Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/RnOxH1I1CY1Zm76t7aX4XSvuhMQ.roa
File: RnOxH1I1CY1Zm76t7aX4XSvuhMQ.roa (raw, json)
Hash identifier: /Ixu1qXu/ip3HPRDuy1ZGIdeDL/OJ2utKm5mweIJOfM=
Subject key identifier: 46:73:B1:1F:52:35:09:8D:59:9B:BE:AD:ED:A5:F8:5D:2B:EE:84:C4
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184523DDA44386D87237BB73410F4510806
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/RnOxH1I1CY1Zm76t7aX4XSvuhMQ.roa
Signing time: Mon 07 Nov 2022 13:18:16 +0000
ROA not before: Mon 07 Nov 2022 13:18:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 193.161.245.0/24 maxlen: 24
193.151.182.0/24 maxlen: 24
45.142.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:52:3d:da:44:38:6d:87:23:7b:b7:34:10:f4:51:08:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 7 13:18:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4673b11f5235098d599bbeadeda5f85d2bee84c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:91:58:a3:5c:bb:12:d8:de:b4:51:52:68:
74:d4:29:f3:68:9b:ac:03:10:4d:3d:da:c5:11:8d:
2a:0b:75:fc:df:c3:64:ac:98:0f:d5:8c:d4:53:0f:
67:92:0a:9c:70:e0:de:25:70:47:59:e3:af:1d:b9:
57:56:04:cb:ae:70:81:c1:46:f4:55:6c:76:0b:2c:
9c:d2:67:a1:b9:be:32:9e:59:0c:b8:04:39:25:83:
74:3e:d6:81:db:b1:f8:79:24:72:2c:04:28:ca:25:
7e:2f:88:50:fd:85:e3:55:77:ed:5c:de:03:c2:71:
93:fd:a7:96:c8:71:11:22:b9:bc:3f:3e:ae:ce:97:
7a:4f:4e:6a:c2:f3:2d:3b:df:34:83:db:cb:fc:ed:
28:df:f5:79:e9:c5:1f:e2:7d:a5:4b:19:67:d4:b7:
94:df:1c:b3:ce:d8:2f:0a:92:c2:7c:6f:42:57:c5:
5b:ed:d0:1c:e8:93:21:1b:ab:a0:13:c3:8b:c4:e9:
e9:17:30:f6:a8:97:d3:11:73:e0:52:66:fb:34:8d:
58:dd:67:d1:3c:7f:38:0e:c5:91:fe:c8:99:79:9a:
f4:3f:10:ef:eb:cb:f5:ff:fc:2e:aa:af:3a:ef:3b:
04:6d:f0:a7:d0:b7:40:88:25:d3:29:98:b3:f1:04:
db:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:73:B1:1F:52:35:09:8D:59:9B:BE:AD:ED:A5:F8:5D:2B:EE:84:C4
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/RnOxH1I1CY1Zm76t7aX4XSvuhMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.238.0/23
193.151.182.0/24
193.161.245.0/24
Signature Algorithm: sha256WithRSAEncryption
57:8d:fa:c1:52:6f:16:92:1e:41:19:aa:3f:28:97:33:97:04:
cc:ef:89:72:72:e3:f9:b0:c9:25:3e:61:4c:fe:99:b3:64:69:
f3:df:73:90:56:84:8b:16:85:16:1f:46:8e:d0:27:1b:76:83:
0e:78:d8:16:86:81:00:b6:43:2c:95:c0:01:c5:fc:ff:d1:fa:
df:82:2f:06:9d:76:eb:0e:76:6f:3c:a9:34:d0:7d:51:e6:55:
5b:8e:40:e2:de:0b:7a:67:e0:18:f1:ec:4f:fa:64:8f:ed:19:
cb:6f:cc:42:e6:a9:7f:b8:d7:d9:1c:59:3c:06:52:ff:ff:36:
42:08:c7:53:d3:fb:50:98:e2:ac:5a:72:bb:fe:97:d0:45:b5:
d8:83:ed:4f:b6:97:c6:a0:dd:fd:90:ce:2f:d8:5a:a9:04:a4:
9d:5c:7b:cf:38:0c:82:aa:97:54:f3:8c:e5:2f:13:c4:10:09:
ad:12:24:5e:ac:70:72:a3:8a:0f:59:9c:56:b3:70:bb:e9:e6:
5a:3c:58:77:92:fd:81:16:85:69:04:ef:e8:68:ff:ec:36:7a:
94:ad:d3:53:25:c7:3e:7e:3f:5a:72:1a:2c:c6:99:ff:f2:36:
18:19:8e:72:95:ea:8d:79:98:7a:9e:e4:04:2d:c0:da:48:ff:
29:f8:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org