Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Jd52VVNg7_kMCbiYhRuNs7ivzMw.roa
File: Jd52VVNg7_kMCbiYhRuNs7ivzMw.roa (raw, json)
Hash identifier: 8kUC+lgDGWwxkAi5g/Mr6AJn7bYd8Db+f1a5c2u2bTw=
Subject key identifier: 25:DE:76:55:53:60:EF:F9:0C:09:B8:98:85:1B:8D:B3:B8:AF:CC:CC
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01837D35721E669B05737FEBC113F494781D
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Jd52VVNg7_kMCbiYhRuNs7ivzMw.roa
Signing time: Tue 27 Sep 2022 04:29:58 +0000
ROA not before: Tue 27 Sep 2022 04:29:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 45.152.240.0/23 maxlen: 24
147.78.123.0/24 maxlen: 24
195.206.234.0/24 maxlen: 24
193.142.22.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7d:35:72:1e:66:9b:05:73:7f:eb:c1:13:f4:94:78:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 27 04:29:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25de76555360eff90c09b898851b8db3b8afcccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:06:df:ec:e2:75:89:2a:58:1d:28:bc:7e:
40:8d:af:fd:17:6d:01:c7:88:82:84:52:c0:c9:db:
50:90:1c:62:69:12:08:f0:1c:25:c7:6e:1e:7d:10:
5e:a3:68:f4:4d:dc:f7:b8:b4:f2:99:20:2c:39:3e:
41:4a:fa:68:47:3a:8e:4c:ce:90:52:8e:bb:4d:db:
82:3d:80:80:46:31:85:3d:6d:3b:06:55:6e:5b:13:
29:ba:c7:56:bd:59:93:26:7d:e0:40:43:ec:bd:50:
be:c6:b0:89:ea:e3:cc:d1:8f:7b:aa:0a:97:d3:d3:
0e:d9:f3:32:46:2a:ff:fb:b6:18:d9:70:23:5d:96:
14:00:10:1a:5b:fe:41:1c:b7:c4:7b:5b:bb:12:f2:
9c:14:a8:30:13:b6:2e:01:1f:08:a8:f1:ab:5d:b4:
ae:d8:65:27:5b:96:73:f0:e0:c4:cc:89:15:d2:5d:
96:2a:9b:f7:cd:6e:9d:7f:ce:c5:60:37:ed:10:8e:
a8:9f:b3:7a:42:0e:3f:5d:91:b0:f6:aa:05:bc:34:
13:58:a3:0b:81:47:25:74:6e:14:86:42:f2:b2:dd:
21:02:d9:d5:18:06:14:42:d2:7f:2e:8d:70:0f:d0:
85:28:48:87:08:10:92:ad:05:88:03:f9:6e:9e:cb:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DE:76:55:53:60:EF:F9:0C:09:B8:98:85:1B:8D:B3:B8:AF:CC:CC
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Jd52VVNg7_kMCbiYhRuNs7ivzMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
147.78.123.0/24
193.142.22.0/24
194.113.226.0/24
195.206.234.0/24
Signature Algorithm: sha256WithRSAEncryption
64:bd:7c:a4:6c:a8:81:ed:0a:52:07:d2:ef:df:0c:a9:8b:45:
1e:db:7a:2f:c8:24:8c:83:fc:9f:68:86:88:89:6a:19:82:14:
54:b7:e0:3e:3d:c5:ad:3b:6c:0e:41:15:53:ea:ed:7b:a1:67:
76:69:10:13:23:df:3f:24:70:11:40:99:c2:33:26:1d:b7:47:
97:f8:21:36:a9:a6:a5:ba:97:23:c9:1f:25:9b:f9:0f:34:af:
2c:62:74:37:ba:f9:34:a2:aa:19:04:ce:ec:29:55:ac:79:87:
6b:be:fe:47:ab:84:66:f9:70:f3:39:9a:cc:fa:dd:c8:65:59:
e1:78:52:c7:9e:93:cf:bf:78:c1:f2:96:73:5f:2e:da:83:57:
a9:3d:93:cb:f7:f6:77:15:dd:98:fc:74:d4:e2:2d:7b:15:3e:
81:8b:9b:36:98:f7:d5:2a:79:e9:9b:d7:67:58:ae:a2:7c:21:
2f:5a:51:e5:b4:37:ca:43:5c:52:0b:ea:1c:b0:0a:4c:7c:7c:
14:65:e0:29:5a:4f:5a:62:5a:cb:da:16:1c:65:c4:71:34:33:
45:05:6e:da:6c:3f:9d:b1:51:c6:6e:09:2a:60:c0:79:25:6c:
9a:63:90:34:89:6c:19:05:be:4e:9d:2e:3b:7e:9b:d6:0a:2a:
8d:34:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org