Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/g4nUWd7WOf6uPqyBKOV_D2PVoVQ.roa
File: g4nUWd7WOf6uPqyBKOV_D2PVoVQ.roa (raw, json)
Hash identifier: wKF09WU1gJlxKRYO6LcoSqYVSkxErdKxvEjUE9uz1uc=
Subject key identifier: 83:89:D4:59:DE:D6:39:FE:AE:3E:AC:81:28:E5:7F:0F:63:D5:A1:54
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01838E227F2B20C66C11315CFA1BD3D4A4E7
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/g4nUWd7WOf6uPqyBKOV_D2PVoVQ.roa
Signing time: Fri 30 Sep 2022 11:22:48 +0000
ROA not before: Fri 30 Sep 2022 11:22:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 194.113.227.0/24 maxlen: 24
45.146.80.0/23 maxlen: 24
194.105.21.0/24 maxlen: 24
45.152.242.0/23 maxlen: 23
176.105.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8e:22:7f:2b:20:c6:6c:11:31:5c:fa:1b:d3:d4:a4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 30 11:22:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8389d459ded639feae3eac8128e57f0f63d5a154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:51:0f:cc:84:4f:6a:48:f2:bc:b3:5a:00:
63:9a:38:b8:4a:da:0e:ca:c1:41:a0:c6:1b:d8:bf:
0d:4f:52:1d:0e:b2:36:13:34:5b:79:03:fc:68:85:
f0:5c:9e:17:25:a1:c0:f3:ad:24:23:ef:1f:95:94:
4e:e7:0c:e1:ef:07:23:2d:7e:7a:1c:53:e5:65:df:
90:96:ef:be:aa:ff:82:e0:eb:5d:d3:9b:df:9a:02:
3b:e0:47:4d:a9:30:a6:d0:c6:c6:29:ca:aa:7b:72:
34:bd:b4:1d:9c:bf:37:cc:c6:4b:51:7e:f9:42:66:
f3:0f:b9:d7:6f:1c:d9:e1:94:2d:1a:c2:ad:b2:4e:
47:21:9f:2f:76:81:0e:5a:59:41:53:49:b1:29:b9:
0b:cc:08:61:fb:4d:5f:6e:51:41:a8:2b:7b:20:c0:
a0:08:d1:34:95:0b:e0:e0:5e:e1:fd:0f:73:19:c4:
12:9d:cc:00:bc:6e:99:79:11:29:96:26:7e:69:8b:
3f:89:27:a3:8d:29:78:06:f7:47:20:23:31:22:9e:
34:e7:a9:3a:22:8e:c8:8b:55:79:7e:ff:23:e0:aa:
7d:73:30:45:0d:b2:bd:e6:9f:20:a1:14:59:6e:2b:
7f:d5:a7:1f:6d:db:02:d3:36:44:52:81:92:9c:ad:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:89:D4:59:DE:D6:39:FE:AE:3E:AC:81:28:E5:7F:0F:63:D5:A1:54
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/g4nUWd7WOf6uPqyBKOV_D2PVoVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/23
45.152.242.0/23
176.105.226.0/23
194.105.21.0/24
194.113.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f0:b1:bf:51:17:f8:47:3e:46:1c:22:10:93:0e:d2:91:3c:
87:28:b5:dd:64:b9:26:8f:ab:ac:5f:de:d4:92:03:3e:e5:96:
ac:87:93:1c:7f:6c:a4:c0:4b:1f:2a:a7:03:55:de:79:e7:c7:
03:7b:04:d5:c6:77:a6:8b:45:bb:a3:9e:6a:75:9a:d8:47:52:
ea:c0:ea:a5:4c:e9:76:a4:17:2b:47:4d:61:83:c7:48:51:12:
da:1b:9c:43:01:f9:08:5f:45:f6:78:02:8f:d0:ff:67:a2:5f:
9f:5f:c3:20:cc:7d:36:37:6e:ab:24:aa:de:bc:d4:3c:92:9e:
48:30:d7:42:49:fc:e7:3b:81:53:b3:aa:75:b2:b5:5b:51:ab:
87:31:1f:34:b1:26:cd:9e:28:91:fd:c2:0a:84:4e:4f:a4:bb:
bc:a6:0f:ab:d8:71:4a:b7:30:60:78:23:0d:ec:e4:9f:82:32:
bb:a5:ce:42:53:51:83:80:dc:9b:1a:12:b6:40:91:85:4b:61:
54:6d:46:f2:eb:55:12:6f:e2:bd:4d:97:8a:84:30:65:36:d9:
84:34:cb:f5:03:12:29:cb:93:8b:95:da:2e:be:ab:5c:a6:d4:
0f:bd:ca:40:01:07:f8:ef:e4:38:a7:58:08:b3:27:be:ed:1f:
3f:e2:dd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org