Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ogpOWocAzlFSKmfI2Z6ULdaWH10.roa
File: ogpOWocAzlFSKmfI2Z6ULdaWH10.roa (raw, json)
Hash identifier: XfVWUk7NmL29qcVeF4prAU1ML4wYwVLyTRc0qLcH7lc=
Subject key identifier: A2:0A:4E:5A:87:00:CE:51:52:2A:67:C8:D9:9E:94:2D:D6:96:1F:5D
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184AB33857F0F969BD26E12577E1483C3D5
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ogpOWocAzlFSKmfI2Z6ULdaWH10.roa
Signing time: Thu 24 Nov 2022 19:53:11 +0000
ROA not before: Thu 24 Nov 2022 19:53:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
45.146.81.0/24 maxlen: 24
45.146.80.0/24 maxlen: 24
45.149.186.0/23 maxlen: 24
193.176.128.0/24 maxlen: 24
194.147.6.0/23 maxlen: 24
193.142.4.0/24 maxlen: 24
194.5.148.0/23 maxlen: 24
194.5.148.0/24 maxlen: 24
45.158.8.0/24 maxlen: 24
45.158.8.0/23 maxlen: 23
45.153.4.0/23 maxlen: 24
45.153.4.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
45.153.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ab:33:85:7f:0f:96:9b:d2:6e:12:57:7e:14:83:c3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 24 19:53:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a20a4e5a8700ce51522a67c8d99e942dd6961f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:2a:05:cf:b6:b9:e4:e6:6c:6e:8b:49:82:
ce:e3:5b:bc:7e:c7:c1:f2:d3:10:95:19:3d:50:a0:
53:98:71:13:9e:26:f3:a0:d2:0e:6e:3a:3e:96:c1:
a7:32:69:20:10:3d:fd:b8:ec:1b:c1:c2:f6:25:b0:
80:d3:3b:71:fb:3e:c5:0b:09:61:66:d5:16:e2:ca:
01:c9:d4:ad:d8:3f:4a:55:1d:2f:05:5c:b5:65:6b:
1e:f8:f0:ed:63:ea:ca:50:1d:e1:95:b6:a1:42:33:
fa:b4:94:27:a3:bf:0a:51:03:2b:ee:57:ce:24:12:
2f:e4:b1:9e:d4:a0:d4:f4:a4:1f:ef:05:52:a7:cd:
68:b6:8b:22:c9:09:72:0b:b3:45:1c:c3:14:b7:47:
50:7d:76:75:39:d6:77:96:18:00:81:cd:98:e9:4a:
0f:b2:c1:97:e5:7c:80:c7:15:75:f2:07:7f:a4:20:
a9:42:57:eb:64:e5:79:9e:11:eb:a2:16:ce:4d:7d:
d2:6c:a3:db:84:48:bd:af:13:28:6b:ef:22:68:b2:
90:3a:ea:50:a0:1f:bb:5f:4a:9f:f1:48:0b:b2:a4:
e9:c5:a1:71:ec:b1:5b:50:18:fe:c7:0a:75:2a:37:
03:71:0d:de:66:c6:be:6a:bb:af:72:2a:34:2f:57:
39:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0A:4E:5A:87:00:CE:51:52:2A:67:C8:D9:9E:94:2D:D6:96:1F:5D
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/ogpOWocAzlFSKmfI2Z6ULdaWH10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/23
45.149.186.0/23
45.153.4.0/22
45.158.8.0/23
147.78.122.0/23
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.5.148.0/23
194.147.6.0/23
Signature Algorithm: sha256WithRSAEncryption
01:83:18:66:72:9a:25:9e:ce:7f:a9:4e:8a:83:2f:64:3e:36:
2c:54:d5:e9:80:d7:ca:53:df:1f:e5:a7:75:65:88:76:35:82:
e1:40:18:50:95:0d:c3:ab:f4:d0:10:a3:ae:aa:d1:bb:c9:d9:
33:17:7e:09:91:14:18:fc:08:30:cd:f0:3b:ce:1f:a9:2f:00:
eb:95:2d:ec:3b:78:6a:c2:a4:e7:32:84:40:fc:b1:3f:4b:27:
e4:48:3e:4e:6e:14:dd:d8:5d:ea:7e:cb:ab:33:31:18:f6:51:
04:f5:e0:1d:57:34:a7:61:9c:69:67:29:b3:9c:20:ec:8c:94:
5a:06:f5:56:55:76:a2:47:e5:db:28:1a:74:9a:cc:4c:b1:2b:
08:b7:de:05:11:09:3a:84:1f:95:2b:b5:af:29:c8:57:7a:9a:
4e:64:47:6c:33:12:8c:8e:e0:40:bb:70:d3:e9:dd:73:83:38:
43:6c:20:83:6e:b9:06:02:49:55:77:89:8d:ec:fb:ab:5c:ca:
b6:84:ac:78:51:97:99:ea:58:cf:67:2e:58:4e:9a:44:45:fc:
57:df:c4:0e:ac:b9:9d:f7:ed:64:51:47:0a:4e:ba:20:38:ee:
24:1d:c0:e9:8a:cd:83:ee:4d:7c:58:b0:e8:7e:51:f6:54:d3:
e2:2f:b6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org