Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/omnEyNFoq4-9a6MvUNZOIw9WrQw.roa
File: omnEyNFoq4-9a6MvUNZOIw9WrQw.roa (raw, json)
Hash identifier: PvcXw71EHQCZh+LCScCl+Dl64CVi9pIK76zE+++LQao=
Subject key identifier: A2:69:C4:C8:D1:68:AB:8F:BD:6B:A3:2F:50:D6:4E:23:0F:56:AD:0C
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 047F44E1
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/omnEyNFoq4-9a6MvUNZOIw9WrQw.roa
Signing time: Mon 09 May 2022 18:21:55 +0000
ROA not before: Mon 09 May 2022 18:21:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
91.198.66.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.176.128.0/24 maxlen: 24
193.142.4.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
194.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75449569 (0x47f44e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: May 9 18:21:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a269c4c8d168ab8fbd6ba32f50d64e230f56ad0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b9:ed:87:67:8f:a1:a2:74:f2:5d:fd:72:3e:
93:f7:80:fa:2e:d2:13:9b:e0:31:a1:9a:1f:79:71:
b7:b6:09:5e:43:6f:3e:78:1c:b6:35:f4:97:10:c7:
b0:b2:9a:9b:32:77:b5:16:f1:53:d7:78:f7:60:f5:
7d:7d:a8:14:44:82:21:c8:76:aa:c8:2f:aa:77:9a:
4a:f8:47:99:d6:cf:9a:40:ea:a4:fc:d7:d4:0c:a5:
c5:eb:a8:a0:80:01:dc:cc:ad:07:e0:66:cb:07:e4:
98:87:80:9b:1b:a2:38:1f:ac:2e:70:42:33:60:ce:
5d:c6:7c:70:d1:e0:26:b2:7e:ea:0c:9d:ef:36:7d:
89:4e:52:c4:ef:8a:3e:c8:96:6a:fd:b5:9a:bb:ca:
81:3f:03:e3:c7:2b:26:13:38:f1:fb:34:ce:3f:66:
84:4d:b5:1e:5c:09:be:70:15:85:92:23:c1:76:a1:
4e:d7:37:82:95:2d:b6:82:f6:cf:70:46:86:1e:37:
67:b6:74:74:d3:88:f2:63:ee:87:9c:26:b0:90:d3:
6a:54:96:cb:8b:07:56:ca:ab:00:37:03:3e:1e:33:
54:22:6d:e7:91:73:94:6a:dd:d5:e9:1b:fc:68:7e:
2b:e2:b2:cb:13:ee:0b:0a:95:72:5b:b8:3e:0c:f3:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:69:C4:C8:D1:68:AB:8F:BD:6B:A3:2F:50:D6:4E:23:0F:56:AD:0C
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/omnEyNFoq4-9a6MvUNZOIw9WrQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
91.198.66.0/24
147.78.122.0/23
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.113.226.0/24
Signature Algorithm: sha256WithRSAEncryption
91:89:81:77:be:ec:b9:b1:20:29:c3:46:59:96:f9:1b:f4:a9:
1b:eb:62:4b:3c:0b:6f:72:f7:6e:7c:9b:16:b9:cf:57:ca:70:
74:07:11:05:c9:c8:e2:c7:9a:ae:15:d0:f2:e7:6b:ad:7c:72:
f3:65:a1:ab:7a:07:40:e4:56:4c:3e:f0:5c:6a:94:3b:63:20:
7b:28:56:fd:61:5b:1d:fd:12:5e:1a:65:39:b7:ec:9a:40:60:
49:29:66:49:c6:74:a2:8a:5b:9c:7c:80:7c:79:3e:51:0a:bb:
3f:62:43:e0:33:03:80:20:b7:19:1f:bb:0f:7f:0a:d3:27:45:
a9:62:c4:6b:31:97:b2:8f:08:0a:42:2c:a2:aa:7b:88:b7:66:
d4:8c:16:25:65:ce:79:3d:53:35:c3:59:ee:d6:c5:70:b0:9c:
90:d0:62:8b:47:d4:be:0c:ff:d4:c3:b2:c8:bd:db:fc:da:17:
ff:45:a6:da:0b:e1:66:54:80:54:88:10:5d:53:8f:d4:6f:c2:
b6:74:c6:50:1b:ff:d3:7b:81:83:9e:5f:1d:30:8f:c7:ef:97:
20:1e:c5:6b:12:01:12:fb:39:5d:1c:72:55:2e:69:b8:14:32:
4c:1c:f1:1e:d4:52:af:40:ea:7d:55:51:6e:a5:87:bf:d3:86:
92:0b:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org