Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/PAlIikk4OwhEsrDY16fsZOZptI8.roa
File: PAlIikk4OwhEsrDY16fsZOZptI8.roa (raw, json)
Hash identifier: HHQ0rXeUrgAmJKO02cOi1SJPtDoBnmvq+JZAl0xv+ho=
Subject key identifier: 3C:09:48:8A:49:38:3B:08:44:B2:B0:D8:D7:A7:EC:64:E6:69:B4:8F
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01821665241534FBDEE76CF5233601679064
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/PAlIikk4OwhEsrDY16fsZOZptI8.roa
Signing time: Tue 19 Jul 2022 12:18:23 +0000
ROA not before: Tue 19 Jul 2022 12:18:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.164.1.0/24 maxlen: 24
45.146.80.0/23 maxlen: 23
45.146.82.0/23 maxlen: 23
193.142.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:65:24:15:34:fb:de:e7:6c:f5:23:36:01:67:90:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 19 12:18:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c09488a49383b0844b2b0d8d7a7ec64e669b48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:82:fe:a2:f2:f2:38:bf:c7:9f:27:a1:94:
48:b9:97:d8:9b:50:57:14:ed:cd:f3:27:f3:6b:4d:
10:b1:f9:87:34:65:3d:60:f0:bb:9d:4d:5f:3c:dd:
68:24:62:7c:c1:51:22:71:4d:da:89:2c:f3:fb:5f:
44:4d:05:ef:80:e7:6c:39:84:13:8a:a9:74:1d:a1:
f5:4d:0c:43:1a:74:54:f2:0b:63:1d:4a:e4:bc:24:
bb:e9:83:11:54:dc:ee:c4:0d:67:3c:aa:74:3c:0b:
76:02:0f:f5:5f:54:dd:74:07:c2:99:a4:52:6e:ac:
25:6e:b9:bc:67:e8:cf:a4:5a:9e:51:1b:cc:cc:82:
fc:3b:0b:5a:8e:37:d7:07:59:ef:31:b5:1d:37:2d:
8e:2a:a0:31:4c:0a:91:6c:42:7b:33:19:e9:2e:4d:
b1:d0:f6:bc:48:37:91:a1:9c:78:3c:63:69:b7:3e:
3a:67:3a:61:71:c0:ea:0e:a7:13:83:1d:1f:57:5f:
10:78:73:dd:a6:d8:84:ed:99:06:54:c2:59:8d:71:
f6:33:76:2c:c9:dd:f3:c3:93:1b:67:9b:2d:af:ba:
86:c3:7f:97:43:2a:59:d1:d6:30:58:04:15:c7:e1:
35:43:a1:6c:45:84:21:aa:7d:d9:c4:98:0b:06:bf:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:09:48:8A:49:38:3B:08:44:B2:B0:D8:D7:A7:EC:64:E6:69:B4:8F
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/PAlIikk4OwhEsrDY16fsZOZptI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/22
193.142.4.0/24
193.164.1.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e5:9c:63:4d:f1:b0:11:10:e8:f7:1b:e6:7a:b9:56:2c:71:
2a:85:7e:f7:43:4a:0c:9c:48:22:68:a6:d0:cb:4d:8c:cc:5f:
8c:b8:2f:70:36:08:36:b4:08:ac:d3:d9:29:c2:cb:80:ac:d9:
74:40:5a:16:db:9e:d7:13:b9:5c:6e:a0:5f:82:92:a7:6b:b0:
1d:0f:7c:a9:09:83:ea:e7:65:31:65:7c:a2:9c:94:f6:3e:aa:
74:6d:00:c0:f5:49:b8:de:53:78:b9:34:5c:6f:7c:a8:6c:26:
f6:c2:90:39:2f:11:d2:44:b7:3d:05:a5:64:ba:e6:8d:ff:77:
b7:90:34:ec:92:08:d2:31:aa:55:1b:28:61:ec:a6:58:40:4f:
4c:40:b3:5d:48:25:64:2e:8e:8c:d8:d7:d7:dd:c4:dc:8e:be:
2c:e7:dd:70:65:37:fc:5a:18:2b:5b:af:6a:e4:6e:c0:ae:db:
b0:1b:1e:9b:f2:dd:7b:c9:09:a1:1a:d4:6e:06:73:e2:f9:91:
28:65:5e:72:49:1f:17:68:c4:48:bd:4a:3f:5d:54:62:68:cb:
6c:23:6d:13:2d:5a:8b:78:81:15:df:22:15:3e:1a:3a:b8:41:
d4:62:cf:97:1e:48:c7:39:9c:2a:ad:c1:83:f4:8d:e0:6b:78:
46:3e:53:a2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYIWZSQVNPve52z1IzYBZ5BkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIwNzE5MTIxODIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzA5NDg4YTQ5MzgzYjA4NDRiMmIwZDhkN2E3ZWM2NGU2NjliNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPmC/qLy8ji/x58noZRIuZfYm1BX
FO3N8yfza00QsfmHNGU9YPC7nU1fPN1oJGJ8wVEicU3aiSzz+19ETQXvgOdsOYQT
iql0HaH1TQxDGnRU8gtjHUrkvCS76YMRVNzuxA1nPKp0PAt2Ag/1X1TddAfCmaRS
bqwlbrm8Z+jPpFqeURvMzIL8OwtajjfXB1nvMbUdNy2OKqAxTAqRbEJ7MxnpLk2x
0Pa8SDeRoZx4PGNptz46ZzphccDqDqcTgx0fV18QeHPdptiE7ZkGVMJZjXH2M3Ys
yd3zw5MbZ5str7qGw3+XQypZ0dYwWAQVx+E1Q6FsRYQhqn3ZxJgLBr9SYwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDwJSIpJODsIRLKw2Nen7GTmabSPMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvUEFsSWlrazRPd2hFc3JEWTE2ZnNaT1pwdEk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZJQAwQA
wY4EAwQAwaQBMA0GCSqGSIb3DQEBCwUAA4IBAQAn5ZxjTfGwERDo9xvmerlWLHEq
hX73Q0oMnEgiaKbQy02MzF+MuC9wNgg2tAis09kpwsuArNl0QFoW257XE7lcbqBf
gpKna7AdD3ypCYPq52UxZXyinJT2Pqp0bQDA9Um43lN4uTRcb3yobCb2wpA5LxHS
RLc9BaVkuuaN/3e3kDTskgjSMapVGyhh7KZYQE9MQLNdSCVkLo6M2NfX3cTcjr4s
591wZTf8WhgrW69q5G7ArtuwGx6b8t17yQmhGtRuBnPi+ZEoZV5ySR8XaMRIvUo/
XVRiaMtsI20TLVqLeIEV3yIVPho6uEHUYs+XHkjHOZwqrcGD9I3ga3hGPlOi
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org