Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/R7HMHxKyuxsBcw7apIeOVVswdLo.roa
File: R7HMHxKyuxsBcw7apIeOVVswdLo.roa (raw, json)
Hash identifier: we+a0iiY+fAWF/pRUA04l7zW9sLRlAv2wA7K5ajbaGc=
Subject key identifier: 47:B1:CC:1F:12:B2:BB:1B:01:73:0E:DA:A4:87:8E:55:5B:30:74:BA
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184060E021088F561418256D333EB9EB8B5
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/R7HMHxKyuxsBcw7apIeOVVswdLo.roa
Signing time: Sun 23 Oct 2022 18:14:52 +0000
ROA not before: Sun 23 Oct 2022 18:14:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 45.149.187.0/24 maxlen: 24
152.89.250.0/24 maxlen: 24
152.89.248.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:06:0e:02:10:88:f5:61:41:82:56:d3:33:eb:9e:b8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 23 18:14:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47b1cc1f12b2bb1b01730edaa4878e555b3074ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:84:cb:ef:b4:07:02:67:91:09:b6:17:c3:
4a:ec:fc:e3:2c:81:ff:a5:78:07:18:9d:2b:c0:46:
b7:09:2a:01:81:63:7b:96:33:36:b3:21:15:db:6b:
74:fa:53:67:12:8b:46:ee:c5:ee:38:8c:4a:ac:7c:
a4:9b:a0:af:a2:44:e9:d5:7b:7b:cf:9d:d5:32:cf:
6d:1e:e3:f8:1e:84:0f:dc:e3:ea:be:9d:4e:dd:dc:
dd:2e:b4:a1:4a:0a:a4:bd:a6:13:48:04:67:e5:23:
43:fd:9e:f3:9a:2b:2a:ec:ac:65:39:42:b1:af:95:
ec:1e:0e:75:f3:db:2b:5d:97:ac:aa:b2:b2:22:f4:
58:fb:25:0e:fe:b2:8b:c6:80:c1:ed:a5:59:dd:8e:
bb:c6:f7:38:e7:20:00:39:dc:b8:cb:c4:b3:b4:c3:
6d:89:b5:ff:79:51:44:b2:5e:c1:cd:4b:75:4b:f3:
09:64:85:a9:24:77:5e:89:b1:91:46:fd:0c:14:9d:
cc:0f:3e:11:dc:08:e3:cf:86:c8:3f:31:8b:85:97:
a5:b2:cf:b0:cc:37:98:bd:cb:c5:3a:e7:cc:c2:54:
32:89:17:e8:60:aa:f2:d5:e5:f1:d6:e0:9d:3c:f2:
a6:da:aa:29:af:f9:58:26:fb:d5:9d:e2:27:38:e5:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B1:CC:1F:12:B2:BB:1B:01:73:0E:DA:A4:87:8E:55:5B:30:74:BA
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/R7HMHxKyuxsBcw7apIeOVVswdLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.187.0/24
152.89.248.0/24
152.89.250.0/24
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
02:fc:8b:ce:48:d4:21:7e:e8:3c:d0:62:2b:a6:16:ab:a8:84:
ac:1f:01:33:33:6a:87:71:e1:b9:84:1c:fb:9a:cb:56:b8:07:
5e:e6:fb:d3:44:af:20:6d:4d:b3:59:bc:d8:ef:4e:86:8d:62:
9c:2f:16:ce:ab:83:0d:1d:5c:66:6a:a2:b8:15:a6:97:6d:19:
4f:4e:1e:20:8e:a1:81:37:30:ec:a8:06:44:8a:b8:d7:95:00:
7a:f2:82:42:10:10:dd:78:7f:b1:60:bc:e2:e6:06:a4:78:08:
35:a9:53:6c:d2:e6:17:1e:54:95:65:c4:f2:c5:12:f0:15:7e:
be:c5:b2:d8:c1:67:b5:88:c2:18:2a:89:57:24:21:fc:20:9f:
a2:1f:fc:c2:3a:e3:c1:cc:4b:fc:54:bf:d0:60:e0:77:9b:71:
d1:7a:30:1a:0b:4b:d4:58:af:13:a5:d2:64:83:70:be:2f:96:
16:fc:2c:1d:a5:ef:67:28:9e:0e:fb:16:48:6d:0e:d1:1b:1c:
30:71:cb:f9:24:91:65:bd:59:5e:f6:35:71:6d:56:2a:91:b8:
7d:a5:18:5c:58:0d:2d:23:73:90:6c:75:3a:b8:c7:b3:cc:f6:
ac:e5:58:1f:10:25:9a:c0:16:26:11:cd:df:d7:44:0b:7c:4b:
6a:2e:22:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org