Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/t7eHdnmOnq1WBtnN2Qmhdilvx_w.roa
File: t7eHdnmOnq1WBtnN2Qmhdilvx_w.roa (raw, json)
Hash identifier: OclDYTleLQifVqIRs379uztuREdScyq8TqrR7PE2H/w=
Subject key identifier: B7:B7:87:76:79:8E:9E:AD:56:06:D9:CD:D9:09:A1:76:29:6F:C7:FC
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 040E417A
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/t7eHdnmOnq1WBtnN2Qmhdilvx_w.roa
Signing time: Tue 29 Mar 2022 08:16:22 +0000
ROA not before: Tue 29 Mar 2022 08:16:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
91.198.66.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.176.128.0/24 maxlen: 24
193.142.4.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68043130 (0x40e417a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 29 08:16:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7b78776798e9ead5606d9cdd909a176296fc7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:93:fb:6b:c3:62:36:e4:9b:9a:35:9b:33:
3c:13:4e:44:b3:6e:34:e4:7f:fa:d2:0b:82:f8:f8:
e2:d2:2c:bd:fd:85:be:bf:ec:5a:29:55:fa:db:4c:
4c:19:2b:f1:e3:9b:eb:ff:e3:9d:dd:35:48:ab:cd:
f6:8b:b0:41:92:7b:fb:0d:b9:40:ca:a2:a6:0a:16:
35:c2:f3:33:96:3f:9e:fa:95:d2:79:74:83:02:e2:
33:fc:1e:17:94:5a:51:74:11:17:8f:aa:ce:b0:bf:
db:0a:36:10:c6:b0:5b:84:70:73:54:68:78:14:f2:
41:57:a4:f3:51:33:12:03:4d:f9:da:3d:2c:66:f3:
81:3f:d4:1a:ae:1f:03:a5:35:6a:59:1e:f1:a1:c1:
5a:cc:52:21:69:bb:30:da:b1:f4:ad:a7:1d:41:be:
7e:f2:9f:fe:10:b3:38:e6:2d:c7:6b:e2:25:47:8f:
27:2d:86:70:40:22:49:67:01:d5:7b:f4:e5:67:77:
99:84:c9:59:d2:eb:b7:9d:e2:58:6d:0a:11:ba:bc:
2a:7c:d8:ab:75:8e:f8:55:f8:90:f7:29:b9:06:75:
f5:54:88:39:f5:3e:aa:25:91:1a:c3:f7:c8:28:d5:
b7:a5:35:be:f6:3f:00:e5:81:bd:68:0e:cd:4d:50:
ce:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B7:87:76:79:8E:9E:AD:56:06:D9:CD:D9:09:A1:76:29:6F:C7:FC
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/t7eHdnmOnq1WBtnN2Qmhdilvx_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
91.198.66.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.113.226.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:25:36:da:77:0f:d7:26:76:1f:96:89:23:63:6a:f0:e1:3b:
4e:04:03:2f:86:03:b9:b3:92:7a:b6:63:3c:a3:39:52:58:57:
e8:e1:33:7f:a0:a2:b4:c9:92:69:6c:c6:46:7e:39:97:8b:70:
95:7f:38:63:1c:0b:ab:5d:77:7a:95:9c:de:49:3d:a2:58:af:
88:f7:8e:ba:d5:dd:ef:71:b5:b7:35:4d:02:4f:d9:39:47:7b:
55:10:c4:bd:ff:80:a0:df:26:be:3e:91:52:bb:47:86:22:bb:
ca:6b:0d:cd:de:3e:bc:28:1b:4e:1c:49:bf:e4:ea:f1:da:98:
2c:02:33:db:04:47:7d:ab:02:13:06:af:6f:74:31:75:2e:a4:
77:a7:a6:aa:b6:ac:ac:2f:82:63:53:9d:b4:a8:30:ac:3b:0a:
3d:df:9b:3e:f1:c6:48:f7:5e:7b:7c:84:76:f0:6b:16:15:93:
56:52:76:5e:47:31:72:df:13:d5:8a:6a:f4:72:a7:6e:8b:d3:
09:42:db:28:03:62:6d:0f:b4:38:9e:7b:d2:0c:6c:f6:21:97:
1b:e9:87:11:f5:6f:72:76:2b:40:09:b1:0a:f4:6f:68:a7:17:
e3:05:26:e9:cd:b1:bf:7d:29:13:7a:6f:44:20:c0:43:d7:6a:
fe:34:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org