Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/c9Y01EsN7x7S9Fsrnsj4u25OyD4.roa
File: c9Y01EsN7x7S9Fsrnsj4u25OyD4.roa (raw, json)
Hash identifier: O5RoSZJWH5Z8GjPEQy4qQcb2i/UlHu78kXg/lMYg7Qs=
Subject key identifier: 73:D6:34:D4:4B:0D:EF:1E:D2:F4:5B:2B:9E:C8:F8:BB:6E:4E:C8:3E
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183D483E1FDB8704F6E4936CF14AFF5AD60
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/c9Y01EsN7x7S9Fsrnsj4u25OyD4.roa
Signing time: Fri 14 Oct 2022 03:22:36 +0000
ROA not before: Fri 14 Oct 2022 03:22:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
194.104.156.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
45.146.81.0/24 maxlen: 24
45.146.80.0/24 maxlen: 24
45.149.186.0/23 maxlen: 24
194.105.21.0/24 maxlen: 24
192.166.82.0/24 maxlen: 24
192.166.83.0/24 maxlen: 24
193.176.128.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.142.4.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
45.158.10.0/23 maxlen: 24
45.158.8.0/24 maxlen: 24
45.158.8.0/23 maxlen: 23
192.166.114.0/24 maxlen: 24
195.206.230.0/24 maxlen: 24
45.153.4.0/23 maxlen: 24
45.153.4.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
45.153.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d4:83:e1:fd:b8:70:4f:6e:49:36:cf:14:af:f5:ad:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 14 03:22:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73d634d44b0def1ed2f45b2b9ec8f8bb6e4ec83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:f9:44:14:93:88:75:20:41:7a:7a:13:2f:
e0:2f:5e:85:bc:1a:fc:0e:2f:c7:80:df:63:48:4b:
f9:14:fb:f5:f3:2d:1b:31:5d:be:b9:31:a4:9c:75:
eb:16:3b:9c:64:76:63:97:9f:b8:bc:7f:c9:c0:7b:
04:34:ea:8f:a1:99:4f:4d:09:b1:ab:64:70:b7:64:
4f:c8:18:5f:33:97:6d:08:fe:1e:5a:ab:f8:43:ad:
f6:d2:96:7a:45:27:7e:26:02:b4:a4:cf:50:d7:84:
51:98:d9:fa:62:4b:48:91:a0:9e:d8:ef:18:54:a6:
3d:6a:5b:62:c8:92:be:76:71:46:ec:f4:de:70:49:
d2:4e:89:0d:1d:c6:7e:18:87:c9:18:05:a0:bc:1b:
d3:63:f4:04:bc:81:01:98:16:07:00:c1:b6:b0:3a:
f4:f5:be:da:14:19:31:d4:93:11:35:47:e4:c1:45:
2a:da:59:35:d8:89:af:f0:93:f0:4c:a8:f2:5c:5c:
df:ad:5d:6b:02:2b:1b:9c:0f:2c:6a:42:d9:0d:6d:
2c:0e:e8:8c:0f:09:42:39:f1:ed:96:2a:db:a5:a7:
a0:93:ea:c5:f7:fb:ca:ca:28:10:ed:12:82:1b:a3:
9b:93:ae:50:25:cb:0a:e5:f6:57:fd:27:b1:20:7e:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D6:34:D4:4B:0D:EF:1E:D2:F4:5B:2B:9E:C8:F8:BB:6E:4E:C8:3E
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/c9Y01EsN7x7S9Fsrnsj4u25OyD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/23
45.149.186.0/23
45.152.240.0/23
45.153.4.0/22
45.158.8.0/22
147.78.122.0/23
192.166.82.0/23
192.166.114.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.5.148.0/23
194.104.156.0/24
194.105.21.0/24
194.113.226.0/24
195.206.230.0/24
Signature Algorithm: sha256WithRSAEncryption
52:5a:19:75:6f:3f:5e:c9:09:06:f6:57:af:e6:59:62:e7:cf:
aa:0d:55:e6:78:93:dd:c6:5d:7a:4c:27:dd:0a:75:31:b9:ed:
c3:5a:12:b6:ac:32:96:fa:55:f5:a4:1a:f2:4b:62:cf:e8:5e:
ea:c9:45:ec:46:6f:ea:68:64:21:43:69:cd:46:51:93:67:2c:
b1:9b:f5:23:6b:32:b1:91:2d:87:99:51:8d:8c:7b:58:e5:09:
c0:d8:be:d9:83:a1:47:b6:f3:b0:56:a5:ca:32:b5:36:ad:c4:
0c:b3:33:29:d8:24:e2:e1:e2:b9:12:e3:bb:8d:0f:d0:d5:91:
84:7b:7f:bd:6e:f9:fb:85:c8:72:7a:ee:66:4b:03:7a:1c:0a:
39:1a:62:4c:74:75:f1:b9:e9:e2:85:ab:9c:f6:20:33:3d:19:
90:27:51:0f:56:18:e6:4d:83:90:e7:ba:91:05:5f:78:3d:30:
d6:c4:76:fc:06:7a:ae:45:e1:ed:96:67:e2:01:dd:98:c5:12:
a7:56:a9:80:39:b6:f9:5f:36:28:f2:eb:0c:33:d3:cd:a5:ed:
3a:c1:62:89:21:64:f3:6a:bf:8d:ac:b8:53:59:7c:2c:35:98:
13:4c:ca:37:e5:f5:99:ce:02:d8:3c:02:91:d9:e2:bb:fb:91:
b2:33:ae:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org