Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/m3xTS__TKADXveAB4Z92PMwtSuI.roa
File: m3xTS__TKADXveAB4Z92PMwtSuI.roa (raw, json)
Hash identifier: DWwz7TiZPeXZDttzdMjU36p70rGWaFAzccAO6Bj8uVw=
Subject key identifier: 9B:7C:53:4B:FF:D3:28:00:D7:BD:E0:01:E1:9F:76:3C:CC:2D:4A:E2
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018215123183BD54F711123FBB4844495339
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/m3xTS__TKADXveAB4Z92PMwtSuI.roa
Signing time: Tue 19 Jul 2022 06:08:09 +0000
ROA not before: Tue 19 Jul 2022 06:08:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.176.54.0/24 maxlen: 24
193.176.55.0/24 maxlen: 24
91.199.168.0/24 maxlen: 24
141.98.156.0/23 maxlen: 24
141.98.158.0/23 maxlen: 24
147.78.122.0/23 maxlen: 24
147.78.120.0/23 maxlen: 24
45.153.4.0/23 maxlen: 23
195.206.230.0/24 maxlen: 24
195.206.231.0/24 maxlen: 24
176.105.226.0/23 maxlen: 24
176.105.224.0/23 maxlen: 24
195.206.234.0/24 maxlen: 24
195.206.235.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
45.142.236.0/23 maxlen: 24
45.142.238.0/23 maxlen: 24
193.111.116.0/24 maxlen: 24
193.111.117.0/24 maxlen: 24
45.158.170.0/23 maxlen: 24
45.158.168.0/23 maxlen: 24
195.20.98.0/24 maxlen: 24
194.104.156.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
194.105.21.0/24 maxlen: 24
152.89.248.0/23 maxlen: 24
152.89.250.0/23 maxlen: 24
193.29.96.0/23 maxlen: 24
193.29.98.0/23 maxlen: 24
194.5.148.0/23 maxlen: 24
194.5.146.0/23 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:12:31:83:bd:54:f7:11:12:3f:bb:48:44:49:53:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 19 06:08:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9b7c534bffd32800d7bde001e19f763ccc2d4ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:6d:04:39:f6:0f:87:88:35:73:d0:53:66:
83:80:3f:92:09:70:b2:21:ff:35:0c:ff:be:a7:24:
1e:44:3d:c9:30:cd:1b:96:cc:43:aa:bd:5b:e9:c2:
73:93:ea:7c:1f:dc:41:94:c7:9e:a4:bd:9a:50:03:
16:78:45:89:95:0e:a8:a6:14:3c:ef:c6:ab:6e:91:
02:9e:b1:5c:0b:0d:85:8f:4f:72:86:e2:1e:7a:b8:
f8:7e:56:8d:7d:fb:9d:37:20:24:cd:4f:a8:aa:9e:
8e:f5:0d:3f:84:1c:b1:8a:87:b1:b4:ac:da:92:98:
e4:ae:84:1c:fd:5e:9d:5b:08:b3:8c:16:04:77:04:
2b:20:b0:a4:37:4f:94:ad:c2:39:7e:8c:ee:e9:1e:
be:78:0a:e2:1a:de:74:17:6a:55:50:75:08:d3:27:
e6:60:97:cb:1e:5d:a0:ea:da:4a:54:c9:69:88:91:
71:95:28:71:f7:e2:91:a7:77:cd:1e:1b:7c:c6:7d:
cf:a9:14:8c:3a:bc:3e:8d:e4:8e:a2:8d:aa:02:57:
db:bd:88:fa:db:79:3a:a3:02:d3:d6:ce:07:d0:54:
7a:4a:e0:28:41:83:21:7c:0c:42:de:7f:33:c5:aa:
7d:a0:bf:7e:67:d1:6a:38:91:36:dc:5c:19:03:e8:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7C:53:4B:FF:D3:28:00:D7:BD:E0:01:E1:9F:76:3C:CC:2D:4A:E2
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/m3xTS__TKADXveAB4Z92PMwtSuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/22
45.153.4.0/22
45.158.168.0/22
91.199.168.0/24
141.98.156.0/22
147.78.120.0/22
152.89.248.0/22
176.105.224.0/22
193.29.96.0/22
193.111.116.0/23
193.142.22.0/24
193.176.54.0/23
194.5.146.0-194.5.149.255
194.104.156.0/24
194.104.158.0/24
194.105.21.0/24
195.20.98.0/23
195.20.105.0/24
195.206.230.0/23
195.206.234.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:aa:4b:51:5b:7d:29:d5:b9:21:2b:89:49:d0:f1:45:57:a5:
ca:ea:e2:ab:56:2e:be:6f:76:c1:21:66:a1:d5:51:5a:4c:72:
9d:df:8d:1b:9d:81:fb:11:4d:31:8b:6d:f6:f9:97:55:af:01:
9e:7d:65:a2:f7:e6:97:18:7d:cf:2d:ef:f5:ca:0e:35:d4:f0:
69:5a:df:fe:5a:cf:6f:bb:a7:f8:75:3b:3d:31:b5:a9:7d:14:
2e:1e:b7:a4:f3:22:65:8f:cc:13:57:72:63:1c:a9:26:87:83:
3b:28:58:e6:c9:28:0a:94:3d:97:59:92:af:5a:6b:58:6b:e3:
07:15:a6:a8:86:62:a7:2e:fe:d7:c0:df:94:13:b7:45:9f:af:
bf:c6:bd:17:fa:2e:a1:14:86:f8:ae:c5:fc:6a:e3:8c:1e:59:
e9:93:ea:fd:25:f0:4a:fc:a9:69:ab:a2:af:cf:0b:ea:1e:fa:
02:eb:d0:7f:15:54:11:ba:52:5c:c9:6e:f3:c0:0e:37:0a:7b:
9b:86:c6:24:13:67:e0:db:49:98:c3:e3:1d:28:3f:18:a1:04:
58:a6:51:59:a3:e4:07:56:dc:e4:2f:3a:9d:67:32:65:80:54:
8d:09:19:fb:6b:b2:bb:fe:62:a2:e1:e1:5b:76:7b:6e:c7:74:
b1:eb:3e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org