Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/TA6B8MIryljEo8BqZED2E_miqTI.roa
File: TA6B8MIryljEo8BqZED2E_miqTI.roa (raw, json)
Hash identifier: HIdx+b2y28w7QGgn2/lD1OVF1OqGgOxMah3mTwepRB8=
Subject key identifier: 4C:0E:81:F0:C2:2B:CA:58:C4:A3:C0:6A:64:40:F6:13:F9:A2:A9:32
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01847BF80C53636393E326DE0E550041F19A
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/TA6B8MIryljEo8BqZED2E_miqTI.roa
Signing time: Tue 15 Nov 2022 15:46:04 +0000
ROA not before: Tue 15 Nov 2022 15:46:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212335
IP address blocks: 193.176.128.0/24 maxlen: 24
45.142.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7b:f8:0c:53:63:63:93:e3:26:de:0e:55:00:41:f1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 15 15:46:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4c0e81f0c22bca58c4a3c06a6440f613f9a2a932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:92:7e:16:2b:36:0c:ef:a2:61:d3:d7:3a:dd:
81:07:31:1f:d8:c2:71:ec:79:2d:c7:d6:95:40:b7:
4e:44:3d:c9:fd:15:9d:c8:51:e1:e9:52:dc:88:ed:
89:62:c6:5e:0d:14:2d:df:8a:a6:dc:3a:88:59:68:
97:47:a5:a0:aa:44:76:37:9f:b0:dd:12:37:c5:33:
fc:15:68:11:03:8c:44:3a:74:4d:31:5a:15:00:78:
f6:72:ff:cc:7c:d0:61:1b:fd:15:6d:26:38:2e:12:
61:eb:dc:2e:06:69:9c:3b:64:47:c7:37:7b:0a:38:
45:21:f9:fc:8c:82:5c:2a:18:9d:0b:aa:ea:42:4a:
be:44:0d:c4:1c:a5:3d:69:7e:a3:5e:9b:19:80:d8:
39:74:49:d1:f6:f6:51:f0:35:95:74:3a:46:bf:eb:
6e:0c:44:bb:b4:cf:44:b6:6a:af:bb:c9:1a:33:1c:
df:02:5d:38:50:96:8d:64:2b:16:43:2b:2d:58:91:
c4:8c:0c:0b:18:0a:d1:8d:0f:bd:22:2b:f3:6a:95:
08:dd:b3:17:cf:55:e3:35:c5:a3:ad:e8:68:9b:64:
df:9f:f8:44:2c:66:b1:dd:94:f9:e6:03:92:87:df:
9e:90:62:45:3c:fe:84:c0:55:dd:70:a4:fc:d9:34:
5f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0E:81:F0:C2:2B:CA:58:C4:A3:C0:6A:64:40:F6:13:F9:A2:A9:32
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/TA6B8MIryljEo8BqZED2E_miqTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.238.0/23
193.176.128.0/24
Signature Algorithm: sha256WithRSAEncryption
77:05:ee:6f:05:8d:be:94:e2:3e:03:15:59:52:0b:33:f4:14:
d0:bf:d5:43:e0:55:6b:c1:f3:d7:b7:77:74:d7:2d:32:9c:65:
f7:d0:17:87:b5:2c:91:5a:78:ef:48:54:b0:ca:52:bd:29:79:
64:ea:37:3e:5d:8b:67:13:b5:e6:51:b7:cf:97:b1:87:fd:93:
f8:69:ff:76:bb:d9:9d:54:88:a6:5c:2b:45:f0:53:5b:c8:2b:
ee:60:f7:ad:49:da:27:c5:0a:a5:80:f6:e8:a1:1d:31:e8:a9:
96:16:6a:86:36:fe:cc:d8:f6:53:ad:69:0b:9a:ff:38:8c:0a:
d7:bf:4e:4e:f5:91:14:dd:da:c5:6e:53:cf:4a:8e:e8:e9:51:
db:6e:f2:a1:71:87:cd:30:37:df:8b:87:2e:10:cb:2a:ab:4a:
a6:e3:74:a6:7b:20:4a:79:64:f2:62:50:cc:95:23:11:e0:1c:
f1:9e:e9:ee:dd:6f:8b:5f:dd:61:0a:ab:27:62:9d:38:dc:0a:
0e:25:ec:7e:8b:bc:20:83:29:55:73:7b:9e:f7:f0:77:57:28:
23:48:6e:b2:6a:09:e9:bc:49:bb:7f:7b:2f:45:56:68:bb:0d:
80:3f:d9:c2:30:4a:1f:10:49:c2:42:bf:4e:63:02:06:59:8e:
6a:4a:9c:60
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYR7+AxTY2OT4ybeDlUAQfGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMTE1MTU0NjA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzBlODFmMGMyMmJjYTU4YzRhM2MwNmE2NDQwZjYxM2Y5YTJhOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5J+Fis2DO+iYdPXOt2BBzEf2MJx
7Hktx9aVQLdORD3J/RWdyFHh6VLciO2JYsZeDRQt34qm3DqIWWiXR6WgqkR2N5+w
3RI3xTP8FWgRA4xEOnRNMVoVAHj2cv/MfNBhG/0VbSY4LhJh69wuBmmcO2RHxzd7
CjhFIfn8jIJcKhidC6rqQkq+RA3EHKU9aX6jXpsZgNg5dEnR9vZR8DWVdDpGv+tu
DES7tM9Etmqvu8kaMxzfAl04UJaNZCsWQystWJHEjAwLGArRjQ+9IivzapUI3bMX
z1XjNcWjrehom2Tfn/hELGax3ZT55gOSh9+ekGJFPP6EwFXdcKT82TRfkQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEwOgfDCK8pYxKPAamRA9hP5oqkyMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvVEE2QjhNSXJ5bGpFbzhCcVpFRDJFX21pcVRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLY7uAwQA
wbCAMA0GCSqGSIb3DQEBCwUAA4IBAQB3Be5vBY2+lOI+AxVZUgsz9BTQv9VD4FVr
wfPXt3d01y0ynGX30BeHtSyRWnjvSFSwylK9KXlk6jc+XYtnE7XmUbfPl7GH/ZP4
af92u9mdVIimXCtF8FNbyCvuYPetSdonxQqlgPbooR0x6KmWFmqGNv7M2PZTrWkL
mv84jArXv05O9ZEU3drFblPPSo7o6VHbbvKhcYfNMDffi4cuEMsqq0qm43SmeyBK
eWTyYlDMlSMR4Bzxnunu3W+LX91hCqsnYp043AoOJex+i7wggylVc3ue9/B3Vygj
SG6yagnpvEm7f3svRVZouw2AP9nCMEofEEnCQr9OYwIGWY5qSpxg
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org