Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/MaBepkZUUH9XlUsLTydujUahU7I.roa
File: MaBepkZUUH9XlUsLTydujUahU7I.roa (raw, json)
Hash identifier: NFpYN+gf0sjuAmdfC4069UBcXpeDGUzpCxfoASyQ068=
Subject key identifier: 31:A0:5E:A6:46:54:50:7F:57:95:4B:0B:4F:27:6E:8D:46:A1:53:B2
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018418825A9153221CB9C7A96967207E0558
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/MaBepkZUUH9XlUsLTydujUahU7I.roa
Signing time: Thu 27 Oct 2022 08:15:06 +0000
ROA not before: Thu 27 Oct 2022 08:15:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
194.113.226.0/24 maxlen: 24
45.146.81.0/24 maxlen: 24
45.146.80.0/24 maxlen: 24
45.149.186.0/23 maxlen: 24
194.105.21.0/24 maxlen: 24
193.176.128.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
194.147.6.0/23 maxlen: 24
193.142.4.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
45.158.8.0/24 maxlen: 24
45.158.8.0/23 maxlen: 23
45.153.4.0/23 maxlen: 24
45.153.4.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
45.153.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:82:5a:91:53:22:1c:b9:c7:a9:69:67:20:7e:05:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 27 08:15:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=31a05ea64654507f57954b0b4f276e8d46a153b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:18:c6:92:70:90:de:a3:84:ce:91:91:70:
e7:a4:5d:04:fb:b7:a2:74:04:61:7a:ca:f6:a8:98:
4a:80:0a:5f:80:a3:61:bf:ec:c3:4e:26:fb:e8:18:
2f:cf:56:9a:8d:08:bb:2d:59:f5:47:be:b8:a1:df:
a9:f1:bf:2b:7d:c5:d0:55:e3:a0:05:fd:b0:9e:a3:
01:20:14:36:8b:15:13:32:6e:7e:99:59:b1:9c:56:
e2:d3:48:90:d7:d9:2c:26:a2:64:10:95:f3:3a:81:
8e:f2:20:ed:7e:e8:6b:83:81:34:25:ba:5c:a1:fe:
ae:e6:68:71:97:c1:e0:03:ff:2d:01:4c:e9:55:0c:
5e:e7:e8:21:bf:fa:62:a5:63:e3:ed:2d:0b:6d:c2:
ce:c7:f0:69:bd:af:ac:d7:9c:bb:f8:43:51:ec:5f:
9a:23:6c:fc:53:00:aa:07:a3:87:d4:f5:cc:e9:49:
fb:1a:5e:53:02:5a:8d:d8:68:11:2c:72:b5:0a:28:
01:31:a8:a6:ec:ff:a9:88:59:89:25:56:6b:fd:01:
25:b3:20:b4:c4:ea:5b:42:e9:d9:2c:bc:59:14:47:
71:ad:43:ef:c0:a7:e8:91:c8:5c:7d:76:3b:b6:3e:
bf:f4:0d:38:4a:13:68:c0:68:4f:fa:44:53:18:e0:
84:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A0:5E:A6:46:54:50:7F:57:95:4B:0B:4F:27:6E:8D:46:A1:53:B2
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/MaBepkZUUH9XlUsLTydujUahU7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/23
45.149.186.0/23
45.152.240.0/23
45.153.4.0/22
45.158.8.0/23
147.78.122.0/23
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.5.148.0/23
194.105.21.0/24
194.113.226.0/24
194.147.6.0/23
Signature Algorithm: sha256WithRSAEncryption
23:73:6c:f3:25:6b:bd:2e:22:9f:ce:01:04:88:6e:10:bc:c4:
65:64:ba:b2:b8:4d:a2:50:9c:de:9a:af:29:fc:80:45:c2:17:
fb:3f:09:62:7c:4a:9a:25:f4:a9:5a:a2:f8:c4:30:08:32:f5:
b6:dc:4c:3b:9c:2a:a2:bf:cd:80:73:bb:7b:b3:66:0b:8c:fc:
69:e7:2b:c9:87:e2:5d:45:11:e8:01:76:0d:5a:21:8c:a0:15:
3a:aa:0c:4b:b9:77:e7:0f:2f:b9:20:33:5d:87:20:90:32:b2:
7f:08:b0:ed:b4:a7:9a:14:04:4a:0b:3f:24:f0:f5:fb:f6:b5:
d9:8c:d8:71:bc:be:57:af:2d:4a:f9:1e:84:c2:5a:07:b0:63:
5b:0e:30:1a:52:52:f3:3e:52:ae:18:38:63:6f:c0:10:39:5f:
d7:0c:78:5d:45:e7:44:9b:8c:e8:a5:10:95:77:41:b8:0c:72:
2a:f4:aa:66:10:8d:5c:68:1c:21:42:4f:36:b2:95:d3:f8:7a:
37:fa:8f:e8:e4:de:e8:47:a0:d4:f6:e4:a4:60:93:5a:28:5c:
76:e9:8a:ad:31:ef:ab:2a:53:81:34:f5:bf:95:a0:c6:7f:f4:
73:d0:c7:02:e1:79:ac:30:82:d2:1b:c5:c5:a9:c5:10:45:29:
1d:59:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-fra.rpki-client.org