Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/T1G5SzbilZ45a6VWFTvGR1nlI-c.roa
File: T1G5SzbilZ45a6VWFTvGR1nlI-c.roa (raw, json)
Hash identifier: A1jt/hWAafy+ZYQ5KWF+AVahBpehLJbw8XHkteQ0zWY=
Subject key identifier: 4F:51:B9:4B:36:E2:95:9E:39:6B:A5:56:15:3B:C6:47:59:E5:23:E7
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183A6A3A494350DC3C7F90B777908541412
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/T1G5SzbilZ45a6VWFTvGR1nlI-c.roa
Signing time: Wed 05 Oct 2022 05:34:45 +0000
ROA not before: Wed 05 Oct 2022 05:34:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
194.104.156.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
45.149.186.0/23 maxlen: 24
194.105.21.0/24 maxlen: 24
192.166.82.0/24 maxlen: 24
192.166.83.0/24 maxlen: 24
193.176.128.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.142.4.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
45.158.10.0/23 maxlen: 24
45.158.8.0/24 maxlen: 24
45.158.8.0/23 maxlen: 23
192.166.114.0/24 maxlen: 24
195.206.230.0/24 maxlen: 24
45.153.4.0/23 maxlen: 24
45.153.4.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
45.153.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a6:a3:a4:94:35:0d:c3:c7:f9:0b:77:79:08:54:14:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 5 05:34:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f51b94b36e2959e396ba556153bc64759e523e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:22:f2:a8:8d:bc:85:de:c5:f6:c3:52:07:
2f:0b:7e:80:3d:8f:da:37:de:ca:78:c5:7b:a9:d6:
8c:85:44:93:06:11:21:c2:17:d2:1a:56:89:c4:de:
86:21:82:ab:06:b1:37:0b:72:c7:bf:d1:bc:e2:e1:
66:18:ae:fe:d5:2b:f9:35:56:08:e6:c2:51:6c:c5:
ee:17:a9:20:55:b0:4f:70:cd:df:ab:a7:a3:c8:da:
6f:d3:4f:fd:f0:6d:86:97:78:91:5b:fe:8a:5d:32:
ea:6b:df:c6:b1:11:74:f1:b6:62:57:ef:18:d3:c6:
ae:50:f1:53:cf:dc:4f:cc:19:2e:3d:e8:f9:9c:14:
0d:df:49:36:ee:9d:b4:fe:4a:17:6d:69:93:a7:74:
b3:85:85:f4:51:55:c3:0d:d5:01:c5:f4:7c:e9:d7:
3b:53:96:eb:a2:81:a0:0b:7b:de:20:03:2b:dd:1b:
e9:26:43:34:12:9e:d7:9f:e0:f4:98:06:be:ff:04:
27:3d:99:2e:16:6a:e0:ed:92:23:e7:48:97:11:35:
ce:f1:e6:ff:02:db:5e:2b:c9:d7:84:21:04:6a:9f:
80:ba:b3:04:30:4a:20:d2:94:5a:62:8c:9f:82:77:
db:16:38:b0:30:5a:ef:17:9e:b0:cd:8d:ba:ec:3b:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:51:B9:4B:36:E2:95:9E:39:6B:A5:56:15:3B:C6:47:59:E5:23:E7
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/T1G5SzbilZ45a6VWFTvGR1nlI-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.186.0/23
45.152.240.0/23
45.153.4.0/22
45.158.8.0/22
147.78.122.0/23
192.166.82.0/23
192.166.114.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.5.148.0/23
194.104.156.0/24
194.105.21.0/24
194.113.226.0/24
195.206.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:5f:f8:7a:86:59:d2:5c:c9:ef:87:44:30:9f:cf:19:b1:0c:
0d:43:2c:1a:79:7a:7a:21:2e:24:e8:2a:ab:b7:5f:51:d0:63:
1f:e0:ab:c3:3e:a3:ea:85:af:13:c3:13:45:6f:87:96:fb:b6:
ca:8f:53:73:76:8f:fa:fd:f7:00:92:a2:4f:5a:5c:9e:ef:34:
66:7d:52:c9:e4:83:d0:4c:98:70:39:bd:db:4e:f8:1a:d7:a7:
53:1f:ee:05:4f:be:be:b5:4d:67:87:cb:7d:b6:62:20:4d:bd:
99:49:49:1e:3b:13:ab:97:9b:5d:df:57:94:4a:03:10:5b:74:
1e:17:8e:55:b5:3d:52:c3:35:f7:fa:83:0e:b0:dd:2a:13:48:
0e:af:da:5a:cc:d6:35:96:8f:57:a2:34:0a:98:31:8f:a5:24:
fd:8b:a6:5c:86:4a:13:87:79:66:59:a4:e1:ed:3b:dd:6e:92:
d3:52:7c:5f:03:2d:b4:df:4d:18:09:2f:39:e2:7e:17:1c:ab:
75:52:2b:68:8e:c8:31:a4:02:60:87:b8:d8:2d:90:89:12:2a:
6d:27:5b:f7:79:c8:ba:5c:9a:09:69:8f:b0:4d:e3:4f:cc:06:
33:3f:c3:f4:96:af:0d:61:80:fd:07:de:da:77:52:32:8e:57:
e2:3c:36:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:18 2025 by rpki-client