Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/oR4O7JW82LRoE-LjhDXfEIR8caA.roa
File: oR4O7JW82LRoE-LjhDXfEIR8caA.roa (raw, json)
Hash identifier: uAgimyR1QlPlhNJSyJCmGinr2AtdNL69uHsnMVl/P9Q=
Subject key identifier: A1:1E:0E:EC:95:BC:D8:B4:68:13:E2:E3:84:35:DF:10:84:7C:71:A0
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184B2DC94C4F9E4BCB21A8031BEF0CA8361
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/oR4O7JW82LRoE-LjhDXfEIR8caA.roa
Signing time: Sat 26 Nov 2022 07:35:11 +0000
ROA not before: Sat 26 Nov 2022 07:35:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212384
IP address blocks: 152.89.248.0/24 maxlen: 24
91.199.168.0/24 maxlen: 24
194.5.149.0/24 maxlen: 24
176.105.225.0/24 maxlen: 24
176.105.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b2:dc:94:c4:f9:e4:bc:b2:1a:80:31:be:f0:ca:83:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 26 07:35:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a11e0eec95bcd8b46813e2e38435df10847c71a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e1:ba:38:45:e5:46:fd:26:b5:a4:2c:94:e4:
3f:f2:f5:53:f8:a7:00:99:9f:45:9a:11:2f:67:35:
1f:bc:3d:fd:72:d2:5a:ec:1b:29:68:6b:e1:71:f4:
19:75:93:2e:e2:91:f8:ca:79:59:27:bd:7f:16:cf:
33:e7:17:8c:25:41:1a:df:57:b2:4c:42:c4:e3:15:
5b:ef:3b:6b:95:aa:12:e3:11:0d:88:a7:b4:fd:48:
cb:79:0c:73:87:08:9d:ca:8c:bf:22:28:ef:fc:af:
38:12:82:8a:b7:05:a7:51:55:ee:41:6a:14:a1:e6:
4b:96:75:c4:8a:f4:ab:2a:67:8a:97:fe:a8:99:08:
7e:8d:d5:09:a2:ee:41:d2:33:18:ae:9c:08:66:03:
4d:a8:a6:7c:7a:f3:35:0c:f9:ed:a6:29:54:f4:3a:
b5:6c:ce:b3:a6:95:96:0c:38:0a:81:7f:19:82:4b:
95:d7:10:5b:91:c8:9b:48:77:9a:ef:92:d4:e7:0b:
73:22:33:81:9c:66:27:28:46:ee:08:3a:28:41:a9:
33:d6:90:a9:f2:d3:37:d0:06:15:56:7b:f6:56:d0:
5a:22:fa:47:3c:6d:92:54:b7:b9:55:0f:af:70:95:
ac:4a:7c:1f:db:5d:47:0d:eb:2d:29:86:7c:f4:e9:
a3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1E:0E:EC:95:BC:D8:B4:68:13:E2:E3:84:35:DF:10:84:7C:71:A0
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/oR4O7JW82LRoE-LjhDXfEIR8caA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.168.0/24
152.89.248.0/24
176.105.224.0/23
194.5.149.0/24
Signature Algorithm: sha256WithRSAEncryption
04:11:b2:dc:2a:aa:01:36:86:6c:b5:0e:81:e7:00:ee:00:c5:
51:96:01:37:84:1b:f1:9c:23:d1:60:05:5e:13:db:b7:87:c6:
1e:d2:91:22:ba:c7:d6:71:f7:51:8f:3a:dd:d4:1e:f9:e0:43:
24:4c:5e:de:46:a0:63:4a:63:6c:b3:8f:8e:80:af:f8:6e:7c:
f7:95:d0:0a:c1:d9:e0:58:09:62:7d:7c:7a:44:30:0c:ed:17:
d7:b9:6b:0d:f5:b6:ba:df:7d:38:b9:9f:6e:a0:50:c8:5c:cd:
2c:c7:9f:91:b3:21:35:ea:05:73:9e:d5:50:b5:21:99:68:c8:
57:d1:7e:48:00:f6:2e:3f:5d:05:d5:60:45:1f:63:75:78:eb:
90:99:c2:02:2c:7d:55:79:63:f0:be:0c:fb:7e:88:1f:eb:84:
6a:69:24:56:70:88:e3:0c:c8:18:c6:0a:a5:8d:fa:3e:43:e8:
1a:e2:15:57:6c:2f:43:4d:a4:c5:59:92:cc:33:ec:6b:76:4c:
14:0c:a6:83:0c:2d:61:ee:46:3c:97:86:59:e7:da:d5:23:0c:
53:4f:34:16:c5:96:0f:04:c9:71:c4:26:b0:4a:c2:05:c3:39:
96:94:f0:92:84:43:85:5e:4f:01:7b:52:46:cc:af:02:56:d5:
ca:33:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org