Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/hLSGUjd7axqoDSYnO_LxldKkAd4.roa
File: hLSGUjd7axqoDSYnO_LxldKkAd4.roa (raw, json)
Hash identifier: FxwI1sadfXBnoZtT0xbcmAPFKqJjl1IThrhfkDDNiLs=
Subject key identifier: 84:B4:86:52:37:7B:6B:1A:A8:0D:26:27:3B:F2:F1:95:D2:A4:01:DE
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182F410436E340650E64C1370D0B520D66A
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/hLSGUjd7axqoDSYnO_LxldKkAd4.roa
Signing time: Wed 31 Aug 2022 13:21:22 +0000
ROA not before: Wed 31 Aug 2022 13:21:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.176.54.0/24 maxlen: 24
193.176.55.0/24 maxlen: 24
91.199.168.0/24 maxlen: 24
141.98.156.0/23 maxlen: 24
147.78.122.0/23 maxlen: 24
147.78.120.0/23 maxlen: 24
45.158.10.0/23 maxlen: 24
45.158.8.0/23 maxlen: 24
45.153.4.0/23 maxlen: 23
195.206.230.0/24 maxlen: 24
195.206.231.0/24 maxlen: 24
176.105.226.0/23 maxlen: 24
176.105.224.0/23 maxlen: 24
195.206.234.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
195.206.235.0/24 maxlen: 24
45.142.236.0/23 maxlen: 24
45.142.238.0/23 maxlen: 24
193.111.116.0/24 maxlen: 24
193.111.117.0/24 maxlen: 24
45.158.170.0/23 maxlen: 24
45.158.168.0/23 maxlen: 24
193.151.182.0/23 maxlen: 24
193.151.180.0/23 maxlen: 24
195.20.98.0/24 maxlen: 24
194.104.156.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
194.105.21.0/24 maxlen: 24
152.89.248.0/23 maxlen: 24
152.89.250.0/23 maxlen: 24
193.29.96.0/23 maxlen: 24
193.29.98.0/23 maxlen: 24
194.147.4.0/23 maxlen: 24
194.147.6.0/23 maxlen: 24
194.5.146.0/23 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f4:10:43:6e:34:06:50:e6:4c:13:70:d0:b5:20:d6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Aug 31 13:21:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84b48652377b6b1aa80d26273bf2f195d2a401de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:d3:29:f9:d6:58:e6:2f:4f:1e:26:d3:3d:
10:29:bf:b6:02:e3:61:3e:7d:59:c7:1e:11:67:dc:
63:c8:a4:11:15:69:be:a1:55:c9:61:49:19:34:1d:
9e:fb:ea:54:96:02:72:8d:e1:52:4e:7f:35:09:1b:
c4:92:b1:2a:e4:19:1c:6b:77:0c:73:a2:dc:25:f6:
cf:75:53:4e:29:20:4e:23:e1:29:c1:8a:7e:3d:1d:
09:0f:10:96:f2:6a:07:da:fe:41:64:d2:c1:8d:af:
56:d9:c5:39:5d:40:96:90:c8:79:46:4d:b3:f0:8b:
59:55:c9:a0:f0:6d:5f:e9:62:a2:02:e7:79:61:b6:
66:f8:cd:59:07:0c:21:37:4e:be:09:c7:0c:60:29:
80:85:94:77:5c:1e:10:f7:9e:c6:ac:6a:4e:45:31:
cd:c7:f1:be:b9:b9:e3:a3:19:c2:ba:8a:77:f4:cf:
24:97:be:15:b8:68:07:f5:f6:a7:38:43:d1:e9:4f:
67:e8:13:d2:4f:15:51:dd:a2:72:71:d9:c4:d8:73:
07:46:9f:64:9a:91:e7:b8:01:b6:fd:81:b6:e8:bf:
f1:36:2b:f5:84:aa:e7:c3:2f:0b:49:ed:55:90:f3:
a5:c5:b5:d9:70:98:e4:1f:8b:58:d0:ca:6d:38:45:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B4:86:52:37:7B:6B:1A:A8:0D:26:27:3B:F2:F1:95:D2:A4:01:DE
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/hLSGUjd7axqoDSYnO_LxldKkAd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/22
45.153.4.0/22
45.158.8.0/22
45.158.168.0/22
91.199.168.0/24
141.98.156.0/23
147.78.120.0/22
152.89.248.0/22
176.105.224.0/22
193.29.96.0/22
193.111.116.0/23
193.142.22.0/24
193.151.180.0/22
193.176.54.0/23
194.5.146.0/23
194.104.156.0/24
194.104.158.0/24
194.105.21.0/24
194.147.4.0/22
195.20.98.0/23
195.20.105.0/24
195.206.230.0/23
195.206.234.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:f6:53:f1:53:7a:b6:08:ec:3f:e1:3e:49:0e:39:e4:5d:4f:
bb:fb:be:f1:aa:b3:e9:38:b2:70:e6:6a:86:8e:60:84:05:8d:
18:75:f7:aa:7d:f4:6a:92:db:27:0b:a0:18:c2:67:32:9f:66:
22:d7:d2:5d:fe:83:f2:aa:5e:5e:13:66:8b:42:63:94:14:98:
d3:7e:d8:0c:b3:d6:8f:25:84:ed:cf:2b:02:93:8d:51:33:aa:
86:b3:e5:0f:60:0f:d9:ba:ec:91:a4:08:6b:ad:34:88:12:ed:
ef:ed:b0:95:e3:8b:5b:78:92:71:23:d9:42:25:0f:bd:de:1c:
14:4a:65:3b:dc:b3:97:b4:1a:cb:aa:fa:f1:43:42:43:4e:59:
22:03:cb:86:92:5f:2e:89:30:7e:d1:01:77:c0:25:3c:e3:88:
62:ad:55:2b:46:37:d1:59:11:86:b2:13:12:84:70:58:51:32:
e9:11:27:2f:e9:d6:9f:74:f7:5c:c5:33:e6:d6:be:c6:6f:44:
60:1f:80:c9:01:f5:7a:8a:d7:da:a2:7d:6f:00:a8:e9:07:59:
05:87:27:3e:c9:a6:97:0a:f0:98:bc:eb:ec:b2:1a:3f:5b:75:
66:33:88:ba:d4:ca:2a:ea:cb:da:58:54:8c:fd:4f:3b:39:b0:
46:a2:54:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org