Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Oi6-9Jl8kXH7QSeXMpwR4kzUpUI.roa
File: Oi6-9Jl8kXH7QSeXMpwR4kzUpUI.roa (raw, json)
Hash identifier: h94v6HoJLUMRIYjshxbRRMX3zKvdqckV5vMM3X/RFck=
Subject key identifier: 3A:2E:BE:F4:99:7C:91:71:FB:41:27:97:32:9C:11:E2:4C:D4:A5:42
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03ACD6E8
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Oi6-9Jl8kXH7QSeXMpwR4kzUpUI.roa
Signing time: Thu 24 Feb 2022 11:08:55 +0000
ROA not before: Thu 24 Feb 2022 11:08:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213035
IP address blocks: 194.147.4.0/24 maxlen: 24
194.147.6.0/24 maxlen: 24
194.147.7.0/24 maxlen: 24
194.147.5.0/24 maxlen: 24
194.5.148.0/24 maxlen: 24
194.5.149.0/24 maxlen: 24
194.5.146.0/24 maxlen: 24
194.5.147.0/24 maxlen: 24
193.151.182.0/24 maxlen: 24
193.151.183.0/24 maxlen: 24
193.151.180.0/24 maxlen: 24
193.151.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61658856 (0x3acd6e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Feb 24 11:08:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a2ebef4997c9171fb412797329c11e24cd4a542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:e4:14:7a:5b:fd:11:19:1c:97:47:28:c8:
30:82:1f:28:38:07:34:87:3f:d9:1b:fa:2a:ae:26:
0a:ad:48:34:3f:86:eb:62:e1:3b:69:1f:dc:5d:14:
8e:fa:b2:48:f8:96:72:d6:a4:85:57:eb:6e:4d:ee:
87:2d:14:a2:00:e9:db:2f:08:d6:c8:fe:d4:29:f6:
c9:9e:dd:65:a7:95:58:93:81:70:eb:ac:47:1b:d2:
37:5b:ec:c5:f7:cb:e9:9c:2f:e0:5a:49:a6:9e:45:
13:30:77:18:df:7d:41:c4:d1:28:11:1c:b4:9d:42:
77:17:77:1c:5a:a9:15:09:2f:9e:9c:c5:07:94:3e:
ff:c2:a2:ea:a2:ae:7f:ea:c1:86:ca:b6:d2:37:ea:
0a:bf:18:8b:b7:a2:4c:18:66:58:5c:c5:d3:2e:86:
11:86:bc:1d:37:92:b9:a8:ba:2e:c8:40:97:3a:ed:
e5:c7:23:50:b7:d0:4d:cc:a8:a6:60:ea:59:14:76:
eb:30:13:64:f4:51:a2:e2:08:e7:58:67:7f:7c:6d:
34:c8:ff:46:34:83:3c:81:7d:6c:8a:ac:f7:df:3b:
80:03:e1:64:07:45:68:21:07:0a:6a:ad:65:53:58:
05:d8:61:12:b3:43:6b:6a:3b:f2:c0:bd:7f:48:f3:
c4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2E:BE:F4:99:7C:91:71:FB:41:27:97:32:9C:11:E2:4C:D4:A5:42
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Oi6-9Jl8kXH7QSeXMpwR4kzUpUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.180.0/22
194.5.146.0-194.5.149.255
194.147.4.0/22
Signature Algorithm: sha256WithRSAEncryption
c9:0c:c4:33:26:2a:62:fb:39:a8:03:d0:16:2d:22:f7:22:5e:
37:ae:c1:40:b7:fc:7e:6f:af:00:eb:16:8e:fd:4a:bb:8d:7a:
0c:18:12:da:2a:ac:bc:43:50:99:c4:65:67:d4:8d:78:b5:e9:
cc:cd:1e:17:75:a3:cc:57:49:57:f9:b6:9b:e1:bf:d2:0a:11:
80:f4:97:59:38:e1:c9:04:83:1c:0f:f8:50:9b:1d:77:12:37:
2e:b4:b4:5f:65:90:cd:e5:05:fb:0d:c1:4f:7b:7a:58:82:f4:
62:08:83:de:d4:df:34:c4:92:5b:dc:9e:32:95:bf:03:7a:ee:
98:f5:fe:13:9b:fe:12:90:57:4e:10:ea:36:c5:2b:d3:f0:81:
a5:72:d8:f0:e4:e5:3c:14:78:f1:3d:c3:85:e4:e2:01:f9:8c:
01:46:39:61:73:0c:64:01:ba:01:c4:81:01:3d:00:f7:a9:5a:
51:d2:01:eb:1f:f5:7a:70:04:79:45:93:77:30:ad:fe:f0:f2:
48:c1:60:08:88:aa:69:ac:32:dd:20:e6:65:77:68:31:e5:0c:
f8:ee:1a:81:8b:5b:29:12:e7:d1:33:4e:0b:8f:24:49:8c:1f:
0f:00:cb:ec:d2:f4:8e:20:e0:33:52:a3:43:5a:da:18:29:b4:
67:6a:0c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org