Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/V9XzUoEntzZHxxrPT4J1JMDb0So.roa
File: V9XzUoEntzZHxxrPT4J1JMDb0So.roa (raw, json)
Hash identifier: wOksl4gAb6Fq4W7guJqYOT/UUpjbPQcUh0pLqVyn/x0=
Subject key identifier: 57:D5:F3:52:81:27:B7:36:47:C7:1A:CF:4F:82:75:24:C0:DB:D1:2A
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0181D73ED7E8B6C8FDF147608D402C71FFF6
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/V9XzUoEntzZHxxrPT4J1JMDb0So.roa
Signing time: Thu 07 Jul 2022 06:00:28 +0000
ROA not before: Thu 07 Jul 2022 06:00:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.105.21.0/24 maxlen: 24
193.111.125.0/24 maxlen: 24
91.198.66.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.176.128.0/24 maxlen: 24
193.142.4.0/24 maxlen: 24
192.166.114.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
194.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d7:3e:d7:e8:b6:c8:fd:f1:47:60:8d:40:2c:71:ff:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 7 06:00:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57d5f3528127b73647c71acf4f827524c0dbd12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:b8:52:d6:2f:09:8a:5d:aa:86:ca:05:e5:
ee:b5:05:22:56:4a:e0:cb:72:3d:eb:47:96:6a:b2:
81:9a:d2:e6:70:ef:29:e8:bf:71:0f:e0:0e:bc:70:
29:7f:66:9e:3d:c5:fb:3b:08:3a:c6:ae:7b:26:69:
4d:93:26:ef:81:75:f3:c5:cc:59:c6:e2:ef:5f:23:
10:73:c7:3e:ae:4f:73:90:92:7b:16:10:6d:c8:5c:
ec:76:45:c1:91:c3:da:21:27:e8:0a:ad:1a:2b:9c:
55:ea:1c:0a:d4:c7:6c:f4:5f:a4:42:5b:d6:c1:0a:
ee:b4:ce:07:59:d0:50:c9:d3:a5:5a:19:71:f4:e6:
84:18:a3:e6:53:90:ed:c8:2d:c0:b2:5a:2a:28:fa:
7f:9d:b3:b1:d8:35:5d:4b:93:da:0c:c8:0d:69:59:
b0:d1:ba:ad:87:b8:9a:81:78:8d:29:70:a6:27:a0:
84:99:c1:90:65:15:b0:20:06:26:61:9c:08:4c:87:
21:47:0f:bf:11:75:61:ad:bd:2a:49:ad:90:ab:ff:
75:cd:e1:4e:b7:ce:29:c9:57:c6:72:84:ae:59:ee:
17:b9:7e:0a:ac:7f:26:34:0e:f6:a8:c3:a9:da:d9:
e6:b0:37:9e:d9:ee:6b:b7:6e:d9:38:5c:5f:82:d8:
ad:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D5:F3:52:81:27:B7:36:47:C7:1A:CF:4F:82:75:24:C0:DB:D1:2A
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/V9XzUoEntzZHxxrPT4J1JMDb0So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
91.198.66.0/24
147.78.122.0/23
192.166.114.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.105.21.0/24
194.113.226.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:af:f3:b5:b3:f6:17:5f:d2:65:af:49:40:ac:d1:c7:54:9e:
e5:5b:e4:f7:dd:7d:0c:cf:53:89:f2:bc:be:ff:86:f4:85:d5:
e3:bd:d5:7e:45:a9:1f:8d:6d:13:c5:c0:eb:c0:9d:b8:27:a5:
d2:c7:3e:e6:3e:c1:cb:f1:bb:9e:6f:ab:c8:d3:0a:7d:74:de:
96:4b:4b:4e:26:1b:4a:d4:89:fb:58:e6:5e:aa:4d:54:a0:bb:
1b:9e:c6:c3:22:be:c6:6a:4c:f7:33:10:fe:c7:c1:9c:fe:94:
c4:6d:72:e8:1e:c6:e1:d1:8d:7d:c0:91:da:a9:d1:c8:44:d1:
cb:6a:ea:d0:73:5a:df:84:5a:5f:b4:1f:df:f1:83:e9:e5:1a:
23:70:be:5f:a0:6d:b4:d8:2b:84:2a:8b:b6:3f:dd:99:12:6a:
16:69:37:ab:6d:ec:3e:2a:e1:c5:fc:7f:db:d0:ba:b1:d0:cb:
d6:d9:66:80:c4:d9:78:f1:38:a5:14:fe:9a:42:58:aa:37:aa:
33:1b:60:7f:d9:8a:05:a8:49:8e:6b:98:90:b2:8f:06:96:f6:
f4:4a:76:fc:65:31:de:ea:e9:45:46:87:1f:ef:5d:d9:37:e3:
6e:6b:6d:dd:a3:16:a9:fb:de:20:0a:76:c1:6c:28:33:64:5b:
61:e5:e0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org