Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/KCQRcKbejPSuZPAHQ6zrGKQXkyY.roa
File: KCQRcKbejPSuZPAHQ6zrGKQXkyY.roa (raw, json)
Hash identifier: G3uH7ZvN2pEcu8wfwHOP7xVFQwJHKjrrIbtgtT3qmAQ=
Subject key identifier: 28:24:11:70:A6:DE:8C:F4:AE:64:F0:07:43:AC:EB:18:A4:17:93:26
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03E4E7B5
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/KCQRcKbejPSuZPAHQ6zrGKQXkyY.roa
Signing time: Mon 14 Mar 2022 08:59:47 +0000
ROA not before: Mon 14 Mar 2022 08:59:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
91.198.66.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.176.128.0/24 maxlen: 24
193.142.4.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
194.113.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65333173 (0x3e4e7b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 14 08:59:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28241170a6de8cf4ae64f00743aceb18a4179326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:a9:b7:e9:f2:5c:a6:c9:7b:42:96:c2:72:
08:dd:33:15:78:5f:1c:a9:f5:5c:7d:0f:c4:15:b0:
68:44:36:df:82:16:ec:21:8c:b8:23:06:ee:93:e1:
42:0c:0c:32:45:17:19:95:37:9b:49:84:de:ed:db:
04:04:b2:4e:44:ae:b0:1a:57:81:21:ea:d5:48:0f:
eb:47:3a:89:2f:8f:d6:d3:56:e4:e6:29:d8:41:4d:
f2:d3:ac:27:f8:92:52:52:33:3a:81:a0:ba:e2:f8:
36:6d:8d:81:cc:f0:76:33:93:38:13:4a:fd:b5:48:
fa:7a:a9:41:40:2e:51:cb:b4:1f:6e:9b:5d:30:21:
ae:46:f6:f3:64:30:dd:e9:10:ef:9a:42:0b:7c:42:
7d:00:00:17:9e:15:a3:b6:ca:c7:84:44:57:a2:7f:
ec:43:41:f0:3c:2e:2d:4a:65:61:54:fa:be:1e:a9:
75:5c:04:7a:34:9f:c1:3f:70:00:6a:35:a5:32:4e:
ad:df:dd:fa:93:c7:01:e0:cf:b3:5e:19:e9:6a:d7:
9c:92:81:c4:9c:a6:25:b6:84:05:ac:dc:83:89:e6:
25:b9:c4:59:db:96:11:97:c6:7e:1b:17:22:0a:9a:
1f:59:4c:27:6e:9c:cd:31:00:49:f0:67:e8:8b:21:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:24:11:70:A6:DE:8C:F4:AE:64:F0:07:43:AC:EB:18:A4:17:93:26
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/KCQRcKbejPSuZPAHQ6zrGKQXkyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
91.198.66.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.113.222.0/24
194.113.226.0/24
Signature Algorithm: sha256WithRSAEncryption
03:91:f7:23:c1:71:e2:a7:48:1a:27:92:1e:4c:ca:83:eb:ae:
56:66:e1:9d:0b:5f:c8:7d:34:6e:00:39:97:4f:ce:57:b2:38:
e2:9d:f9:7a:d8:e7:a9:89:09:82:31:05:ab:aa:72:10:c5:92:
b4:d5:07:63:69:a8:37:35:1a:f3:e7:60:f3:a1:8d:62:42:df:
90:77:9b:24:34:10:11:bf:ed:87:e8:c9:ce:0c:fd:e7:cf:bd:
b5:94:30:23:37:3d:ad:64:b6:d0:dc:26:ae:30:6c:df:e1:39:
26:0b:3c:ac:79:51:6d:b3:9b:05:80:4b:5a:8d:9e:5d:a6:ce:
99:2d:39:2c:8d:8a:c2:76:ac:b9:fc:7b:68:6b:a2:09:6c:98:
8e:e4:3d:d8:dc:c8:0f:86:cd:d5:26:e9:4b:0d:53:c8:f8:46:
6f:ca:12:e9:c6:62:8d:ae:f7:d7:52:e3:54:53:37:e3:40:cf:
ac:6b:07:c5:e7:80:76:ee:64:bd:fe:a3:87:99:99:00:f5:c6:
f0:45:0e:1f:25:56:df:64:8e:81:e4:18:37:ce:bb:69:9f:13:
85:99:71:01:d6:db:ee:89:8f:05:82:6d:a1:18:8e:89:52:7c:
d9:c2:c1:1c:b9:a0:54:3e:c9:37:63:54:ca:9c:42:ba:74:6d:
60:fa:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org