Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/YxAwGWjJTF-Tp3Ipz8Ku0Hd-Avo.roa
File: YxAwGWjJTF-Tp3Ipz8Ku0Hd-Avo.roa (raw, json)
Hash identifier: g82dRXXteh3JCHanIjRQGfY7ZoYkgrkUpixdzvtDauQ=
Subject key identifier: 63:10:30:19:68:C9:4C:5F:93:A7:72:29:CF:C2:AE:D0:77:7E:02:FA
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182AD1520817F363E3A722B22670FBD41FE
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/YxAwGWjJTF-Tp3Ipz8Ku0Hd-Avo.roa
Signing time: Wed 17 Aug 2022 18:33:39 +0000
ROA not before: Wed 17 Aug 2022 18:33:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 194.113.227.0/24 maxlen: 24
45.146.80.0/23 maxlen: 24
194.105.21.0/24 maxlen: 24
45.152.242.0/23 maxlen: 23
45.142.236.0/23 maxlen: 24
176.105.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ad:15:20:81:7f:36:3e:3a:72:2b:22:67:0f:bd:41:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Aug 17 18:33:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6310301968c94c5f93a77229cfc2aed0777e02fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:cf:15:d7:f2:56:41:05:e2:5a:3f:dd:b4:
ea:a5:b0:f4:6a:dd:bb:2e:c2:28:5b:0e:e1:9e:c6:
0b:47:88:ec:a2:b5:0e:df:00:04:21:14:65:54:f8:
2c:68:f4:3d:35:d5:5a:ec:43:e0:e3:c0:57:18:9a:
2a:40:fd:90:15:64:8e:4b:62:2a:45:d8:cd:0b:56:
61:32:9d:08:cd:2c:9b:fc:f1:a7:32:6d:6c:aa:4c:
28:7b:c0:93:61:0b:60:1a:3b:df:e7:c9:81:7c:24:
3f:c9:06:9a:33:99:fb:ed:1f:40:bb:38:ca:ad:6c:
12:2b:e6:27:01:3b:d5:e9:7f:67:2f:b1:54:51:f7:
80:67:19:ac:ed:42:74:53:3b:ca:47:8c:f2:27:3d:
5a:5b:43:d1:67:9e:22:65:1e:45:ed:cd:4a:2b:cd:
eb:1c:17:5d:62:a9:0d:c5:13:a4:fc:13:d3:db:7f:
af:7c:a9:bd:87:f1:23:e7:31:23:7c:a4:8d:5a:db:
43:8f:ad:2c:53:2b:e6:54:82:1b:e0:ab:f1:85:5d:
b7:c2:de:ae:89:8c:e2:d8:e0:6f:0f:e5:89:03:81:
19:6b:ce:18:06:be:46:4f:b8:56:d6:c3:b4:14:09:
3a:08:dc:4c:df:86:ae:ca:10:c3:8d:b9:55:34:b6:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:10:30:19:68:C9:4C:5F:93:A7:72:29:CF:C2:AE:D0:77:7E:02:FA
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/YxAwGWjJTF-Tp3Ipz8Ku0Hd-Avo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/23
45.146.80.0/23
45.152.242.0/23
176.105.226.0/23
194.105.21.0/24
194.113.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:38:cd:79:4f:38:d6:6f:fd:9a:ac:8c:be:bc:4f:92:b9:1b:
b9:d7:59:38:f7:5d:4b:af:71:e9:a0:6f:b1:0c:4a:bb:34:c8:
52:39:94:44:2f:86:3a:d7:c0:33:8d:9f:ca:ee:3f:bd:41:1a:
c9:e2:73:03:ef:8d:d0:16:b9:ea:60:aa:88:70:b6:1a:fb:96:
6c:c9:87:4a:96:e6:ff:18:6d:e5:2b:60:79:cf:88:88:b3:09:
61:1c:b2:db:b8:5b:37:c1:b1:65:3c:bf:10:39:ae:9c:1f:e5:
7f:c9:39:4c:e2:05:5e:6d:c4:99:d2:22:cd:4b:80:f7:d9:f1:
8f:ac:98:56:05:e9:af:75:4c:13:33:37:ab:e9:76:00:65:b5:
c3:91:a4:cc:b6:43:80:fa:13:5f:a0:73:e0:39:60:a3:e1:dc:
2c:52:c9:22:9c:76:5b:74:86:42:c5:4e:57:fa:1a:0d:4d:b2:
ff:1e:ef:9d:85:f3:db:0d:e6:9c:2c:da:67:8e:05:fb:6a:0f:
a2:90:97:87:77:2d:2a:5f:25:8e:7d:6d:3d:e4:a3:e9:71:fd:
aa:bb:7d:a8:e7:d6:76:7f:bf:ae:4b:ab:0f:95:52:78:9c:54:
50:1c:1e:cd:2f:a4:ce:12:8a:a7:81:77:3e:11:ba:92:3d:74:
67:ec:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org