Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/jtukL0xO_qWzzB1sJ873KvJM4YA.roa
File: jtukL0xO_qWzzB1sJ873KvJM4YA.roa (raw, json)
Hash identifier: HgCFZ4RrRspskLHoAC4UXHTHO9JIq/bHBFjxKtFJaeM=
Subject key identifier: 8E:DB:A4:2F:4C:4E:FE:A5:B3:CC:1D:6C:27:CE:F7:2A:F2:4C:E1:80
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 01823B3853B99390EDDF8CFDBA207D373D10
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/jtukL0xO_qWzzB1sJ873KvJM4YA.roa
Signing time: Tue 26 Jul 2022 15:55:23 +0000
ROA not before: Tue 26 Jul 2022 15:55:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 152.89.250.0/24 maxlen: 24
152.89.248.0/24 maxlen: 24
152.89.249.0/24 maxlen: 24
45.158.8.0/22 maxlen: 22
195.206.235.0/24 maxlen: 24
176.105.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:3b:38:53:b9:93:90:ed:df:8c:fd:ba:20:7d:37:3d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 26 15:55:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8edba42f4c4efea5b3cc1d6c27cef72af24ce180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:1a:ad:09:e0:bf:09:b7:70:14:05:53:88:
d1:10:40:16:67:e3:8d:8b:dc:56:26:f6:a5:f8:f6:
79:aa:f6:4e:fc:23:db:e2:3c:e1:5e:84:7c:ca:a1:
5d:eb:a0:3b:ce:33:59:c7:a1:02:81:0d:71:87:42:
6b:10:b4:c5:52:b3:3a:6e:2f:c2:8e:7a:2c:0f:c9:
a8:a2:70:0e:82:52:aa:51:43:c6:38:c0:85:d9:2b:
7f:be:95:fc:8c:5c:b7:2d:81:94:8a:c7:3c:dd:d2:
dd:26:96:33:83:2f:46:54:94:05:39:b3:99:cc:d0:
f9:8f:0e:78:7a:82:96:6d:7b:94:e4:69:f4:70:02:
b4:4a:7f:f2:b7:7a:7e:d8:c9:80:0f:5f:fc:12:e8:
79:42:45:f5:ae:94:7b:dc:8b:c8:73:80:f3:d5:e3:
76:41:cc:6c:81:5f:c6:e6:7e:b4:34:7c:58:34:ea:
6a:ef:f2:a5:5d:30:5f:33:49:e0:6a:36:8d:43:f9:
69:9e:67:3e:67:65:a4:91:0e:2b:aa:a8:0f:71:6c:
18:8c:ec:22:ef:c9:ce:81:01:de:55:43:6a:a6:4b:
70:5a:f4:7d:ed:d4:e8:df:09:75:81:c0:57:d6:5b:
8b:be:f3:bb:8d:9b:40:29:1b:4c:db:c3:94:a2:83:
72:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DB:A4:2F:4C:4E:FE:A5:B3:CC:1D:6C:27:CE:F7:2A:F2:4C:E1:80
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/jtukL0xO_qWzzB1sJ873KvJM4YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.8.0/22
152.89.248.0-152.89.250.255
176.105.224.0/24
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
62:49:ab:d8:8a:a4:01:07:f8:35:35:2e:92:14:b1:48:e9:9a:
52:8b:76:79:9a:1f:25:09:2c:e8:a3:d5:79:64:92:22:81:1c:
ee:8b:cf:f4:22:d4:4f:85:08:c2:3b:e5:5e:6a:b2:04:cc:ff:
9a:e1:8e:ae:f3:b7:46:44:3d:67:c2:95:7e:4f:14:5b:b7:9c:
e5:7c:a1:a6:6c:58:94:13:d6:cf:3a:5c:8d:28:d2:19:53:df:
cb:3d:b6:40:ac:b5:c3:ab:9e:33:1c:bf:8c:bc:86:7b:c9:4f:
65:57:6e:e6:a6:60:df:97:b8:47:5a:2c:9a:10:d7:c9:f3:37:
cd:05:99:b5:1f:60:5a:84:78:c5:87:81:51:db:2c:8f:7e:ec:
42:e4:4c:d7:0b:cd:3c:8b:ad:cd:da:3a:85:3b:44:f5:61:f2:
74:39:41:82:97:8b:19:13:b7:3a:c0:64:c2:5a:01:34:44:c7:
02:d5:dd:66:47:43:b5:a6:34:7e:36:0d:25:cb:6f:23:78:8b:
df:54:a4:31:2e:83:da:e1:32:be:16:61:26:ef:32:17:97:64:
58:eb:87:07:73:1d:e9:be:cb:4f:5f:66:cd:70:ad:08:5e:6a:
0a:b1:64:36:de:a7:66:fc:02:07:5b:af:36:06:28:8a:df:4f:
42:ce:66:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:59 2024 by rpki-client on console-fra.rpki-client.org