Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/dgp2xFTX7ueLTMmsH7XIrd2-OhE.roa
File: dgp2xFTX7ueLTMmsH7XIrd2-OhE.roa (raw, json)
Hash identifier: Ozaq5MXCLjxiRuLKWJ3ibbbyQa8b/OADoC5hpRJVxRg=
Subject key identifier: 76:0A:76:C4:54:D7:EE:E7:8B:4C:C9:AC:1F:B5:C8:AD:DD:BE:3A:11
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183D0A113A18A41D23A8ADAD7E343DCB7AF
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/dgp2xFTX7ueLTMmsH7XIrd2-OhE.roa
Signing time: Thu 13 Oct 2022 09:16:00 +0000
ROA not before: Thu 13 Oct 2022 09:16:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
194.104.156.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
45.146.80.0/23 maxlen: 24
45.149.186.0/23 maxlen: 24
194.105.21.0/24 maxlen: 24
192.166.82.0/24 maxlen: 24
192.166.83.0/24 maxlen: 24
193.176.128.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.142.4.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
45.158.10.0/23 maxlen: 24
45.158.8.0/24 maxlen: 24
45.158.8.0/23 maxlen: 23
192.166.114.0/24 maxlen: 24
195.206.230.0/24 maxlen: 24
45.153.4.0/23 maxlen: 24
45.153.4.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
45.153.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:a1:13:a1:8a:41:d2:3a:8a:da:d7:e3:43:dc:b7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 13 09:16:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=760a76c454d7eee78b4cc9ac1fb5c8adddbe3a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:34:dc:a8:7d:5c:c1:5d:1a:a1:a4:50:d2:
dd:3a:86:b9:17:f6:73:80:6e:e4:09:dd:ea:72:90:
c2:17:2b:b6:04:ca:0c:a1:21:15:de:57:eb:37:ff:
a2:fd:9b:58:f5:18:85:7a:9b:bc:21:c8:21:3d:47:
d7:b3:04:11:dd:e8:c7:d7:bb:98:64:d6:87:0b:05:
04:35:be:23:2a:d0:55:59:c4:28:bc:bd:0f:1b:12:
41:c2:d6:51:be:33:f8:6b:57:51:32:16:b7:cc:27:
aa:d9:c9:6a:e8:4c:bc:44:d4:01:02:1a:d9:29:39:
a5:21:e4:dc:88:f2:5b:86:e0:5a:a9:a8:9d:77:6b:
21:0a:d8:35:71:b4:9e:19:5b:78:78:fd:94:9b:1f:
25:17:10:bd:99:b6:2d:f1:86:16:a3:44:32:81:57:
4d:2a:b6:2e:47:b6:a1:f8:12:72:e4:39:63:4b:47:
89:89:0f:1d:4b:2f:3b:f3:3c:d9:85:83:76:df:92:
e9:a9:00:7a:43:20:35:b9:16:89:3a:de:df:c2:7b:
f8:f1:26:29:f9:34:34:1e:62:7b:83:76:05:b5:35:
a0:64:f7:5b:4d:12:b2:f5:05:1c:a5:74:5d:3d:a9:
ef:cd:28:e7:20:79:4e:bf:0d:ae:ee:74:48:b4:e5:
1b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0A:76:C4:54:D7:EE:E7:8B:4C:C9:AC:1F:B5:C8:AD:DD:BE:3A:11
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/dgp2xFTX7ueLTMmsH7XIrd2-OhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/23
45.149.186.0/23
45.152.240.0/23
45.153.4.0/22
45.158.8.0/22
147.78.122.0/23
192.166.82.0/23
192.166.114.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.5.148.0/23
194.104.156.0/24
194.105.21.0/24
194.113.226.0/24
195.206.230.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0c:42:0e:7e:4b:00:76:af:b6:f4:ae:a6:c4:64:7b:74:1c:
01:83:62:e4:de:95:1d:55:33:16:b1:98:c6:55:12:50:c1:6d:
a4:7a:5b:43:93:05:5f:64:6a:2d:82:12:5e:20:f0:00:e4:99:
3f:49:db:8c:8c:b7:25:82:f9:d0:5d:9e:0a:5f:29:aa:fd:d1:
0a:ed:5c:2f:d7:4c:8a:74:84:6d:23:71:d0:2e:7f:4d:a6:f3:
37:1f:e0:a8:d1:c7:6e:3b:0e:dc:b0:dc:97:ac:31:af:ab:82:
93:db:43:88:d7:17:da:73:ac:a9:5a:8f:d5:a8:78:61:a7:dc:
dc:87:a9:68:a9:50:72:b0:2b:a0:27:58:9d:54:38:c9:3f:28:
51:6d:db:f4:0b:d6:c3:e1:bf:3a:86:3b:4c:21:b4:fc:30:70:
70:86:ab:ec:12:14:fd:64:25:f3:d0:60:2d:ae:2e:69:4a:34:
eb:f2:b4:e8:2b:10:8f:2b:c9:b8:79:e0:b1:82:2d:34:09:50:
85:b0:3d:18:28:f8:b5:1e:df:1b:7f:c4:3c:ff:7a:3a:88:c2:
eb:38:0d:e4:af:89:a2:90:83:af:5e:ea:14:20:25:7c:ca:5a:
fd:aa:df:30:e7:11:c4:93:dd:6d:14:39:61:f5:62:62:21:03:
f7:38:4e:33
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAYPQoROhikHSOora1+ND3LevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMDEzMDkxNjAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjBhNzZjNDU0ZDdlZWU3OGI0Y2M5YWMxZmI1YzhhZGRkYmUzYTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovY03Kh9XMFdGqGkUNLdOoa5F/Zz
gG7kCd3qcpDCFyu2BMoMoSEV3lfrN/+i/ZtY9RiFepu8IcghPUfXswQR3ejH17uY
ZNaHCwUENb4jKtBVWcQovL0PGxJBwtZRvjP4a1dRMha3zCeq2clq6Ey8RNQBAhrZ
KTmlIeTciPJbhuBaqaidd2shCtg1cbSeGVt4eP2Umx8lFxC9mbYt8YYWo0QygVdN
KrYuR7ah+BJy5DljS0eJiQ8dSy878zzZhYN235LpqQB6QyA1uRaJOt7fwnv48SYp
+TQ0HmJ7g3YFtTWgZPdbTRKy9QUcpXRdPanvzSjnIHlOvw2u7nRItOUbTQIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFHYKdsRU1+7ni0zJrB+1yK3dvjoRMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvZGdwMnhGVFg3dWVMVE1tc0g3WElyZDItT2hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQBLZJQAwQB
LZW6AwQBLZjwAwQCLZkEAwQCLZ4IAwQBk056AwQBwKZSAwQAwKZyAwQAwW99AwQA
wY4EAwQAwbCAAwQBwgWUAwQAwmicAwQAwmkVAwQAwnHiAwQAw87mMA0GCSqGSIb3
DQEBCwUAA4IBAQAqDEIOfksAdq+29K6mxGR7dBwBg2Lk3pUdVTMWsZjGVRJQwW2k
eltDkwVfZGotghJeIPAA5Jk/SduMjLclgvnQXZ4KXymq/dEK7Vwv10yKdIRtI3HQ
Ln9NpvM3H+Co0cduOw7csNyXrDGvq4KT20OI1xfac6ypWo/VqHhhp9zch6loqVBy
sCugJ1idVDjJPyhRbdv0C9bD4b86hjtMIbT8MHBwhqvsEhT9ZCXz0GAtri5pSjTr
8rToKxCPK8m4eeCxgi00CVCFsD0YKPi1Ht8bf8Q8/3o6iMLrOA3kr4mikIOvXuoU
ICV8ylr9qt8w5xHEk91tFDlh9WJiIQP3OE4z
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org