Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/PhT08t1x4fIF2Q_dkRX286nl7fM.roa
File: PhT08t1x4fIF2Q_dkRX286nl7fM.roa (raw, json)
Hash identifier: xaKXqsl4oIlJqJmlzlMmuqAgAgKLHIPZk+gJQHQEfRY=
Subject key identifier: 3E:14:F4:F2:DD:71:E1:F2:05:D9:0F:DD:91:15:F6:F3:A9:E5:ED:F3
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182FDB0DEC7511EE34EFEFFEB10D726A047
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/PhT08t1x4fIF2Q_dkRX286nl7fM.roa
Signing time: Fri 02 Sep 2022 10:13:22 +0000
ROA not before: Fri 02 Sep 2022 10:13:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 176.105.225.0/24 maxlen: 24
195.206.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fd:b0:de:c7:51:1e:e3:4e:fe:ff:eb:10:d7:26:a0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 2 10:13:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e14f4f2dd71e1f205d90fdd9115f6f3a9e5edf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:08:0a:4f:d7:d0:f8:78:76:72:ee:44:28:
e8:cd:4f:d9:31:b2:d7:9a:4d:74:d5:45:e4:eb:9c:
88:36:da:83:82:bf:69:39:c6:f6:de:6d:d9:96:3c:
22:51:d9:01:2e:58:f6:12:ed:9c:bd:ce:c4:19:5f:
97:08:8d:2c:0f:01:47:f7:9d:43:8c:fd:75:3a:88:
c4:e8:db:8d:ed:ed:fb:be:dc:d4:ae:8f:b2:60:22:
86:7f:fc:23:1b:b6:36:c3:5f:43:f4:9f:29:39:f5:
48:78:78:2f:4b:20:9a:eb:f2:af:0f:2a:db:fa:01:
6e:f0:bb:58:da:98:a1:fa:ef:94:6d:82:98:a5:e0:
a3:ee:e4:a7:89:88:f7:6c:be:1c:7a:d5:fa:dc:d5:
16:58:b0:78:3f:c1:93:3e:57:11:6f:e9:f1:27:6b:
e6:8b:4a:88:25:3a:80:00:24:4f:47:4f:98:c8:76:
be:0c:bf:3d:5b:fb:de:24:98:09:cc:99:5b:b2:d1:
e5:70:b3:ef:6c:43:5b:f4:c8:70:f7:76:28:55:51:
c7:bd:f5:3e:4f:40:41:03:a7:03:c2:e2:c2:f8:8a:
8c:c3:54:51:72:36:13:c8:49:e7:39:16:49:a4:ef:
7e:93:ed:71:a0:ca:55:54:2a:fe:50:4d:48:9e:66:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:14:F4:F2:DD:71:E1:F2:05:D9:0F:DD:91:15:F6:F3:A9:E5:ED:F3
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/PhT08t1x4fIF2Q_dkRX286nl7fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.225.0/24
195.206.234.0/24
Signature Algorithm: sha256WithRSAEncryption
97:8c:af:a2:3f:15:3a:3b:98:cd:89:0a:35:38:87:2a:ff:56:
e0:41:ae:b2:2d:41:c6:31:6b:67:ac:54:0b:27:9d:18:71:83:
7d:55:32:dc:d4:d5:7d:7c:5c:72:a2:b1:1e:50:8e:23:71:94:
52:70:21:d4:11:93:88:2a:e2:b7:19:64:bc:0d:d6:ac:87:80:
c5:9e:59:20:0c:cc:6b:52:8e:cb:21:26:a9:9f:2c:2e:b9:8b:
34:de:a0:0b:b8:cf:8e:93:56:82:4b:1f:86:9a:f0:76:26:9f:
2e:b3:dc:bf:38:b0:7b:f8:03:7a:7e:db:79:d6:ff:6c:9b:88:
a6:dd:fd:ce:11:59:e8:db:3e:1b:c2:28:1c:97:00:c4:22:03:
ad:94:3d:ab:f6:20:cf:25:3d:9d:17:68:d5:6b:ec:34:76:a4:
67:9d:08:d2:50:99:96:ef:3d:cb:60:7a:2e:cc:eb:f0:7b:0d:
d4:11:cf:60:78:45:d1:c1:fb:72:ed:eb:51:43:3f:34:e7:a9:
02:f0:60:2b:fe:63:98:34:ba:2c:a3:10:b1:5a:e1:fe:b8:13:
64:10:17:cd:7d:2d:fd:56:3b:1d:f1:2e:25:eb:9b:96:44:4a:
02:04:69:8e:df:dd:07:f5:73:41:d2:3a:70:0d:fb:da:1b:a8:
34:d6:ba:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org