Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/h4gxb1oOSNDI1X7_qmvb9B1RxJM.roa
File: h4gxb1oOSNDI1X7_qmvb9B1RxJM.roa (raw, json)
Hash identifier: AA6DqhvZDdglGvmCDrVrD0NWkfpif5yHPwEecN7EpEo=
Subject key identifier: 87:88:31:6F:5A:0E:48:D0:C8:D5:7E:FF:AA:6B:DB:F4:1D:51:C4:93
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 03A53846
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/h4gxb1oOSNDI1X7_qmvb9B1RxJM.roa
Signing time: Mon 21 Feb 2022 06:10:39 +0000
ROA not before: Mon 21 Feb 2022 06:10:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.146.80.0/23 maxlen: 23
45.146.82.0/23 maxlen: 23
152.89.248.0/22 maxlen: 22
193.29.96.0/22 maxlen: 22
141.98.156.0/22 maxlen: 22
193.142.4.0/24 maxlen: 24
176.105.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61159494 (0x3a53846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Feb 21 06:10:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8788316f5a0e48d0c8d57effaa6bdbf41d51c493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:40:fb:78:57:53:8f:7b:4e:b9:ee:79:d7:
35:a3:d3:6f:8e:b1:13:07:ce:ec:62:22:94:72:be:
57:ed:59:d1:9c:7a:15:88:12:2e:fa:27:47:cb:f8:
07:75:c1:98:c0:b2:16:03:a6:57:c8:cb:c4:90:8d:
c1:25:6d:51:5f:33:f0:7b:58:34:19:31:0f:0b:8a:
f6:cf:5e:6e:86:a1:4d:84:71:7f:a6:8b:a5:2f:21:
31:f4:21:fc:74:1b:d0:97:48:75:dc:80:a5:7d:87:
db:4b:d3:56:df:af:af:b6:d2:5f:39:0c:ef:34:21:
c0:46:79:59:02:40:02:0a:00:f0:57:fb:c3:29:ee:
d6:aa:b7:fc:cf:d0:fa:56:29:76:da:17:4e:72:bd:
f3:aa:9c:eb:3d:19:4d:00:cf:a6:96:54:37:00:f5:
1f:88:5c:78:82:7f:c3:7a:4f:3e:2f:73:24:4d:c8:
d8:ed:4c:6a:66:ab:49:e0:76:ac:55:9e:13:84:2f:
6c:68:50:31:e0:99:e5:91:d0:26:55:9c:e4:f6:6c:
20:d6:7e:a5:a4:3d:00:48:5f:03:33:9b:6a:54:2d:
00:6d:ef:e0:cf:66:d9:01:de:44:3d:31:d4:79:93:
49:e7:3e:a8:cb:7f:1a:b5:1a:87:7b:d4:ee:5b:52:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:88:31:6F:5A:0E:48:D0:C8:D5:7E:FF:AA:6B:DB:F4:1D:51:C4:93
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/h4gxb1oOSNDI1X7_qmvb9B1RxJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/22
141.98.156.0/22
152.89.248.0/22
176.105.224.0/22
193.29.96.0/22
193.142.4.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:31:9f:13:c5:67:a9:02:7e:79:6a:2b:fa:df:ea:c2:bb:fb:
8e:6d:78:e0:56:5f:75:18:a1:18:86:81:1e:9d:a5:ad:66:c1:
04:12:c0:9c:2c:9c:46:f1:e7:99:b2:fd:da:71:87:2e:3a:23:
13:45:d9:bd:16:96:a8:c5:61:1b:0f:03:7b:ab:1a:63:62:d9:
68:5b:46:32:4d:d9:a2:15:e2:ea:2d:a4:de:b4:d1:cb:56:13:
1f:f3:82:d8:ba:0e:cd:84:6d:e9:cb:50:cf:ed:12:87:64:c6:
63:e4:21:87:d3:ae:b4:0f:54:c3:d8:0b:f8:ab:a2:75:7c:66:
b5:76:9e:0f:00:c4:77:47:22:d5:ed:34:a6:b5:11:9e:8b:6f:
02:6f:35:f0:5e:6a:a7:65:18:66:b6:7a:e5:55:34:d7:ac:73:
a7:85:99:45:58:d0:1b:db:f7:ee:2e:e6:3a:44:25:f4:a0:8a:
c7:8c:b7:5f:eb:0d:e7:23:5e:74:07:7d:a2:0f:53:57:c4:9a:
71:db:a9:70:38:f3:3f:80:1f:08:19:91:8a:7c:71:dd:e0:f9:
e0:c6:18:83:d1:5d:c1:8f:4f:bb:69:fb:7d:fa:0b:6a:8f:e0:
05:73:86:d6:2d:e2:33:a1:fd:c8:f9:24:e7:c9:9d:73:30:3c:
de:26:e8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org