Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/i5ReRt97RbS2FWj9L7ETJrKfdK4.roa
File: i5ReRt97RbS2FWj9L7ETJrKfdK4.roa (raw, json)
Hash identifier: K165fLiO7tcb3vlX3fdQVlP6iLHGVrPp/SaUwOUehxs=
Subject key identifier: 8B:94:5E:46:DF:7B:45:B4:B6:15:68:FD:2F:B1:13:26:B2:9F:74:AE
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01826C8887E2AA529B3764E6A5EA47B93273
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/i5ReRt97RbS2FWj9L7ETJrKfdK4.roa
Signing time: Fri 05 Aug 2022 05:44:23 +0000
ROA not before: Fri 05 Aug 2022 05:44:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
194.104.156.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
194.105.21.0/24 maxlen: 24
192.166.83.0/24 maxlen: 24
193.176.128.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.142.4.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
45.158.10.0/23 maxlen: 24
45.158.8.0/24 maxlen: 24
192.166.114.0/24 maxlen: 24
195.206.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6c:88:87:e2:aa:52:9b:37:64:e6:a5:ea:47:b9:32:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Aug 5 05:44:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b945e46df7b45b4b61568fd2fb11326b29f74ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d5:8f:72:b1:3b:81:b6:3e:8f:f3:54:fd:b8:
ef:da:53:18:6e:44:df:45:56:e9:b6:b6:35:44:d9:
1c:94:00:3c:f2:b2:9c:71:92:cf:c8:2b:62:94:a5:
17:64:ef:b1:dc:de:83:57:f2:6d:71:b7:88:6d:0d:
a8:44:3d:37:81:e1:45:c3:96:80:1f:a4:28:de:3e:
c6:6b:8d:75:35:50:66:26:c2:40:2a:52:e5:2f:e5:
e7:d4:c3:8a:57:7e:82:a5:5d:be:2e:46:30:5a:28:
58:fe:9d:8e:b0:54:99:ee:e3:6b:63:66:5f:c7:aa:
93:0e:bf:b5:31:a2:e9:d9:33:c7:18:4a:d2:b8:8c:
58:fd:07:a8:df:30:9b:9e:b7:d8:5c:7b:aa:e4:12:
67:72:45:6f:fd:6f:ed:d5:a3:64:3d:aa:44:3b:d2:
ea:78:16:b4:84:2a:e6:dd:64:26:e7:e4:e6:6b:59:
c0:bd:e4:8f:3b:b5:68:5c:4d:ac:38:d2:97:0f:e8:
7d:24:a3:25:c5:e4:75:40:28:ee:56:80:85:6c:f8:
03:e4:35:64:6d:0f:4b:4b:26:d6:23:04:ac:82:54:
b2:38:46:1e:de:5a:8b:ec:47:0f:17:83:62:6d:ad:
3a:d7:98:1e:d1:8d:30:38:7e:58:8f:ff:fc:58:02:
7a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:94:5E:46:DF:7B:45:B4:B6:15:68:FD:2F:B1:13:26:B2:9F:74:AE
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/i5ReRt97RbS2FWj9L7ETJrKfdK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
45.158.8.0/24
45.158.10.0/23
147.78.122.0/23
192.166.83.0/24
192.166.114.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.5.148.0/23
194.104.156.0/24
194.105.21.0/24
194.113.226.0/24
195.206.230.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:2a:78:41:16:76:ad:5d:47:3b:74:a3:a8:18:d9:e2:ae:09:
5b:d3:fc:4b:d2:9c:fe:ab:da:c4:23:24:02:11:00:7b:ad:b2:
dc:a9:21:11:1f:14:00:a9:ff:94:fd:41:c5:a4:db:41:03:18:
e2:d4:e4:f2:75:6f:5f:ca:53:f6:3f:23:46:2b:ad:77:31:27:
81:6f:c0:1f:c8:75:60:36:c4:92:e9:7f:31:b7:4c:9f:b5:9a:
9e:b6:42:44:15:d6:12:2a:75:a2:ee:e6:7a:74:e8:e5:97:0e:
bd:fd:34:6d:43:a4:cd:28:a4:8c:b4:5c:5d:d2:2d:7f:2f:9a:
55:23:33:17:6e:f0:e2:bf:ad:cc:3e:5c:76:e7:a7:cf:39:67:
f3:03:50:bc:23:b5:7f:e6:10:a7:11:e1:99:1d:e6:c6:5d:2d:
43:74:ce:a0:5d:ac:78:e5:c6:09:02:77:bb:1a:92:ce:00:9c:
2f:c9:9d:f0:5a:16:bb:44:d0:cf:28:c5:68:96:b3:ef:1a:05:
44:70:ec:39:ad:b7:4e:71:f7:aa:60:e1:84:89:49:cc:ca:1c:
39:ef:a7:b6:78:b6:41:39:5b:7a:9b:d1:a1:5b:a8:b9:c4:bb:
03:7d:0c:f5:be:19:eb:da:2d:78:0f:6b:46:e4:74:95:85:13:
29:bd:fe:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:35 2025 by rpki-client