Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Jt0kwM6rVEFi8dvlP73V_hDrM8E.roa
File: Jt0kwM6rVEFi8dvlP73V_hDrM8E.roa (raw, json)
Hash identifier: CbqcrALjjEz+uAKX1PAHqT8pkYcrPHNi6kQ/OsCPUok=
Subject key identifier: 26:DD:24:C0:CE:AB:54:41:62:F1:DB:E5:3F:BD:D5:FE:10:EB:33:C1
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01823E5D01815AE13C803B44C7096A30593F
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Jt0kwM6rVEFi8dvlP73V_hDrM8E.roa
Signing time: Wed 27 Jul 2022 06:34:18 +0000
ROA not before: Wed 27 Jul 2022 06:34:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.105.21.0/24 maxlen: 24
193.111.125.0/24 maxlen: 24
192.166.83.0/24 maxlen: 24
193.176.128.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.142.4.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
192.166.114.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
194.104.156.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3e:5d:01:81:5a:e1:3c:80:3b:44:c7:09:6a:30:59:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 27 06:34:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26dd24c0ceab544162f1dbe53fbdd5fe10eb33c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:39:aa:4e:31:11:44:c4:7b:75:0a:e9:62:
86:34:33:9f:34:d2:2c:56:14:aa:44:e0:25:b2:cf:
b1:6d:87:4a:ec:3c:11:8f:9b:ef:99:68:a0:ac:49:
78:e3:df:22:52:32:0c:46:b8:3f:50:f0:ec:0b:0d:
de:5b:e9:86:62:9c:6c:4a:cc:f8:03:9a:4e:4f:3a:
43:f8:30:89:b2:8a:7f:a0:9f:70:e2:94:11:b4:b7:
71:3e:3a:43:f1:01:b6:41:c3:65:24:58:ab:c1:0f:
d6:6b:6a:b6:f5:39:7a:d8:5a:6e:03:f3:b3:31:1d:
1d:4c:e0:0b:15:4a:fd:b3:ec:05:ef:4f:61:94:aa:
f2:f8:e5:01:af:02:93:57:4d:9d:3d:cd:80:7c:16:
60:67:63:57:6c:26:47:ea:e7:1d:60:85:56:2c:ea:
09:ff:46:ff:d7:45:43:e6:50:b0:88:76:8a:a9:37:
dc:c0:e0:86:d8:5b:4b:b7:0d:ae:f2:0d:6f:bd:09:
c0:9b:bc:5f:ed:e3:7a:47:97:b2:65:8e:52:36:2a:
d2:3c:cf:37:b4:bf:6c:38:b8:78:1a:81:19:22:95:
43:80:5f:01:25:eb:13:2a:2b:09:03:9b:04:b9:b2:
3f:f3:ef:2c:6c:60:6c:9e:5b:46:0e:13:57:b5:d2:
68:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DD:24:C0:CE:AB:54:41:62:F1:DB:E5:3F:BD:D5:FE:10:EB:33:C1
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Jt0kwM6rVEFi8dvlP73V_hDrM8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
147.78.122.0/23
192.166.83.0/24
192.166.114.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.5.148.0/23
194.104.156.0/24
194.105.21.0/24
194.113.226.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d1:2e:40:e7:31:cd:99:38:1e:dc:59:3b:6c:e0:60:c7:e9:
4f:10:91:37:b1:24:9e:1f:28:ed:03:42:e1:9b:ed:28:63:43:
96:8f:54:50:5c:ab:86:90:1f:e2:88:11:35:a4:1a:6a:bc:57:
1c:40:c0:0c:c7:1a:c2:ae:fc:cc:76:19:08:77:ad:2a:cb:fb:
44:cf:f7:30:ea:15:d2:43:a4:05:d8:42:80:01:13:f2:53:a7:
97:7c:89:e3:96:7a:be:8e:92:94:df:93:aa:e9:4e:ab:0b:63:
82:c6:7e:3e:86:82:9f:cb:87:32:32:71:71:a2:92:10:46:1a:
18:25:17:98:04:55:04:1d:04:a4:58:24:3c:95:c0:56:dc:b1:
26:d1:71:52:92:09:dc:10:43:0b:e2:32:4a:ff:ab:5e:31:0a:
79:07:5e:73:7f:c1:2a:0c:c9:1c:22:94:e6:64:21:dd:94:28:
cd:ff:19:53:bf:78:44:53:7e:b2:35:4f:27:c2:ef:5d:30:82:
ab:51:55:52:77:18:9d:9d:8e:f1:29:18:c1:28:40:53:1f:f2:
c8:8d:89:23:4f:52:bd:68:91:3d:70:1d:06:f2:33:86:93:0a:
13:c7:af:7f:46:a6:23:60:74:a4:93:cb:00:77:e0:ec:6b:e0:
22:06:07:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:12 2025 by rpki-client