Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/n2q03ICVEKiVqa9OUcHkocJ0wMM.roa
File: n2q03ICVEKiVqa9OUcHkocJ0wMM.roa (raw, json)
Hash identifier: 4DfeLMY0l/XZXrHGpSZB3rUgKh7IXsq7uwEkmAYLYNU=
Subject key identifier: 9F:6A:B4:DC:80:95:10:A8:95:A9:AF:4E:51:C1:E4:A1:C2:74:C0:C3
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183D0A0B61A5539EB9E2FF1EB6A69B4EBAA
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/n2q03ICVEKiVqa9OUcHkocJ0wMM.roa
Signing time: Thu 13 Oct 2022 09:15:36 +0000
ROA not before: Thu 13 Oct 2022 09:15:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 193.164.1.0/24 maxlen: 24
45.146.82.0/23 maxlen: 23
193.142.4.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:a0:b6:1a:55:39:eb:9e:2f:f1:eb:6a:69:b4:eb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 13 09:15:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f6ab4dc809510a895a9af4e51c1e4a1c274c0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:fb:3a:77:d2:3c:e0:c7:96:dd:29:b3:e7:
5a:72:90:43:af:58:1e:c6:74:8f:a7:c9:b6:62:2f:
1f:a3:18:db:08:af:76:05:11:ca:a3:47:1f:36:0f:
0e:f1:af:73:b1:d5:e9:54:6f:33:15:aa:88:8f:e6:
3f:17:7d:17:7f:fb:fe:08:e7:46:e5:a9:14:02:4a:
70:65:b4:0e:67:11:d1:2d:9f:b5:0b:8f:58:13:2e:
16:40:9a:50:3d:17:43:eb:aa:b2:81:71:91:7c:33:
c5:ee:b2:c8:c7:78:fa:98:9f:8b:d7:6f:ca:6a:f2:
c1:0c:bb:f4:73:71:34:dc:21:5c:0b:93:c0:f5:a3:
2b:61:3f:dc:70:94:10:ee:03:c2:8e:c6:06:27:ce:
6e:d9:ba:ab:fa:0f:21:85:55:9e:16:46:67:c0:a8:
73:e9:00:db:e2:37:72:c7:2f:92:b7:c0:95:d4:40:
fc:02:9e:32:16:cd:96:c6:a7:aa:c2:56:6c:13:62:
37:79:3f:79:af:e4:94:9a:8b:c8:8e:60:cc:04:36:
b3:20:9d:82:34:22:1f:be:14:5c:96:31:2b:d6:d8:
1e:13:5a:97:e1:2c:ba:8e:00:68:6b:94:55:2a:43:
c8:79:d5:48:5b:81:00:d5:b4:f2:3a:bc:46:77:a6:
d9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6A:B4:DC:80:95:10:A8:95:A9:AF:4E:51:C1:E4:A1:C2:74:C0:C3
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/n2q03ICVEKiVqa9OUcHkocJ0wMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.82.0/23
193.142.4.0/24
193.164.1.0/24
194.5.148.0/23
Signature Algorithm: sha256WithRSAEncryption
75:a1:dd:23:cd:4f:b4:35:7b:97:b9:f3:79:70:ff:81:84:c7:
7b:16:8f:27:08:a8:35:1b:32:40:c3:a5:60:33:4e:3c:7b:03:
57:bf:fd:80:b5:ec:98:5c:f5:fb:93:41:fb:7b:f6:12:85:b3:
4b:9d:62:2b:10:5d:b1:61:9d:ce:3a:fe:58:83:7e:69:14:d6:
b2:b1:44:e5:f8:d4:40:af:d8:49:25:a4:d4:9d:eb:ff:1c:98:
12:c8:29:0f:83:bc:51:a4:10:1d:be:b0:b1:d9:f5:b7:31:67:
43:4b:cf:49:8b:21:4a:82:68:84:62:5b:d8:f8:66:e4:42:b2:
ef:50:a8:d6:76:15:48:af:5b:34:56:18:80:78:49:9a:a7:8f:
a1:ec:4b:85:78:4d:30:d3:00:4a:ae:d7:91:19:fa:fc:2f:92:
3d:01:5b:86:8c:11:a7:6a:4f:d7:43:c8:c2:da:85:39:c4:b6:
4b:e1:d7:64:5f:ad:c8:bc:63:8e:c2:b9:4a:c6:6f:5d:05:9e:
6d:27:00:d0:4b:89:bb:1b:51:8b:76:3c:a6:46:fb:1c:c7:32:
28:f0:98:df:89:47:68:d5:18:9c:f2:e8:aa:d3:22:dc:e1:b4:
27:5b:50:8b:7a:58:4d:93:8b:20:8f:ee:24:9e:cb:dc:aa:ac:
c5:80:bb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org