Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gBE8M3w7kTgU0AXyvaAg-ApB9-E.roa
File: gBE8M3w7kTgU0AXyvaAg-ApB9-E.roa (raw, json)
Hash identifier: NZHtKujAUiKIdLDFcL6fl7cxln6PD3IYatITKDH0Tag=
Subject key identifier: 80:11:3C:33:7C:3B:91:38:14:D0:05:F2:BD:A0:20:F8:0A:41:F7:E1
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183FE3BC23FD8652FA58191DB630BC2F246
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gBE8M3w7kTgU0AXyvaAg-ApB9-E.roa
Signing time: Sat 22 Oct 2022 05:47:52 +0000
ROA not before: Sat 22 Oct 2022 05:47:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 45.149.187.0/24 maxlen: 24
152.89.250.0/24 maxlen: 24
152.89.248.0/24 maxlen: 24
152.89.249.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fe:3b:c2:3f:d8:65:2f:a5:81:91:db:63:0b:c2:f2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 22 05:47:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80113c337c3b913814d005f2bda020f80a41f7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:62:f2:4f:23:b2:e4:34:9c:5c:c4:69:5a:
b0:69:cb:b8:ab:86:36:c3:49:4f:95:9b:f8:8d:29:
bd:fd:d7:0b:18:52:ca:61:47:44:38:da:4b:c3:b2:
df:0b:db:ed:52:14:39:69:c6:2c:97:58:e0:d5:a4:
bc:03:6a:dd:eb:27:97:e3:44:2e:98:45:7a:35:fc:
f9:ba:27:6e:40:45:3a:5f:90:c9:aa:18:58:c6:dd:
6f:6b:e7:6f:19:9a:d3:2d:d0:2f:95:8b:44:72:1a:
b2:d1:69:7c:c8:6e:89:95:3e:cd:98:b7:d3:21:b5:
a2:04:48:7a:d0:af:3b:be:b0:cb:c3:e3:ae:e9:07:
77:f8:30:4b:64:3d:e9:83:9b:0d:f5:af:a2:3e:9d:
01:13:e1:28:90:9b:6b:b9:13:5e:f1:db:3b:dc:33:
4f:6a:17:f6:41:43:e6:7f:78:3e:95:f2:e1:b3:cd:
8d:8c:62:6c:65:46:90:24:07:99:e2:af:10:f4:c6:
ee:b4:c5:dc:88:a6:8f:d7:15:0f:17:4b:3a:a5:7b:
a3:16:04:5e:c7:3e:d0:fb:65:72:37:43:f8:a1:cc:
f5:68:2e:a0:db:1c:a6:64:2a:a6:d7:ed:b0:99:c8:
c5:d4:1a:50:c1:3d:ed:0f:9a:8c:62:45:ee:e0:44:
31:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:11:3C:33:7C:3B:91:38:14:D0:05:F2:BD:A0:20:F8:0A:41:F7:E1
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gBE8M3w7kTgU0AXyvaAg-ApB9-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.187.0/24
152.89.248.0-152.89.250.255
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:98:84:a1:20:ab:3c:17:35:1c:d7:71:9e:d8:68:80:37:f7:
e2:22:6b:fe:b3:f1:68:ca:9b:91:12:10:8f:41:0e:79:ea:5d:
4c:9c:ac:3e:34:f7:89:9e:a5:c9:e6:f0:cb:01:b2:1b:65:17:
e0:ac:d5:ba:de:93:03:e8:94:b8:1f:2a:8a:4e:ed:17:86:df:
f9:61:a3:c4:a5:d8:e8:3e:93:46:91:c6:a8:d7:c6:1c:a1:70:
c5:62:33:b8:08:f4:7f:86:ee:d9:ec:cd:86:7d:f8:e8:a2:ec:
ea:0e:e9:e1:72:50:c8:01:00:dc:e9:39:ef:63:83:3c:08:b6:
04:fd:f9:1e:13:ba:68:56:32:87:c7:71:a2:78:73:2d:b1:34:
7b:cb:b8:64:20:2d:1b:79:6a:08:38:73:e3:69:8b:01:4f:84:
5b:49:7e:8c:65:30:9d:b9:3e:28:df:7f:c2:ff:72:e0:a1:db:
ab:64:aa:5a:2c:b6:5d:c6:1f:65:ca:57:85:a3:db:59:17:c6:
39:c4:41:d5:06:a1:f5:5d:91:e0:ad:24:4d:5c:6a:0f:46:50:
bd:98:29:7a:b5:3d:c5:94:4f:5c:60:a5:7a:49:3a:68:0a:a4:
27:e1:bc:ab:47:51:07:b4:97:15:74:ae:e1:62:ba:f8:47:e1:
5a:18:d4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org