Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ZKlqfu-Ttd5mp0acXyWK42oIMY0.roa
File: ZKlqfu-Ttd5mp0acXyWK42oIMY0.roa (raw, json)
Hash identifier: jp27eei8GR15HYt2HFDvNlavGTA+BMRSTIFS3b2hNS8=
Subject key identifier: 64:A9:6A:7E:EF:93:B5:DE:66:A7:46:9C:5F:25:8A:E3:6A:08:31:8D
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01833B51E3FCE1B9CF2BCDEF44F941E95BB4
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ZKlqfu-Ttd5mp0acXyWK42oIMY0.roa
Signing time: Wed 14 Sep 2022 09:26:05 +0000
ROA not before: Wed 14 Sep 2022 09:26:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 193.161.245.0/24 maxlen: 24
91.206.2.0/24 maxlen: 24
193.151.182.0/24 maxlen: 24
45.142.238.0/23 maxlen: 24
194.104.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3b:51:e3:fc:e1:b9:cf:2b:cd:ef:44:f9:41:e9:5b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 14 09:26:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64a96a7eef93b5de66a7469c5f258ae36a08318d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:6b:38:08:8e:b6:94:bb:30:56:33:8c:a6:
70:6d:65:62:c9:14:57:a7:29:9a:2d:27:b1:1e:fd:
97:ef:ca:e4:f2:82:0f:70:7a:fd:65:b6:7c:9a:a6:
d8:f6:e1:74:2d:be:31:ff:d5:c5:9b:33:10:a7:98:
bf:42:3b:09:7a:2b:88:6c:e7:8e:68:9b:32:cc:c9:
7c:6a:cc:88:9f:62:92:2e:60:f6:de:17:4d:83:13:
62:bb:7e:c0:a1:b9:0e:92:8c:08:6f:1f:0d:24:d4:
87:9c:a7:4e:7c:df:57:43:53:07:e6:b4:ad:41:ba:
64:08:2d:0c:13:34:ea:83:6c:14:56:85:03:e8:55:
2e:cb:9a:99:ea:8c:17:e9:41:89:d1:8d:e6:0e:12:
b4:c0:ac:a0:c1:9e:ab:5c:84:79:9b:54:87:4d:64:
e1:c7:20:5a:c8:8c:31:3d:31:8c:db:97:55:5b:13:
96:ff:91:2f:9c:5a:c9:ea:5a:c9:e5:e9:f2:aa:1a:
0d:83:ca:26:39:8d:cb:f5:92:ae:ba:01:f3:e8:5f:
ff:f9:0c:2d:56:a5:9a:70:80:06:c0:4a:1b:4c:82:
17:53:92:ed:5b:36:c4:72:7e:08:dc:32:73:b4:7d:
9f:15:4c:a3:c9:40:b8:f6:f7:2d:79:5a:19:16:ab:
5d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A9:6A:7E:EF:93:B5:DE:66:A7:46:9C:5F:25:8A:E3:6A:08:31:8D
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ZKlqfu-Ttd5mp0acXyWK42oIMY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.238.0/23
91.206.2.0/24
193.151.182.0/24
193.161.245.0/24
194.104.158.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:0e:53:fa:1c:69:05:23:41:68:81:46:46:f9:cf:ef:70:3e:
e8:8a:a5:3d:a2:37:32:ef:d4:ed:d9:a1:42:a9:4d:fb:70:52:
e5:5d:c5:4e:e5:dc:8f:1d:8a:05:fc:2b:c2:ca:fb:6d:1e:cd:
20:fe:3a:0a:c8:aa:98:f7:1d:78:62:aa:ae:7e:11:79:29:05:
41:3c:0d:b3:68:7b:7d:93:33:03:87:b6:e0:b1:d1:74:d0:6a:
ba:85:5b:0e:97:ea:d2:fe:d5:c0:4d:31:46:39:02:e3:22:00:
8c:e8:77:24:c8:27:60:f7:eb:de:45:89:df:e7:eb:9e:a2:4d:
3e:97:d6:33:45:2b:52:ed:62:64:78:e6:cc:7e:28:77:20:dd:
6d:02:e1:6c:07:fb:6f:bd:aa:79:d5:57:7a:4b:95:11:63:ac:
74:88:01:73:c4:d5:c4:91:03:fe:75:58:ed:0e:28:59:da:29:
9b:41:8d:12:79:65:59:27:90:9c:cc:78:ae:5f:8d:11:fb:97:
4a:66:a4:71:c5:c5:65:65:50:f7:34:3c:44:de:95:13:d6:43:
49:e5:62:6f:7c:27:de:fa:57:78:15:b5:d8:9c:bc:2c:61:44:
a6:33:f5:ce:25:39:c4:9e:73:d9:95:13:11:ae:f8:76:c3:16:
1c:6e:6f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:27 2025 by rpki-client