Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/UGljORj2t_YXJwtQ_82NfI-ry_0.roa
File: UGljORj2t_YXJwtQ_82NfI-ry_0.roa (raw, json)
Hash identifier: n/OmoHlkJgQnmKlzA8ygTwOh8MchJ6Zn+DeqJwaqTwQ=
Subject key identifier: 50:69:63:39:18:F6:B7:F6:17:27:0B:50:FF:CD:8D:7C:8F:AB:CB:FD
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0181D823BA641AB5756ADF982D785FE3F96B
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/UGljORj2t_YXJwtQ_82NfI-ry_0.roa
Signing time: Thu 07 Jul 2022 10:10:28 +0000
ROA not before: Thu 07 Jul 2022 10:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.105.21.0/24 maxlen: 24
193.111.125.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.176.128.0/24 maxlen: 24
193.142.4.0/24 maxlen: 24
192.166.114.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
194.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:23:ba:64:1a:b5:75:6a:df:98:2d:78:5f:e3:f9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 7 10:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5069633918f6b7f617270b50ffcd8d7c8fabcbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:97:1b:12:c3:70:72:3d:3e:fa:04:6c:b0:33:
20:68:35:ab:c4:42:40:05:f1:77:75:68:97:14:82:
0b:ea:32:13:23:9a:c3:8e:25:b4:41:7b:01:49:a7:
f0:fc:1b:fb:c2:03:80:17:b8:71:38:09:e7:a8:13:
4f:e3:ec:d5:09:b2:de:2f:71:9e:19:9c:20:11:80:
db:5f:4d:5e:78:cc:63:61:d1:d6:41:6b:9c:42:31:
94:86:8c:35:25:f2:2a:86:ba:80:de:b7:24:c4:af:
13:ee:dd:16:68:55:44:3d:4f:1c:48:58:3e:d1:7d:
ca:22:fb:2d:df:ba:14:09:72:66:ab:5d:19:32:2d:
dd:d2:61:1f:88:a8:e1:22:0e:a0:4d:89:cc:2a:08:
42:cd:5a:7e:9d:08:b2:14:59:09:48:d2:c9:59:29:
65:36:e3:62:a0:f7:41:35:e5:a3:b8:fa:8a:f7:48:
26:b5:e9:39:7c:b0:86:4f:af:f0:3f:dc:d8:2f:9f:
e4:4d:c9:66:e9:9b:b9:c6:2e:58:3d:58:ad:68:8e:
58:ad:c0:22:e2:52:63:63:1a:3b:e4:7d:e4:2d:55:
56:79:8a:06:d9:b9:dd:9e:8b:4b:e4:bf:91:1b:cd:
25:64:9b:c4:ce:38:dc:fc:52:13:02:27:e8:3f:ee:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:69:63:39:18:F6:B7:F6:17:27:0B:50:FF:CD:8D:7C:8F:AB:CB:FD
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/UGljORj2t_YXJwtQ_82NfI-ry_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
147.78.122.0/23
192.166.114.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.105.21.0/24
194.113.226.0/24
Signature Algorithm: sha256WithRSAEncryption
15:2e:58:6a:2f:eb:ce:d3:12:15:a7:3a:92:5f:44:73:33:e3:
38:af:41:e1:de:b0:f1:18:1a:a7:82:7b:cf:89:02:d5:f2:8d:
c6:b6:70:dc:51:85:3f:a1:f8:2f:1b:1e:7b:e3:7c:75:b6:e1:
53:08:da:f1:6a:09:e8:aa:8a:43:e3:0f:4a:47:98:e6:56:4a:
5b:34:a9:fc:11:b4:5a:c7:d0:5c:09:db:a2:7f:78:ad:26:6f:
66:73:b0:c9:9c:47:fd:d1:b4:c1:f5:d2:b4:a8:ed:e3:35:bf:
77:43:91:c9:66:25:39:c7:60:69:e1:b6:64:51:92:a1:43:45:
9e:fd:19:52:a1:5a:b1:cf:ba:36:ff:fb:e8:c0:7b:2d:fc:19:
73:23:65:c2:f3:fb:6e:69:9e:81:af:8a:6b:21:cc:9a:11:ea:
a7:d4:14:a5:1f:bd:e0:e7:1c:82:24:f0:7b:4c:dd:15:7f:c1:
09:b0:f2:ae:4c:e4:2c:b6:d5:81:84:30:df:44:9c:6c:c8:53:
ee:35:ff:6b:4f:d0:66:1e:6a:e7:7e:cb:d1:c7:b0:8c:bc:f6:
78:a9:41:1f:27:11:df:9b:e0:45:51:7d:d5:c2:57:94:2a:dd:
3a:c6:11:91:4d:ea:e1:39:12:62:ad:8f:0c:29:a7:eb:59:be:
e2:2a:b3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org