d:1b:04:68:3c:44:6a:
90:a6:46:8c:2f:b2:28:e8:ae:54:d3:2c:9f:2e:7b:58:ae:d8:
d7:4c:ae:de:5f:55:9b:4f:58:44:99:62:3e:de:d5:aa:98:43:
dd:9c:fd:aa:b5:d9:c5:a4:9e:07:e9:92:66:f4:90:a0:f1:f3:
a9:06:10:a0:2a:2d:87:43:c5:d9:6e:4f:ed:57:22:5a:0c:3a:
69:eb:9a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org