Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Ja2Yc3ByDPR5ZcLLYRTpfLjeENc.roa
File: Ja2Yc3ByDPR5ZcLLYRTpfLjeENc.roa (raw, json)
Hash identifier: zFzcZRsst1mpBSDzJcrOyLUngv3fGb5Qz9cB9JSZBHM=
Subject key identifier: 25:AD:98:73:70:72:0C:F4:79:65:C2:CB:61:14:E9:7C:B8:DE:10:D7
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184CF4F22ECA21DFE65C5EB33BFD1A1FD8B
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Ja2Yc3ByDPR5ZcLLYRTpfLjeENc.roa
Signing time: Thu 01 Dec 2022 20:09:40 +0000
ROA not before: Thu 01 Dec 2022 20:09:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.176.54.0/24 maxlen: 24
193.176.55.0/24 maxlen: 24
45.154.104.0/23 maxlen: 24
91.199.168.0/24 maxlen: 24
141.98.156.0/23 maxlen: 24
147.78.122.0/23 maxlen: 24
147.78.120.0/23 maxlen: 24
45.149.186.0/23 maxlen: 24
45.149.184.0/23 maxlen: 24
45.158.8.0/23 maxlen: 24
195.206.230.0/24 maxlen: 24
195.206.231.0/24 maxlen: 24
176.105.224.0/23 maxlen: 24
195.206.234.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
195.206.235.0/24 maxlen: 24
45.142.236.0/23 maxlen: 24
45.142.238.0/23 maxlen: 24
193.111.116.0/24 maxlen: 24
193.111.117.0/24 maxlen: 24
45.158.170.0/23 maxlen: 24
45.158.168.0/23 maxlen: 24
193.151.182.0/23 maxlen: 24
193.151.180.0/23 maxlen: 24
195.20.98.0/24 maxlen: 24
194.104.156.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
194.105.21.0/24 maxlen: 24
152.89.250.0/23 maxlen: 24
193.29.96.0/23 maxlen: 24
193.29.98.0/23 maxlen: 24
194.147.4.0/23 maxlen: 24
194.147.6.0/23 maxlen: 24
194.5.146.0/23 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cf:4f:22:ec:a2:1d:fe:65:c5:eb:33:bf:d1:a1:fd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 1 20:09:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25ad987370720cf47965c2cb6114e97cb8de10d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:58:8d:38:1a:d4:43:4e:d0:5c:fa:32:b5:c9:
a2:dc:58:1b:60:43:20:b6:6d:ea:a4:a8:50:f0:37:
ce:d7:1b:35:2a:02:e0:8a:5c:cf:22:0f:26:e3:82:
df:90:cc:ed:d3:9a:47:0b:b6:9d:2e:d3:98:29:1a:
ce:d5:99:c4:c2:99:b1:a0:6e:cc:ed:3d:09:ac:1e:
81:3f:c0:d5:03:1e:e4:7e:0e:df:1b:5e:77:fd:36:
db:c8:d3:7f:eb:89:d6:e1:65:b0:f0:42:2e:fc:6b:
a9:1b:81:a7:0b:65:1c:19:c7:36:b6:e1:07:09:15:
d8:61:63:62:7e:d6:57:bf:08:0f:09:b5:38:ae:a8:
a5:66:e9:0e:61:f9:bd:5e:11:9d:c1:0d:fc:91:b6:
f5:01:c0:6b:cd:43:1c:0e:92:51:1c:a0:41:0d:03:
c9:3d:d2:82:3f:ba:87:c1:1f:f1:68:30:96:3d:06:
fd:ef:dd:bd:5b:0d:dc:60:fa:87:85:d8:b5:b1:92:
05:0d:89:01:a4:3f:83:0d:13:c5:b7:bd:c0:85:54:
12:cc:63:cf:45:e7:1a:f0:50:03:8b:12:05:ae:8c:
fc:68:cb:16:92:31:e7:c5:16:db:db:4e:09:a0:8a:
7c:8a:d8:3b:00:7c:77:04:b9:d1:f0:81:db:c9:99:
ef:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AD:98:73:70:72:0C:F4:79:65:C2:CB:61:14:E9:7C:B8:DE:10:D7
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Ja2Yc3ByDPR5ZcLLYRTpfLjeENc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/22
45.149.184.0/22
45.153.6.0/23
45.154.104.0/23
45.158.8.0/23
45.158.168.0/22
91.199.168.0/24
141.98.156.0/23
147.78.120.0/22
152.89.250.0/23
176.105.224.0/23
193.29.96.0/22
193.111.116.0/23
193.142.22.0/24
193.151.180.0/22
193.176.54.0/23
194.5.146.0/23
194.104.156.0/24
194.104.158.0/24
194.105.21.0/24
194.147.4.0/22
195.20.98.0/23
195.20.105.0/24
195.206.230.0/23
195.206.234.0/23
Signature Algorithm: sha256WithRSAEncryption
73:04:25:00:76:f7:f3:a6:d7:f6:a0:65:8f:17:85:33:d7:df:
1c:b5:8d:d7:9f:99:5c:26:f9:9e:5d:11:51:bd:3a:7c:08:3e:
5a:c1:c1:d3:9d:df:ae:cc:2c:48:a7:8a:da:b6:38:28:78:bd:
b1:bd:6d:61:bb:bf:50:49:e7:14:bd:51:2e:11:9b:9c:1e:57:
82:14:43:9a:cb:fe:cf:91:85:53:c6:26:98:5b:f2:42:1f:2e:
d8:3c:84:ca:2a:e4:a9:78:12:65:a5:9c:62:56:fc:e4:b8:ab:
c8:21:a2:09:12:cb:2c:1d:9d:7e:95:ec:64:af:ed:b1:03:aa:
b3:45:7e:04:bc:6b:73:55:61:9d:66:90:91:e3:c3:36:66:79:
08:b0:68:74:7b:5e:bc:d8:2f:e7:92:f8:48:26:34:40:18:ca:
8d:03:cc:63:9d:9a:55:c2:60:1e:6e:1c:8a:37:6b:82:34:5c:
1b:2c:44:87:c7:2d:14:e0:c3:33:d0:74:0d:34:d3:49:cd:5d:
95:9a:2e:cb:d9:81:d0:3b:8e:2c:dd:9a:40:06:0f:6e:42:e1:
56:d0:0d:e5:1c:b8:04:5d:33:d7:1a:24:5c:7e:ad:2a:2d:d6:
cb:6e:c1:4a:70:9e:05:e0:d4:0a:5e:f3:58:58:ff:53:4f:45:
96:da:c5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:45 2025 by rpki-client