Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/QiYdLTTSDhHt1O4Dl-0WHdU-sLM.roa
File: QiYdLTTSDhHt1O4Dl-0WHdU-sLM.roa (raw, json)
Hash identifier: F7+64RNliQTuz4Ok0h+Baqs1STzy/Ovn1vOatGFrg74=
Subject key identifier: 42:26:1D:2D:34:D2:0E:11:ED:D4:EE:03:97:ED:16:1D:D5:3E:B0:B3
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03D32F0B
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/QiYdLTTSDhHt1O4Dl-0WHdU-sLM.roa
Signing time: Tue 08 Mar 2022 07:46:06 +0000
ROA not before: Tue 08 Mar 2022 07:46:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.146.80.0/23 maxlen: 23
45.146.82.0/23 maxlen: 23
152.89.248.0/22 maxlen: 22
193.29.96.0/22 maxlen: 22
141.98.156.0/22 maxlen: 22
193.142.4.0/24 maxlen: 24
194.113.222.0/24 maxlen: 24
176.105.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64171787 (0x3d32f0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 8 07:46:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42261d2d34d20e11edd4ee0397ed161dd53eb0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:b7:81:f8:29:56:3c:a6:6b:0a:0f:dd:78:
02:e2:82:f1:4d:be:3f:53:35:be:5f:01:5c:2b:31:
00:7a:d1:ef:07:8b:6a:9e:de:93:69:3e:de:9b:71:
b9:5e:28:ad:92:ca:e8:92:c2:5a:0d:f3:bb:7b:ac:
66:5b:9b:7a:ae:84:57:2b:99:97:8c:c6:ad:32:a7:
53:eb:8d:98:08:26:12:ff:85:35:de:6b:c6:d9:79:
95:ba:6d:67:d5:17:b7:01:81:56:da:10:eb:ee:40:
9a:51:49:72:0f:1a:46:3e:30:a4:71:70:be:8d:e2:
8c:98:30:c5:41:a1:91:a2:c7:f5:ec:1f:37:44:6d:
07:58:ef:5b:ea:05:52:85:47:e5:60:9e:2d:21:17:
63:71:93:3b:67:78:ad:d2:9a:7b:7b:e0:24:ce:c2:
4a:ca:4c:7a:66:96:7a:52:ab:37:c6:60:34:30:fe:
1f:f6:60:e6:cd:7e:4f:12:04:3a:81:ed:1a:33:fc:
d6:ef:de:11:db:e2:66:06:59:f1:34:9e:c8:f6:b2:
90:da:1e:02:a0:ef:8f:e9:54:06:d3:e0:02:35:e9:
8f:a9:ed:c2:f4:29:5c:4c:71:e2:a9:bd:aa:34:15:
91:35:b7:17:5b:d0:35:43:b6:9f:f2:79:5c:e4:75:
3a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:26:1D:2D:34:D2:0E:11:ED:D4:EE:03:97:ED:16:1D:D5:3E:B0:B3
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/QiYdLTTSDhHt1O4Dl-0WHdU-sLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/22
141.98.156.0/22
152.89.248.0/22
176.105.224.0/22
193.29.96.0/22
193.142.4.0/24
194.113.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b7:26:5e:13:c4:03:c1:fd:e6:bc:7a:dc:e6:ea:f9:5d:ba:
1c:22:3e:a2:64:29:69:d9:fa:e3:36:e6:e8:42:fe:ae:19:5b:
a1:78:c7:9f:27:6f:16:bb:29:f9:0b:99:10:10:39:14:16:85:
9c:68:a3:40:e4:88:31:b0:23:26:96:6f:c4:16:ed:ac:1c:95:
ed:c3:94:53:10:10:35:08:ac:cf:82:de:7e:2e:08:ac:2e:f3:
ba:88:c5:f6:c3:6a:f3:22:40:55:f6:f9:bb:44:f2:b5:d2:6c:
44:69:0c:2b:4c:c4:58:79:c7:2d:c7:1a:98:77:3f:c3:34:9a:
42:19:97:81:1d:be:b1:a0:ee:af:30:52:44:b9:41:c9:24:b7:
f8:3c:11:c3:f0:81:81:7a:b8:69:1b:fc:73:7b:70:51:c6:dd:
88:fa:a2:ed:0d:86:d5:77:52:06:89:d5:c4:42:07:26:d5:f5:
f0:b7:b1:1b:0d:d3:a8:7c:ec:ae:6d:5b:f6:a8:41:ed:ee:2c:
47:8b:ff:70:10:60:e0:a0:b2:e2:16:a7:94:bf:e5:66:ab:66:
7e:87:79:25:a8:2e:cf:9c:f4:75:5e:5e:7b:11:2b:e1:02:a8:
c4:d0:f8:9b:1c:02:b8:ff:8e:b8:f9:07:0a:d5:49:af:66:34:
f1:db:db:38
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIEA9MvCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4
MmVkNGEyZmIxODBkZjVmOTlkNGJmOGM3N2NjOWEwNmVmMjYwNThjMB4XDTIyMDMw
ODA3NDYwNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDIyNjFkMmQzNGQy
MGUxMWVkZDRlZTAzOTdlZDE2MWRkNTNlYjBiMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMe6t4H4KVY8pmsKD914AuKC8U2+P1M1vl8BXCsxAHrR7weL
ap7ek2k+3ptxuV4orZLK6JLCWg3zu3usZlubeq6EVyuZl4zGrTKnU+uNmAgmEv+F
Nd5rxtl5lbptZ9UXtwGBVtoQ6+5AmlFJcg8aRj4wpHFwvo3ijJgwxUGhkaLH9ewf
N0RtB1jvW+oFUoVH5WCeLSEXY3GTO2d4rdKae3vgJM7CSspMemaWelKrN8ZgNDD+
H/Zg5s1+TxIEOoHtGjP81u/eEdviZgZZ8TSeyPaykNoeAqDvj+lUBtPgAjXpj6nt
wvQpXExx4qm9qjQVkTW3F1vQNUO2n/J5XOR1OpkCAwEAAaOCAi0wggIpMB0GA1Ud
DgQWBBRCJh0tNNIOEe3U7gOX7RYd1T6wszAfBgNVHSMEGDAWgBSC7UovsYDfX5nU
v4x3zJoG7yYFjDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2d1MUtMN0dBMzEtWjFMLU1kOHlhQnU4bUJZdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmUvMDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8x
L1FpWWRMVFRTRGhIdDFPNERsLTBXSGRVLXNMTS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUv
MDMwMWJjLWM3ZmUtNDZlOS1iN2EwLTQ1MjZmNjI2M2JjZS8xL2d1MUtMN0dBMzEt
WjFMLU1kOHlhQnU4bUJZdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD
BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAi2SUAMEAo1inAMEAphZ+AMEArBp
4AMEAsEdYAMEAMGOBAMEAMJx3jANBgkqhkiG9w0BAQsFAAOCAQEATbcmXhPEA8H9
5rx63Obq+V26HCI+omQpadn64zbm6EL+rhlboXjHnydvFrsp+QuZEBA5FBaFnGij
QOSIMbAjJpZvxBbtrByV7cOUUxAQNQisz4Lefi4IrC7zuojF9sNq8yJAVfb5u0Ty
tdJsRGkMK0zEWHnHLccamHc/wzSaQhmXgR2+saDurzBSRLlBySS3+DwRw/CBgXq4
aRv8c3twUcbdiPqi7Q2G1XdSBonVxEIHJtX18LexGw3TqHzsrm1b9qhB7e4sR4v/
cBBg4KCy4hanlL/lZqtmfod5Jaguz5z0dV5eexEr4QKoxND4mxwCuP+OuPkHCtVJ
r2Y08dvbOA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org