Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/RKP1A_qZqM8td6xVxo2HpBWHYyE.roa
File: RKP1A_qZqM8td6xVxo2HpBWHYyE.roa (raw, json)
Hash identifier: e5vF8NTPEjOp4ly+5DPM+SW0DjbUiFD3aDuqWMMTxCk=
Subject key identifier: 44:A3:F5:03:FA:99:A8:CF:2D:77:AC:55:C6:8D:87:A4:15:87:63:21
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183DA88B88D0A7BCD0E3C908CC5403317E3
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/RKP1A_qZqM8td6xVxo2HpBWHYyE.roa
Signing time: Sat 15 Oct 2022 07:25:36 +0000
ROA not before: Sat 15 Oct 2022 07:25:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 193.161.245.0/24 maxlen: 24
91.199.168.0/24 maxlen: 24
193.151.182.0/24 maxlen: 24
45.142.238.0/23 maxlen: 24
194.104.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:da:88:b8:8d:0a:7b:cd:0e:3c:90:8c:c5:40:33:17:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 15 07:25:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44a3f503fa99a8cf2d77ac55c68d87a415876321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9f:94:75:ca:62:91:2e:c3:f4:98:73:26:6b:
d5:f1:b6:39:7b:13:8f:e2:28:d2:37:39:ba:03:dd:
fc:90:11:c3:4c:28:f3:c7:d7:5c:76:d8:7c:af:b0:
58:e2:56:af:a5:b3:1f:eb:ce:fd:4a:c4:66:fe:23:
13:db:86:03:8f:c1:d1:dc:ae:01:3e:b1:9b:14:51:
5a:19:ea:4c:90:a5:b2:ec:8b:8f:7e:c7:ca:05:21:
f4:6c:33:7d:2b:77:84:3a:6d:97:45:cb:c3:cc:c5:
6b:c5:7f:c1:90:d3:ab:6f:06:ce:e1:b2:fd:23:5e:
17:1f:d3:54:a7:13:f2:b4:e4:88:6f:b0:c2:ba:07:
56:f8:1e:03:4c:10:c6:12:ce:3e:03:95:37:56:2f:
49:da:83:6d:89:7e:07:3d:a0:ec:8c:7d:6c:1a:bd:
38:82:53:f4:6d:e6:54:2a:9b:60:1f:62:25:5f:f6:
20:8b:69:03:16:9a:6d:27:f5:af:b7:58:d2:f3:0e:
04:9c:86:c6:0d:20:7d:36:87:8d:e6:91:af:b6:b7:
54:29:7a:fc:ee:a2:36:77:82:3d:29:6c:86:36:83:
f5:1d:3b:61:5a:c0:9d:bd:82:1f:76:9a:ef:27:02:
ac:00:fb:27:77:5d:02:a0:81:8f:4d:9e:c5:4f:54:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A3:F5:03:FA:99:A8:CF:2D:77:AC:55:C6:8D:87:A4:15:87:63:21
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/RKP1A_qZqM8td6xVxo2HpBWHYyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.238.0/23
91.199.168.0/24
193.151.182.0/24
193.161.245.0/24
194.104.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:9c:59:7b:31:29:4a:2c:b9:13:ca:8b:b7:bd:78:22:17:ca:
6e:dc:50:73:0a:fc:52:39:70:d0:2d:c6:07:1f:84:6c:47:fc:
f5:d4:86:b6:d6:1e:f1:f6:87:07:10:89:bf:d8:dc:8c:59:ad:
85:0f:07:63:9e:e8:ca:a5:ab:a3:eb:9c:5b:c9:65:cc:f4:67:
19:a8:20:d1:77:ea:05:74:9f:9e:e3:6a:1a:0c:da:5b:20:9c:
e8:18:4d:a6:de:8b:2a:7d:67:dc:2d:51:0b:16:21:b4:22:6b:
d4:9e:df:9e:3c:0b:61:f9:f8:8e:64:62:23:c5:46:db:88:08:
43:e2:bd:40:e3:73:6e:6d:be:0f:48:93:63:72:ee:1b:e5:2c:
f1:e1:9b:8c:e5:63:e6:25:50:ac:9d:b9:31:41:4a:81:c7:8a:
dd:f7:9f:f9:0f:58:ea:85:bf:a6:93:e0:47:40:c1:35:9f:48:
8a:49:a4:b3:a3:6c:9f:49:9c:b7:09:9c:49:76:a6:30:80:41:
7f:62:99:fb:d1:fd:24:42:d4:ef:b3:cd:00:c7:0e:28:c4:bd:
05:b3:22:eb:c6:a2:03:83:ce:54:e1:b1:e5:b0:35:d0:e6:28:
80:b1:fc:62:f7:45:b8:f4:18:e4:8f:ba:db:12:52:d4:17:84:
50:a1:a2:f0
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYPaiLiNCnvNDjyQjMVAMxfjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMDE1MDcyNTM2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGEzZjUwM2ZhOTlhOGNmMmQ3N2FjNTVjNjhkODdhNDE1ODc2MzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5+UdcpikS7D9JhzJmvV8bY5exOP
4ijSNzm6A938kBHDTCjzx9dcdth8r7BY4lavpbMf6879SsRm/iMT24YDj8HR3K4B
PrGbFFFaGepMkKWy7IuPfsfKBSH0bDN9K3eEOm2XRcvDzMVrxX/BkNOrbwbO4bL9
I14XH9NUpxPytOSIb7DCugdW+B4DTBDGEs4+A5U3Vi9J2oNtiX4HPaDsjH1sGr04
glP0beZUKptgH2IlX/Ygi2kDFpptJ/Wvt1jS8w4EnIbGDSB9NoeN5pGvtrdUKXr8
7qI2d4I9KWyGNoP1HTthWsCdvYIfdprvJwKsAPsnd10CoIGPTZ7FT1QssQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFESj9QP6majPLXesVcaNh6QVh2MhMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvUktQMUFfcVpxTTh0ZDZ4VnhvMkhwQldIWXlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBLY7uAwQA
W8eoAwQAwZe2AwQAwaH1AwQAwmieMA0GCSqGSIb3DQEBCwUAA4IBAQC1nFl7MSlK
LLkTyou3vXgiF8pu3FBzCvxSOXDQLcYHH4RsR/z11Ia21h7x9ocHEIm/2NyMWa2F
DwdjnujKpauj65xbyWXM9GcZqCDRd+oFdJ+e42oaDNpbIJzoGE2m3osqfWfcLVEL
FiG0ImvUnt+ePAth+fiOZGIjxUbbiAhD4r1A43Nubb4PSJNjcu4b5Szx4ZuM5WPm
JVCsnbkxQUqBx4rd95/5D1jqhb+mk+BHQME1n0iKSaSzo2yfSZy3CZxJdqYwgEF/
Ypn70f0kQtTvs80Axw4oxL0FsyLrxqIDg85U4bHlsDXQ5iiAsfxi90W49Bjkj7rb
ElLUF4RQoaLw
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org