Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/K59cKAciBt8bLMZpErR5X6kaThk.roa
File: K59cKAciBt8bLMZpErR5X6kaThk.roa (raw, json)
Hash identifier: qtvNxgfgyxeCE0YJqPoGo1jYmub/As80s8bgsNtSyoY=
Subject key identifier: 2B:9F:5C:28:07:22:06:DF:1B:2C:C6:69:12:B4:79:5F:A9:1A:4E:19
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184C4033CE5FD3F1CF104CA517B003B1759
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/K59cKAciBt8bLMZpErR5X6kaThk.roa
Signing time: Tue 29 Nov 2022 15:30:57 +0000
ROA not before: Tue 29 Nov 2022 15:30:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 45.146.82.0/24 maxlen: 24
192.166.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c4:03:3c:e5:fd:3f:1c:f1:04:ca:51:7b:00:3b:17:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 29 15:30:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b9f5c28072206df1b2cc66912b4795fa91a4e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c3:aa:23:5c:ee:b4:a0:67:cb:d0:32:af:6c:
8d:7c:e0:8e:4f:bd:56:44:12:4c:2b:0c:9c:ac:64:
64:19:c3:34:62:f8:68:cd:f2:2c:ac:72:6b:e1:6e:
8c:6b:22:8f:76:20:8c:f9:84:d5:b1:0a:12:97:0a:
99:ef:43:64:77:f3:7e:ee:a1:95:fc:29:b3:5b:84:
dd:56:07:c9:65:3f:fa:84:e7:78:61:48:24:fb:35:
56:c9:14:74:85:aa:64:62:7a:1d:0f:e5:55:6e:04:
32:70:a8:4a:9a:de:7a:26:8e:db:ba:22:05:f4:7b:
10:f5:85:f9:cd:7f:61:37:35:58:f9:a7:66:bd:2d:
23:15:ea:c3:27:fe:e5:37:3e:f5:dd:3c:97:af:d1:
e7:7f:9e:de:3e:9d:54:d0:25:9b:08:c5:3c:9a:db:
b1:8c:d1:d5:04:78:74:59:43:7b:22:5e:85:c5:f0:
3b:23:88:73:1f:8f:34:87:a6:da:ec:ef:02:e7:f3:
75:f9:59:a9:12:ac:57:07:5c:80:38:ec:4b:50:33:
20:72:db:20:95:f9:77:61:80:c2:36:fc:ce:0f:b6:
fd:ce:df:14:99:e2:16:bd:4d:c5:05:c5:ad:11:e7:
e1:cd:c2:7d:15:1b:f9:c5:c4:7b:64:88:69:c2:ed:
72:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9F:5C:28:07:22:06:DF:1B:2C:C6:69:12:B4:79:5F:A9:1A:4E:19
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/K59cKAciBt8bLMZpErR5X6kaThk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.82.0/24
192.166.83.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:5d:d1:70:41:f6:8e:33:ef:b1:dc:2f:99:37:d5:14:5b:16:
85:b0:bd:cc:f8:4e:24:25:95:7c:df:54:b4:63:2a:92:74:a7:
8c:6d:20:23:87:13:66:3d:71:51:ec:5b:0c:9a:b8:be:3c:40:
fb:8e:e2:91:18:fa:4c:44:15:88:f2:4c:0a:b1:43:b4:8c:53:
07:9c:bf:3e:3a:ba:08:e0:83:1e:ce:f5:b8:c7:70:16:93:21:
54:8f:8e:ac:b8:3e:47:a1:e1:23:90:d8:d1:1b:4f:ec:3b:d7:
83:48:5b:b7:2f:2d:ae:b1:47:23:8f:4d:a9:3a:f9:c9:49:88:
2a:b7:66:cb:3f:62:c8:3b:0d:37:08:cb:8f:42:d6:61:31:a0:
36:97:2e:b9:fa:dd:b2:32:6d:c7:4b:2e:12:1d:23:a3:aa:e0:
86:cb:7f:3d:c0:5b:dd:2e:91:2f:0d:93:f9:74:0a:11:24:59:
89:26:7a:ad:e4:88:6b:e7:98:a2:14:c3:5b:26:ae:b3:2b:d1:
26:f1:79:65:65:b2:3c:8c:b6:33:b9:43:05:28:fd:65:7d:97:
e2:e0:cf:34:a4:55:a8:38:19:ef:ff:bd:5d:db:cc:24:c9:8f:
35:e9:11:b1:e5:15:4a:3f:b0:8b:04:51:9e:bd:b6:c2:b6:ed:
73:f7:99:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org