Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/KJpVO-VWil7CqAgP8ruMZFUfJFw.roa
File: KJpVO-VWil7CqAgP8ruMZFUfJFw.roa (raw, json)
Hash identifier: oW45vBV98SaD2MuQ9y5MXurcz4MbKL1pk5dk+dMVum4=
Subject key identifier: 28:9A:55:3B:E5:56:8A:5E:C2:A8:08:0F:F2:BB:8C:64:55:1F:24:5C
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 04013F1C
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/KJpVO-VWil7CqAgP8ruMZFUfJFw.roa
Signing time: Fri 25 Mar 2022 15:18:23 +0000
ROA not before: Fri 25 Mar 2022 15:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.146.80.0/23 maxlen: 23
45.146.82.0/23 maxlen: 23
193.164.1.0/24 maxlen: 24
152.89.248.0/22 maxlen: 22
193.29.96.0/22 maxlen: 22
141.98.156.0/22 maxlen: 22
193.142.4.0/24 maxlen: 24
194.113.222.0/24 maxlen: 24
176.105.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67190556 (0x4013f1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 25 15:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=289a553be5568a5ec2a8080ff2bb8c64551f245c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:30:ef:93:9d:7c:78:42:67:10:2a:79:98:56:
16:11:55:e1:d7:9a:2b:f9:33:f6:a9:ad:97:98:54:
6e:62:34:d2:3a:6e:ac:e3:47:58:d7:3e:23:64:43:
2a:f6:5f:ae:71:8d:df:72:26:b8:b2:24:14:30:ed:
17:f4:dd:46:06:45:dd:e0:0f:0d:8a:1c:fb:08:41:
79:61:aa:ed:04:8a:aa:6f:02:b8:bb:50:46:60:fa:
e7:57:42:aa:71:87:40:d8:dc:21:3a:97:d3:c5:35:
e8:16:51:03:7e:1e:a2:a5:38:55:d0:f5:67:cc:c8:
66:8a:d6:6b:e8:d3:bb:a6:eb:90:78:ea:17:2d:a1:
85:c0:4e:73:f7:b8:57:0e:dd:a1:5d:dc:1c:82:86:
c3:d4:6b:60:8c:ed:03:d3:6f:dc:c5:4f:f2:c1:86:
f1:a2:68:66:26:ad:a3:6a:6a:a7:89:ab:e6:c1:43:
80:29:f9:f8:92:92:76:6f:e3:6b:11:95:12:a3:68:
c6:96:16:31:79:e9:3e:03:48:50:8c:bd:86:6b:38:
5f:b7:5d:11:01:89:df:f1:47:f0:99:60:f7:50:0a:
c9:1e:74:e8:a4:52:c6:30:7c:f9:89:a7:d9:a3:3d:
47:81:20:9e:77:61:c2:b1:b0:1f:e3:d5:4d:24:9a:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9A:55:3B:E5:56:8A:5E:C2:A8:08:0F:F2:BB:8C:64:55:1F:24:5C
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/KJpVO-VWil7CqAgP8ruMZFUfJFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/22
141.98.156.0/22
152.89.248.0/22
176.105.224.0/22
193.29.96.0/22
193.142.4.0/24
193.164.1.0/24
194.113.222.0/24
Signature Algorithm: sha256WithRSAEncryption
73:0e:5e:d1:6a:7b:dd:e5:96:67:aa:71:43:6a:5a:f3:8a:10:
22:cd:ce:cc:01:3a:98:a4:6d:0c:a6:bd:06:ea:74:b6:67:84:
3f:e7:f3:7f:a4:3b:85:51:cb:08:d1:30:b7:e4:d3:2a:b7:f1:
e7:6e:85:69:82:86:83:87:da:13:4b:60:d9:fa:01:4e:69:a3:
c9:0c:11:d1:d2:73:f1:a4:c8:92:fe:64:25:74:5a:ae:e6:a5:
73:2a:84:93:61:e7:66:3f:81:5c:fc:e1:bb:20:13:24:66:30:
c1:d2:b8:34:87:5e:c6:ba:bc:6b:33:38:c1:fb:92:df:b8:80:
db:94:33:4a:95:1b:b8:73:7d:16:8e:04:91:f6:03:bf:93:ae:
d0:4f:6f:8b:15:4d:a6:3e:59:7d:d7:50:86:d9:a9:1b:e4:f0:
c6:93:05:69:f3:f7:96:f0:3d:e5:65:fa:1e:d9:f2:05:f3:70:
0b:61:eb:23:ac:eb:de:8d:45:01:fd:86:26:19:bb:1f:50:01:
0c:cc:f6:cc:06:4d:34:c9:a1:71:d5:aa:ca:4d:6b:2b:0d:9f:
11:7a:8c:f3:c4:07:1f:ef:71:54:90:70:07:02:77:85:1d:99:
ac:52:51:78:36:39:c0:42:a5:66:4f:3c:c9:3d:45:e2:61:27:
0c:e3:c2:43
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIEBAE/HDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDMy
NTE1MTgyM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjg5YTU1M2JlNTU2
OGE1ZWMyYTgwODBmZjJiYjhjNjQ1NTFmMjQ1YzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ8w75OdfHhCZxAqeZhWFhFV4deaK/kz9qmtl5hUbmI00jpu
rONHWNc+I2RDKvZfrnGN33ImuLIkFDDtF/TdRgZF3eAPDYoc+whBeWGq7QSKqm8C
uLtQRmD651dCqnGHQNjcITqX08U16BZRA34eoqU4VdD1Z8zIZorWa+jTu6brkHjq
Fy2hhcBOc/e4Vw7doV3cHIKGw9RrYIztA9Nv3MVP8sGG8aJoZiato2pqp4mr5sFD
gCn5+JKSdm/jaxGVEqNoxpYWMXnpPgNIUIy9hms4X7ddEQGJ3/FH8Jlg91AKyR50
6KRSxjB8+Ymn2aM9R4EgnndhwrGwH+PVTSSabz8CAwEAAaOCAjMwggIvMB0GA1Ud
DgQWBBQomlU75VaKXsKoCA/yu4xkVR8kXDAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
L0tKcFZPLVZXaWw3Q3FBZ1A4cnVNWkZVZkpGdy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEAi2SUAMEAo1inAMEAphZ+AMEArBp
4AMEAsEdYAMEAMGOBAMEAMGkAQMEAMJx3jANBgkqhkiG9w0BAQsFAAOCAQEAcw5e
0Wp73eWWZ6pxQ2pa84oQIs3OzAE6mKRtDKa9Bup0tmeEP+fzf6Q7hVHLCNEwt+TT
Krfx526FaYKGg4faE0tg2foBTmmjyQwR0dJz8aTIkv5kJXRarualcyqEk2HnZj+B
XPzhuyATJGYwwdK4NIdexrq8azM4wfuS37iA25QzSpUbuHN9Fo4EkfYDv5Ou0E9v
ixVNpj5ZfddQhtmpG+TwxpMFafP3lvA95WX6HtnyBfNwC2HrI6zr3o1FAf2GJhm7
H1ABDMz2zAZNNMmhcdWqyk1rKw2fEXqM88QHH+9xVJBwBwJ3hR2ZrFJReDY5wEKl
Zk88yT1F4mEnDOPCQw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:04 2025 by rpki-client