Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/b3Ca_FGItnkwBIVS02o8fOGWKeg.roa
File: b3Ca_FGItnkwBIVS02o8fOGWKeg.roa (raw, json)
Hash identifier: HW51unSt+KMmp+Ysg3y87d4YnqmxEVAeMVJNmGlRlo0=
Subject key identifier: 6F:70:9A:FC:51:88:B6:79:30:04:85:52:D3:6A:3C:7C:E1:96:29:E8
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01845DC5EFABDF0B14CD48E972AB3EC3740B
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/b3Ca_FGItnkwBIVS02o8fOGWKeg.roa
Signing time: Wed 09 Nov 2022 19:02:43 +0000
ROA not before: Wed 09 Nov 2022 19:02:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 45.152.240.0/23 maxlen: 24
195.206.234.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5d:c5:ef:ab:df:0b:14:cd:48:e9:72:ab:3e:c3:74:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 9 19:02:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f709afc5188b67930048552d36a3c7ce19629e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:93:d3:3f:47:0a:10:54:2d:12:37:4a:a9:bc:
65:36:84:41:f3:da:bc:b9:cf:da:75:35:74:85:0f:
be:b5:6b:cf:fc:2d:3d:96:ed:76:f3:57:8a:66:67:
c4:5e:e2:22:b4:e7:bb:e3:81:e2:67:6c:55:22:72:
df:42:e5:c9:73:ec:8e:de:65:12:a4:45:4f:80:fc:
29:97:b4:da:97:82:f8:03:72:90:dd:aa:cf:e1:af:
b4:57:19:59:e9:88:41:08:22:ad:e4:48:27:42:c7:
05:be:07:0a:ee:b1:04:47:ba:e3:94:81:1b:c6:a5:
fe:5e:bb:a8:07:93:90:d3:e0:16:b8:47:15:e6:b3:
b7:12:e2:cc:e1:4f:31:bb:6e:16:fc:43:29:5c:76:
9a:b2:b2:db:8b:72:37:90:6c:f1:fb:02:dd:75:9f:
c3:2f:e1:93:6d:11:ae:ce:66:de:7c:c8:e2:72:90:
80:d0:e9:a2:21:77:14:c5:bd:e9:8e:09:75:33:cb:
18:e7:23:9a:5c:c1:0d:c2:d9:c8:2d:b5:f6:6c:83:
ce:6a:74:78:e9:9e:80:0a:5a:b6:01:ae:de:77:d3:
6e:b0:1d:57:54:84:9b:ff:d1:97:e6:20:ed:29:d8:
e5:b6:ce:42:04:3d:64:ae:7a:c8:11:09:90:38:1f:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:70:9A:FC:51:88:B6:79:30:04:85:52:D3:6A:3C:7C:E1:96:29:E8
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/b3Ca_FGItnkwBIVS02o8fOGWKeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
194.113.226.0/24
195.206.234.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b6:99:0c:be:33:c6:6b:4c:5b:3b:d9:34:0b:2b:36:84:25:
b5:8e:84:06:a4:97:47:89:55:5d:19:07:14:64:d2:18:99:b7:
6e:5e:cf:4a:88:45:ae:26:76:2e:b0:5d:78:96:f1:2e:3f:6b:
68:54:30:68:ec:ec:63:e8:d5:61:54:ad:ce:4c:6a:d4:87:56:
b8:ab:94:d3:b1:3e:f0:fa:53:d0:20:71:4d:1d:93:24:ff:c6:
14:6c:37:34:f4:31:e7:e5:d4:7e:9d:d7:15:40:48:75:01:4f:
50:c3:d2:13:13:c9:c7:47:2b:ad:48:0e:56:8a:c5:17:d6:b8:
3c:6e:72:2a:e3:30:55:52:c0:00:d3:ff:c5:77:6a:d4:0d:8b:
f3:27:61:a5:59:47:5a:6a:d3:98:0c:ce:1e:ba:2b:e1:64:61:
3f:82:65:a5:b1:d1:b2:37:ed:1f:51:3a:47:52:55:92:71:1a:
48:67:4a:c7:98:37:80:3a:75:a1:a4:e7:92:aa:b3:6e:64:e4:
1d:6c:dc:da:ae:f8:e4:e6:33:6e:b2:7f:ea:1b:76:a4:57:9f:
b9:ee:cc:d5:54:98:2f:2b:77:bd:6e:20:70:a2:03:25:e7:0e:
8c:47:7e:93:43:fd:ef:ef:2f:4f:90:87:d2:8f:9c:3f:57:1a:
84:0b:f6:a3
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYRdxe+r3wsUzUjpcqs+w3QLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMTA5MTkwMjQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjcwOWFmYzUxODhiNjc5MzAwNDg1NTJkMzZhM2M3Y2UxOTYyOWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5PTP0cKEFQtEjdKqbxlNoRB89q8
uc/adTV0hQ++tWvP/C09lu1281eKZmfEXuIitOe744HiZ2xVInLfQuXJc+yO3mUS
pEVPgPwpl7Tal4L4A3KQ3arP4a+0VxlZ6YhBCCKt5EgnQscFvgcK7rEER7rjlIEb
xqX+XruoB5OQ0+AWuEcV5rO3EuLM4U8xu24W/EMpXHaasrLbi3I3kGzx+wLddZ/D
L+GTbRGuzmbefMjicpCA0OmiIXcUxb3pjgl1M8sY5yOaXMENwtnILbX2bIPOanR4
6Z6AClq2Aa7ed9NusB1XVISb/9GX5iDtKdjlts5CBD1krnrIEQmQOB849wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG9wmvxRiLZ5MASFUtNqPHzhlinoMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvYjNDYV9GR0l0bmt3QklWUzAybzhmT0dXS2VnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLZjwAwQA
wnHiAwQAw87qMA0GCSqGSIb3DQEBCwUAA4IBAQAmtpkMvjPGa0xbO9k0Cys2hCW1
joQGpJdHiVVdGQcUZNIYmbduXs9KiEWuJnYusF14lvEuP2toVDBo7Oxj6NVhVK3O
TGrUh1a4q5TTsT7w+lPQIHFNHZMk/8YUbDc09DHn5dR+ndcVQEh1AU9Qw9ITE8nH
RyutSA5WisUX1rg8bnIq4zBVUsAA0//Fd2rUDYvzJ2GlWUdaatOYDM4euivhZGE/
gmWlsdGyN+0fUTpHUlWScRpIZ0rHmDeAOnWhpOeSqrNuZOQdbNzarvjk5jNusn/q
G3akV5+57szVVJgvK3e9biBwogMl5w6MR36TQ/3v7y9PkIfSj5w/VxqEC/aj
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org