Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Y8BKsf6--RShBgLSVos6XQIsqMc.roa
File: Y8BKsf6--RShBgLSVos6XQIsqMc.roa (raw, json)
Hash identifier: K64ZlApbJyDXWkJf8vInseDjXW+9hKtOZSdPGCB+v6c=
Subject key identifier: 63:C0:4A:B1:FE:BE:F9:14:A1:06:02:D2:56:8B:3A:5D:02:2C:A8:C7
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018368DEB2C308D50651DFB9C04069280286
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Y8BKsf6--RShBgLSVos6XQIsqMc.roa
Signing time: Fri 23 Sep 2022 05:42:48 +0000
ROA not before: Fri 23 Sep 2022 05:42:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.176.54.0/24 maxlen: 24
193.176.55.0/24 maxlen: 24
45.154.104.0/23 maxlen: 24
45.154.106.0/23 maxlen: 24
91.199.168.0/24 maxlen: 24
141.98.156.0/23 maxlen: 24
147.78.122.0/23 maxlen: 24
147.78.120.0/23 maxlen: 24
45.149.186.0/23 maxlen: 24
45.149.184.0/23 maxlen: 24
45.158.10.0/23 maxlen: 24
45.158.8.0/23 maxlen: 24
45.153.4.0/23 maxlen: 23
195.206.230.0/24 maxlen: 24
195.206.231.0/24 maxlen: 24
176.105.226.0/23 maxlen: 24
176.105.224.0/23 maxlen: 24
195.206.234.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
45.142.236.0/23 maxlen: 24
45.142.238.0/23 maxlen: 24
193.111.116.0/24 maxlen: 24
193.111.117.0/24 maxlen: 24
45.158.170.0/23 maxlen: 24
45.158.168.0/23 maxlen: 24
193.151.182.0/23 maxlen: 24
193.151.180.0/23 maxlen: 24
195.20.98.0/24 maxlen: 24
194.104.156.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
194.105.21.0/24 maxlen: 24
152.89.248.0/23 maxlen: 24
152.89.250.0/23 maxlen: 24
193.29.96.0/23 maxlen: 24
193.29.98.0/23 maxlen: 24
194.147.4.0/23 maxlen: 24
194.147.6.0/23 maxlen: 24
194.5.146.0/23 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:68:de:b2:c3:08:d5:06:51:df:b9:c0:40:69:28:02:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 23 05:42:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63c04ab1febef914a10602d2568b3a5d022ca8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:97:e4:67:1a:b2:8a:b7:d5:03:2f:29:2f:
6a:e3:51:2b:5e:de:7d:08:06:d5:73:30:c3:a9:a8:
2e:76:48:54:25:a0:d4:0e:7b:20:39:fe:01:95:15:
6b:b4:54:20:5f:dc:30:25:c8:46:7d:29:72:c2:54:
42:65:8d:d7:e1:87:34:2c:9b:2e:31:af:f6:3e:25:
b1:7a:4b:bf:26:1d:d4:e0:6b:5b:ce:2c:8b:bd:d1:
cc:76:72:8e:9e:29:ec:49:d5:d8:77:05:65:39:66:
d6:b0:46:8d:72:81:10:2c:9c:03:52:0c:89:77:07:
a2:61:8c:b4:96:9c:78:19:04:3c:b9:89:76:63:46:
4f:45:dc:4a:ba:35:13:10:66:92:b9:8e:84:b1:3d:
9f:62:db:71:30:d3:fa:46:b6:14:37:0f:8f:07:67:
b0:2f:c3:b7:85:0d:3a:f1:bf:9e:a2:49:cb:51:75:
3e:35:e6:c0:b5:50:9c:79:d7:c9:e9:81:2a:92:eb:
2b:c9:1a:40:38:c9:07:ef:cd:19:df:e7:60:c5:91:
3e:90:87:cd:71:7b:5a:75:c4:5f:65:26:8e:f7:35:
dc:4a:ee:9b:10:33:4b:d6:88:4d:4f:10:d8:5a:0d:
c9:76:93:b3:8a:61:89:ba:7a:2b:6c:39:07:98:38:
ed:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C0:4A:B1:FE:BE:F9:14:A1:06:02:D2:56:8B:3A:5D:02:2C:A8:C7
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/Y8BKsf6--RShBgLSVos6XQIsqMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/22
45.149.184.0/22
45.153.4.0/22
45.154.104.0/22
45.158.8.0/22
45.158.168.0/22
91.199.168.0/24
141.98.156.0/23
147.78.120.0/22
152.89.248.0/22
176.105.224.0/22
193.29.96.0/22
193.111.116.0/23
193.142.22.0/24
193.151.180.0/22
193.176.54.0/23
194.5.146.0/23
194.104.156.0/24
194.104.158.0/24
194.105.21.0/24
194.147.4.0/22
195.20.98.0/23
195.20.105.0/24
195.206.230.0/23
195.206.234.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:dd:34:8f:eb:34:99:08:ad:fe:34:23:8d:4a:a6:e4:10:1d:
03:6c:03:e7:0a:16:be:f5:fe:79:18:21:01:08:0b:b3:e6:ae:
a5:8f:ae:0a:86:de:9b:27:fd:37:18:8f:ba:37:61:61:3a:2a:
f7:e5:34:94:89:a9:00:5d:b7:14:53:76:fe:96:37:db:33:31:
8d:79:62:25:06:c6:3c:f4:c8:f0:e2:82:d2:8f:b3:96:ad:d4:
f7:c9:58:25:fc:51:4a:97:f0:2e:a0:7b:f6:c3:da:f2:ba:73:
f9:d5:9f:ca:1f:cf:73:d2:f8:90:b6:4b:cd:1a:69:4b:0d:db:
a9:d3:cd:24:4f:6b:f6:ef:b5:73:8c:63:11:24:9a:7b:a9:aa:
4e:a4:85:a9:25:a9:0d:22:44:1f:25:47:6b:a0:52:aa:ed:fc:
99:a2:d6:af:fe:c1:89:fd:6d:88:98:f8:50:7b:97:4d:5e:48:
1a:1c:38:fd:8b:82:d3:e5:b0:a7:56:3a:4f:72:a7:67:0c:eb:
78:6b:ac:f1:21:5a:78:b8:b3:67:92:92:c3:8b:5c:64:b0:68:
01:7b:3b:f7:a9:cd:c1:39:d8:6a:80:0c:b4:a7:9e:33:e5:d3:
f3:2f:62:91:33:0a:83:21:f2:88:c6:57:3b:63:61:a2:26:49:
bb:9d:7e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org