Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/iEoQ_NBxTBQvpuOSet88cDo-DJk.roa
File: iEoQ_NBxTBQvpuOSet88cDo-DJk.roa (raw, json)
Hash identifier: P19Z5IuSERUQbU76xqbnyHsnTlWinMQUnioIMQrkQgQ=
Subject key identifier: 88:4A:10:FC:D0:71:4C:14:2F:A6:E3:92:7A:DF:3C:70:3A:3E:0C:99
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018220F74AA06D9AFA039F9DE4079A909F07
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/iEoQ_NBxTBQvpuOSet88cDo-DJk.roa
Signing time: Thu 21 Jul 2022 13:34:13 +0000
ROA not before: Thu 21 Jul 2022 13:34:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 194.105.21.0/24 maxlen: 24
193.111.125.0/24 maxlen: 24
192.166.83.0/24 maxlen: 24
193.176.128.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.142.4.0/24 maxlen: 24
192.166.114.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
194.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:f7:4a:a0:6d:9a:fa:03:9f:9d:e4:07:9a:90:9f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 21 13:34:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=884a10fcd0714c142fa6e3927adf3c703a3e0c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:1b:e4:29:1a:5b:cf:1e:10:be:3a:40:ca:
fb:67:97:4d:0b:f7:3a:0b:4d:a2:0b:09:83:a4:b5:
5f:8a:ea:fb:52:33:da:9a:b9:b5:c3:b0:f9:3d:c0:
a7:36:8f:71:24:8e:10:c5:d6:10:5c:ed:96:d1:5a:
c3:31:dd:99:6e:fe:1d:32:9b:c2:c9:fe:22:e4:7e:
9e:85:ff:9c:d6:4f:1c:6f:c1:75:a4:56:4f:e7:ec:
e0:02:4e:fb:9d:55:78:31:3d:4f:1d:53:b9:31:2b:
82:19:56:83:f8:40:98:11:41:7b:37:23:6f:e8:f3:
e7:d7:ef:57:22:b4:d3:25:59:71:74:8d:be:53:4c:
cc:c2:9d:24:c7:30:0a:f1:72:e0:de:4e:16:10:9a:
03:9d:43:75:3d:1a:e5:88:3d:31:17:b3:7e:bf:4f:
01:d0:58:bf:1c:00:a0:f3:24:d5:dc:4b:de:c3:0f:
4a:27:f2:77:aa:c8:bb:3a:eb:b5:b0:f0:3d:b5:f3:
f1:91:e7:0e:b1:ad:af:10:b3:50:ac:5b:23:b4:5d:
eb:c2:29:5d:af:6e:68:49:d2:9b:50:d9:f6:3e:42:
6e:0d:3b:9c:d9:47:95:39:d6:d9:fe:fb:61:a7:10:
29:80:fd:17:79:46:cc:2c:6a:68:f2:9c:f8:25:d3:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4A:10:FC:D0:71:4C:14:2F:A6:E3:92:7A:DF:3C:70:3A:3E:0C:99
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/iEoQ_NBxTBQvpuOSet88cDo-DJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
147.78.122.0/23
192.166.83.0/24
192.166.114.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.105.21.0/24
194.113.226.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:4b:7a:c9:4b:86:9f:2e:59:f4:6b:97:c3:3e:f3:b7:8b:7e:
a8:d7:98:c9:fd:ba:1d:94:12:d9:86:39:74:e5:d1:33:2d:e4:
53:7a:62:fa:39:5a:f3:93:0b:0a:f0:bf:3f:bf:99:ce:41:33:
75:9f:92:fb:47:da:dc:3e:b3:3f:6f:5b:3b:38:08:68:5d:11:
c7:0d:f4:d2:0d:8e:27:d0:6a:e5:08:a9:71:01:31:d7:57:e6:
49:c0:73:57:1e:bf:c3:b2:b7:88:77:1b:2e:5f:b9:d7:fc:f4:
c8:2f:a4:1d:2e:da:68:2a:5a:6e:df:84:04:c8:36:e0:9b:a8:
f6:17:d0:20:d9:34:82:42:b3:29:49:69:30:3a:f6:96:04:48:
c3:b9:57:cb:60:0b:bc:35:1c:e3:0d:b9:4b:42:4e:db:a8:f7:
08:0f:bd:cf:9c:5e:40:e8:69:df:58:bb:64:78:0f:5e:70:28:
b8:c5:af:fd:49:41:23:2a:a6:4c:7e:d7:1d:a7:de:66:76:8e:
05:f2:0d:b6:c6:0d:f4:24:d0:3c:05:8a:a9:2f:63:28:5a:c6:
80:70:a3:a1:7d:f8:cc:2e:e9:f6:a6:01:cc:26:f3:7e:1a:a7:
e5:f4:28:a8:7d:8e:89:41:da:a7:7d:e1:14:bb:a1:55:41:bf:
82:93:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org