Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/SHRe3FVTBdB1BzOFZuMJVBiLHcQ.roa
File: SHRe3FVTBdB1BzOFZuMJVBiLHcQ.roa (raw, json)
Hash identifier: wgXgTDol1Del8983ZE5Z5a+zJMqu840lGSEpncWFgE4=
Subject key identifier: 48:74:5E:DC:55:53:05:D0:75:07:33:85:66:E3:09:54:18:8B:1D:C4
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01838CC02F728439D41BA290D52AEB97075B
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/SHRe3FVTBdB1BzOFZuMJVBiLHcQ.roa
Signing time: Fri 30 Sep 2022 04:55:48 +0000
ROA not before: Fri 30 Sep 2022 04:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
194.104.156.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
45.149.186.0/23 maxlen: 24
194.105.21.0/24 maxlen: 24
192.166.82.0/24 maxlen: 24
192.166.83.0/24 maxlen: 24
193.176.128.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.142.4.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
45.158.10.0/23 maxlen: 24
45.158.8.0/24 maxlen: 24
45.158.8.0/23 maxlen: 23
192.166.114.0/24 maxlen: 24
195.206.230.0/24 maxlen: 24
45.153.4.0/24 maxlen: 24
45.153.4.0/23 maxlen: 24
176.105.226.0/23 maxlen: 24
45.153.6.0/23 maxlen: 24
45.153.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8c:c0:2f:72:84:39:d4:1b:a2:90:d5:2a:eb:97:07:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 30 04:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48745edc555305d07507338566e30954188b1dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:a7:11:50:99:32:ef:fa:10:78:89:32:c9:
8b:ca:e2:3e:ea:72:cc:57:98:19:33:e6:e0:2c:ad:
4f:28:2e:39:5a:eb:5d:4e:dc:92:7e:0b:6d:14:10:
83:3d:b5:44:e5:d5:f7:cc:85:2d:74:52:f1:45:66:
0f:d5:78:22:42:b3:a7:d5:6d:6b:b6:cc:35:5d:42:
43:c5:21:98:91:54:6b:ea:ec:d1:b2:66:5b:a9:c3:
cc:19:38:22:31:33:1b:f6:79:f8:3d:92:87:20:22:
c7:46:77:a1:0e:c7:26:74:e4:ce:b7:7f:7c:5e:e5:
0f:66:65:1e:1e:55:71:7f:6c:f1:0d:9f:ad:e9:2c:
c1:72:31:5e:1e:e8:07:4f:3e:9d:42:a1:38:82:84:
28:9f:90:87:aa:7e:ef:4c:59:5b:1c:a3:11:29:8c:
6c:70:ed:62:d6:5f:f6:b5:0f:80:7a:d6:3d:95:1a:
6e:ff:f2:b2:2e:a3:d2:64:8e:46:a7:d8:30:6e:a6:
30:f9:2d:78:9c:7d:bc:ca:c0:67:15:91:1d:06:60:
77:4b:28:ec:da:5a:87:7f:c9:5a:7f:63:79:fd:3b:
e2:17:b4:ac:60:c1:28:0f:c6:a7:47:b1:16:ed:e6:
32:b9:52:33:3f:cc:5e:ed:1c:46:30:e8:59:4f:f2:
82:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:74:5E:DC:55:53:05:D0:75:07:33:85:66:E3:09:54:18:8B:1D:C4
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/SHRe3FVTBdB1BzOFZuMJVBiLHcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.186.0/23
45.152.240.0/23
45.153.4.0/22
45.158.8.0/22
147.78.122.0/23
176.105.226.0/23
192.166.82.0/23
192.166.114.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.5.148.0/23
194.104.156.0/24
194.105.21.0/24
194.113.226.0/24
195.206.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:71:76:66:4a:f8:06:85:fc:98:de:bb:12:f5:63:97:52:0d:
7d:97:93:c6:1a:ff:47:63:55:21:a4:6b:24:d4:a9:ef:b3:6c:
1b:3b:72:d2:bd:66:95:9c:a2:51:ef:d8:60:d5:de:36:ac:cc:
8d:a6:ac:2c:50:b5:ff:85:3f:3c:14:3b:6b:dd:9e:b8:84:0d:
ee:4b:c8:54:3c:58:ed:6f:5f:ad:c4:b7:23:8d:93:20:ea:f2:
66:75:ac:84:40:b7:08:fe:8a:8a:75:c0:ab:3c:e0:cc:d4:f0:
5a:ff:54:ba:14:fa:63:ea:55:dd:e8:29:c6:df:e3:fc:ff:f7:
fc:9d:e7:0a:7e:57:f9:82:bb:eb:50:10:90:07:45:d0:45:39:
37:ff:d5:45:8c:ac:74:99:f5:51:ef:40:75:e9:2c:bd:28:25:
37:04:ef:f6:b5:21:17:82:02:9b:22:b6:3c:ff:4e:05:16:f0:
73:91:ac:99:b7:28:22:aa:33:62:3a:e5:01:1d:e0:f6:ac:c4:
42:7c:bb:a6:8c:38:3f:2d:3c:bb:ac:20:d3:19:91:37:b6:a1:
dc:f1:89:7d:ed:07:26:c8:c1:91:e9:c7:d7:8d:41:07:a0:cf:
83:d5:3d:32:74:99:c8:53:af:fd:e6:0d:5e:86:d8:20:e7:9d:
70:7a:61:8e
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAYOMwC9yhDnUG6KQ1SrrlwdbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIwOTMwMDQ1NTQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODc0NWVkYzU1NTMwNWQwNzUwNzMzODU2NmUzMDk1NDE4OGIxZGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj6nEVCZMu/6EHiJMsmLyuI+6nLM
V5gZM+bgLK1PKC45WutdTtySfgttFBCDPbVE5dX3zIUtdFLxRWYP1XgiQrOn1W1r
tsw1XUJDxSGYkVRr6uzRsmZbqcPMGTgiMTMb9nn4PZKHICLHRnehDscmdOTOt398
XuUPZmUeHlVxf2zxDZ+t6SzBcjFeHugHTz6dQqE4goQon5CHqn7vTFlbHKMRKYxs
cO1i1l/2tQ+AetY9lRpu//KyLqPSZI5Gp9gwbqYw+S14nH28ysBnFZEdBmB3Syjs
2lqHf8laf2N5/TviF7SsYMEoD8anR7EW7eYyuVIzP8xe7RxGMOhZT/KCnQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFEh0XtxVUwXQdQczhWbjCVQYix3EMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvU0hSZTNGVlRCZEIxQnpPRlp1TUpWQmlMSGNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQBLZW6AwQB
LZjwAwQCLZkEAwQCLZ4IAwQBk056AwQBsGniAwQBwKZSAwQAwKZyAwQAwW99AwQA
wY4EAwQAwbCAAwQBwgWUAwQAwmicAwQAwmkVAwQAwnHiAwQAw87mMA0GCSqGSIb3
DQEBCwUAA4IBAQCgcXZmSvgGhfyY3rsS9WOXUg19l5PGGv9HY1UhpGsk1Knvs2wb
O3LSvWaVnKJR79hg1d42rMyNpqwsULX/hT88FDtr3Z64hA3uS8hUPFjtb1+txLcj
jZMg6vJmdayEQLcI/oqKdcCrPODM1PBa/1S6FPpj6lXd6CnG3+P8//f8necKflf5
grvrUBCQB0XQRTk3/9VFjKx0mfVR70B16Sy9KCU3BO/2tSEXggKbIrY8/04FFvBz
kayZtygiqjNiOuUBHeD2rMRCfLumjDg/LTy7rCDTGZE3tqHc8Yl97QcmyMGR6cfX
jUEHoM+D1T0ydJnIU6/95g1ehtgg551wemGO
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org