Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/PDPT1D90w7BVrVhOmwDOzHgI3G4.roa
File: PDPT1D90w7BVrVhOmwDOzHgI3G4.roa (raw, json)
Hash identifier: 6uhVpurRC2SgN72CGe4CEFUQ0vpYI9Wq6wZPr83tQIQ=
Subject key identifier: 3C:33:D3:D4:3F:74:C3:B0:55:AD:58:4E:9B:00:CE:CC:78:08:DC:6E
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01840B247A7435EAA5384F168F87501C10F6
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/PDPT1D90w7BVrVhOmwDOzHgI3G4.roa
Signing time: Mon 24 Oct 2022 17:57:30 +0000
ROA not before: Mon 24 Oct 2022 17:57:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 193.176.128.0/24 maxlen: 24
45.142.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0b:24:7a:74:35:ea:a5:38:4f:16:8f:87:50:1c:10:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 24 17:57:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c33d3d43f74c3b055ad584e9b00cecc7808dc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b2:44:c7:06:e8:a5:25:17:ba:ad:8a:18:a6:
5e:60:ae:96:b0:8a:65:69:03:bc:dc:7a:a2:aa:0f:
b7:3e:70:07:79:91:38:6e:3b:85:85:32:c7:62:20:
eb:05:03:da:a9:80:63:16:f8:3b:c2:5a:f5:87:7f:
a7:e7:38:55:08:72:e8:b5:27:f1:1f:fb:e1:3f:a5:
7a:2e:70:b3:5e:2f:f0:5a:f0:0c:56:75:0a:72:03:
ca:5a:7b:82:da:d2:88:db:ef:82:ad:0c:3d:1b:26:
b6:8c:78:f0:11:89:10:79:bb:91:be:a6:8d:bf:c8:
f6:fb:3a:a8:11:21:f6:ae:85:21:6b:59:45:ec:25:
9a:8d:38:40:a8:7d:72:2c:de:6e:45:ce:65:57:fa:
b1:df:11:cf:1c:d8:b5:88:17:29:2d:a6:65:b3:b8:
68:9c:6e:2f:e0:8a:e2:62:11:51:01:1e:3e:db:53:
99:3c:a6:e4:03:b9:e7:df:54:9a:d8:10:ab:72:2b:
50:44:a3:cb:d6:e9:0e:b8:99:6c:c5:db:40:e4:f2:
e6:bc:ea:29:95:cf:ae:5f:1d:9d:95:75:9f:f2:70:
65:88:4d:59:b2:31:ac:d6:df:56:92:74:a7:44:e7:
db:92:07:c0:33:82:0b:65:9e:39:b4:3a:94:18:3f:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:33:D3:D4:3F:74:C3:B0:55:AD:58:4E:9B:00:CE:CC:78:08:DC:6E
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/PDPT1D90w7BVrVhOmwDOzHgI3G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/24
193.176.128.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b1:0b:96:0c:e7:df:c0:c4:b1:d3:01:de:e5:95:3a:98:5f:
7b:06:1a:20:b0:b4:70:76:7d:74:38:2a:9e:c8:9b:06:4f:82:
8d:b6:cf:ea:88:f5:a0:f9:13:e4:41:99:8d:f4:21:50:3d:dd:
ea:75:ec:c7:14:ef:12:21:13:09:ed:10:bb:63:3b:17:6e:18:
6c:e1:1d:67:3f:77:13:8d:88:15:76:9a:6d:ac:e3:e9:9f:d9:
c0:fc:55:5b:8b:4b:eb:78:32:ba:0c:b3:05:16:7d:fd:ae:4d:
8a:bf:f8:cf:85:5f:07:40:84:a5:6c:73:27:d4:08:1d:f5:0a:
6e:ed:00:b4:30:a5:f2:f0:00:12:f7:42:c4:8f:1f:7b:63:99:
84:3a:86:f8:85:00:7b:f4:17:00:47:35:4b:e7:27:be:72:0e:
60:e4:5c:4b:a5:e9:72:9f:1b:d4:81:bd:98:62:28:e4:5a:0a:
90:2d:24:d3:5d:df:07:1d:9a:42:1b:d8:9d:d8:04:49:49:57:
4a:6c:70:b2:19:3d:e7:b5:1e:bc:b1:38:49:c5:55:e9:f4:0d:
5d:f9:97:ad:47:eb:6b:d4:d7:d6:7c:0f:57:af:80:9b:38:c3:
cc:27:07:32:65:c0:61:ed:93:b4:71:f0:bd:5f:ae:0d:0e:a4:
1b:49:51:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org