Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/m10zQx2BL-wdDq0s_fvkcYrA_S0.roa
File: m10zQx2BL-wdDq0s_fvkcYrA_S0.roa (raw, json)
Hash identifier: PuQ+v6QFRimx/ibllmzmzPySoNSizl1cBkFtMl4MGtU=
Subject key identifier: 9B:5D:33:43:1D:81:2F:EC:1D:0E:AD:2C:FD:FB:E4:71:8A:C0:FD:2D
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018301BE27F621DD19DB3BA74CFC27B1C370
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/m10zQx2BL-wdDq0s_fvkcYrA_S0.roa
Signing time: Sat 03 Sep 2022 05:06:22 +0000
ROA not before: Sat 03 Sep 2022 05:06:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 45.149.185.0/24 maxlen: 24
176.105.225.0/24 maxlen: 24
195.206.234.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:01:be:27:f6:21:dd:19:db:3b:a7:4c:fc:27:b1:c3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Sep 3 05:06:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b5d33431d812fec1d0ead2cfdfbe4718ac0fd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:78:37:36:f8:ab:a5:2b:2b:9d:c3:28:23:6b:
e3:b2:37:fc:1d:70:b4:d0:96:b2:f2:11:b5:d2:18:
3c:a7:bf:20:23:7e:f2:b9:78:b0:2d:59:3c:5a:65:
8c:71:cc:bd:9f:39:5f:cd:92:59:12:d3:fe:a7:d6:
3c:b2:51:c1:f4:03:69:4d:62:34:43:7b:a9:0b:c7:
16:0f:ac:ae:d8:9e:2c:68:1a:6d:80:6b:b6:d9:21:
80:5c:69:2a:e8:4d:ce:8f:fa:e8:5a:64:90:74:80:
2f:f2:85:f1:26:05:e4:d0:b5:83:a8:b1:0d:d7:bb:
74:ef:87:b0:72:25:de:57:b1:4e:4a:d1:1d:2a:b4:
29:f8:ab:b8:08:73:fa:3d:46:b4:43:86:a1:70:e3:
44:54:60:c1:9b:2f:08:f0:9d:49:22:e1:ff:60:35:
b5:2b:02:b6:c8:7b:70:a1:00:71:95:7f:d8:7d:f7:
c6:52:9a:e7:c2:3a:50:72:d2:54:b9:cb:95:03:72:
a4:8f:8d:c0:55:d1:a4:af:77:2e:9a:f1:ce:5d:ea:
7b:4c:95:ea:3b:22:76:3d:35:aa:ef:4a:93:42:4d:
e4:f3:01:a4:99:9d:5b:66:1b:00:88:15:49:c0:b3:
5c:e6:1d:c0:fc:43:3d:ff:e6:ac:f0:16:69:f0:cf:
3d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5D:33:43:1D:81:2F:EC:1D:0E:AD:2C:FD:FB:E4:71:8A:C0:FD:2D
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/m10zQx2BL-wdDq0s_fvkcYrA_S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.185.0/24
176.105.225.0/24
194.104.158.0/24
195.206.234.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b1:96:f8:a3:c4:80:9c:9a:5a:03:05:24:b0:de:ae:e8:c5:
5c:2b:31:69:49:f5:9b:c2:29:20:53:41:08:8b:04:4a:33:67:
59:ef:27:1a:a2:18:07:26:19:e1:29:60:2d:48:6f:5e:b6:52:
9b:3f:da:5a:72:40:af:77:8a:ce:cb:44:d8:75:36:84:a0:e0:
3a:d9:77:e2:10:64:39:b8:c3:8b:ab:25:80:23:09:a5:0a:c9:
83:b1:47:d7:f0:c4:6d:5d:31:4f:66:0d:03:6c:45:cb:dc:2a:
04:da:0b:fd:04:45:a5:5f:73:b9:cd:aa:03:6a:5a:2d:e0:03:
36:eb:d8:3e:7e:55:32:d8:da:3e:99:d5:4a:a3:1e:42:60:73:
d1:e2:95:62:ea:27:09:67:41:57:84:f7:4b:8d:22:04:13:22:
86:87:f5:02:a8:9e:c6:7c:16:6c:6b:17:84:43:ae:e5:98:2d:
48:5c:a3:51:4e:9d:67:e7:00:99:9e:e7:67:18:ca:a6:fa:4e:
d2:df:9d:cf:cb:91:43:e3:de:a2:8e:c0:ef:1a:02:6c:d9:ba:
86:00:a4:32:00:d8:63:02:7a:85:06:17:fe:cf:42:c4:10:34:
38:74:f9:89:57:54:94:79:b2:fb:5f:37:b7:2e:56:09:3c:56:
47:04:53:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org