Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/XD0a_wHuERpHxx282l3qEjevQNQ.roa
File: XD0a_wHuERpHxx282l3qEjevQNQ.roa (raw, json)
Hash identifier: YSiW44pxibc2Pr7WDLnun0cVqm1Ehg7RQRGw1BbBJGE=
Subject key identifier: 5C:3D:1A:FF:01:EE:11:1A:47:C7:1D:BC:DA:5D:EA:12:37:AF:40:D4
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184B2E5BAFF01B8BFF54C92847B5B14BF78
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/XD0a_wHuERpHxx282l3qEjevQNQ.roa
Signing time: Sat 26 Nov 2022 07:45:10 +0000
ROA not before: Sat 26 Nov 2022 07:45:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 193.111.116.0/24 maxlen: 24
141.98.157.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b2:e5:ba:ff:01:b8:bf:f5:4c:92:84:7b:5b:14:bf:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 26 07:45:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c3d1aff01ee111a47c71dbcda5dea1237af40d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9b:53:dc:af:72:63:b7:8c:d7:54:a2:90:58:
ac:56:28:f1:2a:09:41:ba:6f:e8:12:c1:da:40:5d:
19:bd:9e:a7:a7:ee:d4:f5:da:4c:fe:c7:20:25:bd:
b2:fc:6a:9e:15:72:67:57:d5:dd:af:61:6f:58:cc:
dc:b1:5a:e9:16:fa:61:62:fb:2f:78:de:6c:d0:e6:
fd:1b:2e:f9:3a:b1:44:a7:1f:f2:7f:41:88:d3:cb:
f5:6e:d1:3b:bf:25:ce:5f:a7:0e:9f:e2:25:23:ea:
2c:76:61:6a:23:1e:86:d3:9b:ba:c0:aa:8e:27:e9:
d9:3e:05:64:74:df:a6:21:74:a7:74:d9:23:13:91:
3b:b5:42:b0:78:d0:f6:48:5f:a6:e1:72:11:c0:b6:
be:93:89:c8:50:b8:28:e7:54:02:cd:16:94:9f:fb:
47:19:45:de:63:dc:f4:16:9e:c2:f3:24:7b:c5:62:
f7:ab:28:60:6d:37:9c:13:59:01:c3:98:a6:e6:da:
a4:75:ca:6e:d0:64:62:08:6e:ba:9c:1a:6d:f9:58:
f8:18:60:ea:cd:76:21:da:69:b4:36:62:9a:98:3b:
ba:a9:2c:14:9e:ad:80:dd:37:0a:99:75:ad:36:ca:
82:9c:ec:a6:42:d2:c4:5a:38:b4:4c:dc:4f:51:df:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3D:1A:FF:01:EE:11:1A:47:C7:1D:BC:DA:5D:EA:12:37:AF:40:D4
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/XD0a_wHuERpHxx282l3qEjevQNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.157.0/24
193.111.116.0/24
195.20.99.0/24
195.20.105.0/24
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
75:68:e0:4c:45:b9:88:3c:95:9c:fa:26:3e:29:02:63:63:52:
47:15:1a:45:96:c9:e6:ac:08:69:5b:aa:4f:64:f8:12:87:3b:
12:1d:aa:70:be:8a:4c:9a:66:67:e5:ec:07:2d:ef:f6:8a:60:
42:8d:d2:7d:56:77:2f:b0:b0:e8:75:f1:f9:28:2b:95:18:ac:
da:1c:37:ec:05:42:62:fd:1d:d8:b7:34:3b:3a:67:2b:c3:56:
1f:ec:8e:a0:0e:fd:a1:e4:1d:6d:5f:00:f8:86:73:89:0e:cb:
87:c6:2a:85:42:98:0d:e6:85:6f:4e:8b:eb:2c:98:30:7d:ff:
40:45:51:bf:2e:33:33:63:d7:a3:80:80:3d:7b:ae:2b:b2:35:
3b:76:34:07:85:ff:4b:97:fd:82:e3:df:a4:e4:d9:83:2a:13:
ee:a5:ad:1f:a9:1e:3e:48:c2:a3:75:56:48:52:c7:40:1b:7a:
dd:5e:16:71:89:ac:da:f0:eb:03:b5:79:b3:e6:a4:0b:91:e0:
c6:f9:d1:a7:a4:84:a2:fc:6d:c2:9d:54:c9:5b:6f:4b:7a:1d:
3a:ca:2b:b9:f6:ae:19:08:39:2b:72:ee:1f:2a:38:e9:20:6d:
6c:1d:38:78:58:aa:3d:aa:e1:a7:35:c1:69:be:74:4c:df:45:
76:42:ed:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org