Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/dju2YVVj6GYW7AieTmvnbH7_JTE.roa
File: dju2YVVj6GYW7AieTmvnbH7_JTE.roa (raw, json)
Hash identifier: jEHWvZR+/wF2ErE1w5h8KHiJV+jyv6JHOkAGvcbDIc4=
Subject key identifier: 76:3B:B6:61:55:63:E8:66:16:EC:08:9E:4E:6B:E7:6C:7E:FF:25:31
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018418825B2196ECA62B876343C83E7ECE44
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/dju2YVVj6GYW7AieTmvnbH7_JTE.roa
Signing time: Thu 27 Oct 2022 08:15:06 +0000
ROA not before: Thu 27 Oct 2022 08:15:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 194.105.21.0/24 maxlen: 24
152.89.251.0/24 maxlen: 24
45.154.107.0/24 maxlen: 24
192.166.114.0/24 maxlen: 24
176.105.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:82:5b:21:96:ec:a6:2b:87:63:43:c8:3e:7e:ce:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 27 08:15:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=763bb6615563e86616ec089e4e6be76c7eff2531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a5:84:f9:2a:3d:4c:33:a8:b0:f5:7b:cb:2d:
79:f3:b7:c6:5b:86:9a:e1:a5:59:94:02:65:a0:ff:
63:98:9e:11:ef:83:3c:f4:af:f3:d9:aa:be:f8:bd:
84:2f:72:0a:75:54:94:bf:d5:22:ca:97:2c:47:c7:
6f:ca:36:d9:78:46:52:08:8a:01:01:0f:4e:6b:ac:
03:54:11:df:0e:96:23:08:18:8c:4c:7b:28:ff:ae:
e2:37:27:44:d0:57:6a:35:b4:b6:b2:b3:5a:57:fc:
bb:45:fe:b8:38:0f:4d:28:55:f8:e7:de:ee:ff:81:
a4:bc:5e:6a:13:ba:aa:6c:6b:12:2e:28:c1:eb:75:
31:f2:67:c7:53:65:7d:a5:9d:51:9d:f3:bf:8c:54:
53:16:ed:ff:1a:80:23:98:82:fa:c5:d3:91:aa:d9:
97:4e:22:b3:23:68:fb:d5:d0:bc:3e:f0:22:90:16:
0e:c1:2f:d0:00:c7:32:ba:d3:65:8e:65:ad:fa:fd:
25:1c:c3:2a:a3:2b:0b:83:23:4e:ee:50:dc:64:f3:
62:44:6e:dd:fa:c0:e0:7c:6c:bd:57:93:e7:4e:83:
08:29:b5:32:e7:cc:40:78:51:de:d1:ff:e5:f1:51:
6b:b0:bc:3d:be:42:b5:af:b3:7c:d6:17:49:e0:56:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:3B:B6:61:55:63:E8:66:16:EC:08:9E:4E:6B:E7:6C:7E:FF:25:31
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/dju2YVVj6GYW7AieTmvnbH7_JTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.107.0/24
152.89.251.0/24
176.105.225.0/24
192.166.114.0/24
194.105.21.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:41:bf:33:ca:7a:a2:3a:af:8f:32:d5:06:d9:0f:e2:ff:fe:
d4:b0:11:2d:5b:83:7d:03:ce:24:bb:83:39:3f:39:d4:4e:41:
64:b8:ff:4b:3a:21:3b:58:6b:7c:b7:72:1d:fa:3b:bd:11:f8:
4e:10:11:fd:4c:34:f7:68:df:91:e4:f2:56:5d:b9:88:a3:8c:
fa:46:92:f0:f7:1b:9c:c1:e5:8d:b0:ec:e5:a6:35:71:55:51:
26:0b:b2:2e:dd:91:d5:1c:b1:d3:1c:87:cf:67:90:a7:d6:74:
32:3e:a8:2a:5e:4d:6a:8d:66:0f:73:e7:4e:a5:d2:57:84:71:
16:9a:b6:60:ad:5e:14:9c:dc:05:b5:e8:ca:7e:da:15:05:2e:
79:c2:01:65:bc:be:fa:4b:2a:bd:60:a3:4d:5a:94:8b:09:f1:
fd:f0:4f:76:87:8b:a3:dd:23:68:08:ee:81:63:c9:d1:ef:94:
42:30:38:17:91:1b:41:bc:f4:2f:f6:b4:17:32:4d:32:0b:99:
56:42:c2:fb:d2:75:3c:f8:b1:a1:fc:9a:f2:d6:cd:df:05:94:
6a:d1:4e:4e:0b:ff:04:73:66:47:b5:d6:94:2e:a5:48:eb:76:
ea:28:45:65:ea:3d:aa:37:83:35:6b:6d:ec:c4:f1:dd:7b:15:
00:e7:1f:7f
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYQYglshluymK4djQ8g+fs5EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZWQ0YTJmYjE4MGRmNWY5OWQ0YmY4Yzc3Y2M5YTA2ZWYy
NjA1OGMwHhcNMjIxMDI3MDgxNTA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjNiYjY2MTU1NjNlODY2MTZlYzA4OWU0ZTZiZTc2YzdlZmYyNTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6WE+So9TDOosPV7yy1587fGW4aa
4aVZlAJloP9jmJ4R74M89K/z2aq++L2EL3IKdVSUv9UiypcsR8dvyjbZeEZSCIoB
AQ9Oa6wDVBHfDpYjCBiMTHso/67iNydE0FdqNbS2srNaV/y7Rf64OA9NKFX4597u
/4GkvF5qE7qqbGsSLijB63Ux8mfHU2V9pZ1RnfO/jFRTFu3/GoAjmIL6xdORqtmX
TiKzI2j71dC8PvAikBYOwS/QAMcyutNljmWt+v0lHMMqoysLgyNO7lDcZPNiRG7d
+sDgfGy9V5PnToMIKbUy58xAeFHe0f/l8VFrsLw9vkK1r7N81hdJ4Fa3CwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHY7tmFVY+hmFuwInk5r52x+/yUxMB8GA1UdIwQY
MBaAFILtSi+xgN9fmdS/jHfMmgbvJgWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAt
NDUyNmY2MjYzYmNlLzEvZGp1MllWVmo2R1lXN0FpZVRtdm5iSDdfSlRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wMzAxYmMtYzdmZS00NmU5LWI3YTAtNDUyNmY2MjYzYmNl
LzEvZ3UxS0w3R0EzMS1aMUwtTWQ4eWFCdThtQll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALZprAwQA
mFn7AwQAsGnhAwQAwKZyAwQAwmkVMA0GCSqGSIb3DQEBCwUAA4IBAQC7Qb8zynqi
Oq+PMtUG2Q/i//7UsBEtW4N9A84ku4M5PznUTkFkuP9LOiE7WGt8t3Id+ju9EfhO
EBH9TDT3aN+R5PJWXbmIo4z6RpLw9xucweWNsOzlpjVxVVEmC7Iu3ZHVHLHTHIfP
Z5Cn1nQyPqgqXk1qjWYPc+dOpdJXhHEWmrZgrV4UnNwFtejKftoVBS55wgFlvL76
Syq9YKNNWpSLCfH98E92h4uj3SNoCO6BY8nR75RCMDgXkRtBvPQv9rQXMk0yC5lW
QsL70nU8+LGh/Jry1s3fBZRq0U5OC/8Ec2ZHtdaULqVI63bqKEVl6j2qN4M1a23s
xPHdexUA5x9/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org