Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/uS1724ZrWHBo9qFn7GoNhJGyVUo.roa
File: uS1724ZrWHBo9qFn7GoNhJGyVUo.roa (raw, json)
Hash identifier: AghdOYkoCMO3O0mjOnX3Vs3tqq9Pxt5i3qnxv5mpe98=
Subject key identifier: B9:2D:7B:DB:86:6B:58:70:68:F6:A1:67:EC:6A:0D:84:91:B2:55:4A
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0182203AD7CC95165A2EDAC39B97CF9928B7
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/uS1724ZrWHBo9qFn7GoNhJGyVUo.roa
Signing time: Thu 21 Jul 2022 10:08:23 +0000
ROA not before: Thu 21 Jul 2022 10:08:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 45.158.8.0/22 maxlen: 22
176.105.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:3a:d7:cc:95:16:5a:2e:da:c3:9b:97:cf:99:28:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 21 10:08:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b92d7bdb866b587068f6a167ec6a0d8491b2554a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:1f:39:89:30:0f:e9:b5:63:80:34:d9:b7:
d5:f8:89:f5:d3:25:2d:a2:22:34:10:ca:f1:d7:52:
47:f6:9e:14:1b:12:0d:97:82:75:eb:21:00:17:2b:
54:47:8e:f8:e1:31:ac:fd:31:ac:7d:ed:ee:82:92:
91:41:be:82:3f:16:a8:78:96:b7:bd:87:b4:9b:bb:
25:c8:f9:8a:bc:eb:51:c2:e0:4d:25:89:c8:6e:f5:
bf:7e:03:c2:0d:89:3e:38:a5:03:38:2b:c9:2d:6b:
db:88:7b:ce:31:8b:17:64:a7:17:86:b4:c5:ce:26:
f9:88:e0:68:79:f5:d7:3f:49:90:ba:fe:24:ef:03:
07:c4:fa:f2:fa:24:b4:08:07:c3:f7:d4:60:3d:8a:
15:84:f1:ec:b6:7c:b0:e6:5e:fc:80:66:9a:3a:ac:
65:2f:21:dd:46:0b:b3:a8:b9:ab:cb:7e:38:0e:0e:
ad:28:8a:f0:0a:ad:4c:f6:63:87:17:01:e1:97:88:
99:9c:f5:83:74:de:3e:27:8c:2e:61:13:bf:2f:08:
7e:0d:bf:c4:a5:a7:6e:92:72:19:3d:f7:9a:ab:72:
3c:5b:0a:75:44:ff:75:6e:73:2f:8a:01:54:d1:ee:
d7:45:1a:18:7f:c5:b7:80:cb:e0:6b:4b:cd:84:02:
a0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2D:7B:DB:86:6B:58:70:68:F6:A1:67:EC:6A:0D:84:91:B2:55:4A
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/uS1724ZrWHBo9qFn7GoNhJGyVUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.8.0/22
176.105.224.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:aa:2a:1c:05:13:bd:f2:3a:74:b0:d8:21:58:14:15:4d:74:
4a:9a:4d:ac:f3:e6:b3:98:67:c5:20:e9:96:48:a3:0e:2f:0a:
4c:05:24:44:c2:62:c8:da:17:48:b5:a3:19:fd:be:0c:c2:4b:
d3:b4:49:19:84:72:66:76:5f:7a:e4:1a:88:da:51:ed:c2:40:
63:da:0f:4a:0d:69:9f:f7:12:a2:3f:6b:3a:44:c4:1a:5b:16:
87:a8:d2:a0:61:77:f8:91:24:96:4a:f5:63:41:ae:d8:dc:27:
b9:c9:ba:9c:9e:2e:78:b2:a4:6e:79:e5:42:f5:c8:7e:2d:04:
fb:57:77:79:79:d3:59:46:70:8d:53:c1:78:58:ff:e4:fb:c1:
a5:b6:a5:da:38:51:72:82:71:b3:16:c6:48:92:72:5e:96:5b:
c0:dc:41:17:93:e2:88:d2:63:d7:d8:a9:94:fc:59:1d:ee:ec:
f9:a6:a0:8e:24:18:3b:43:2c:da:21:8a:cb:e6:87:5d:58:de:
01:29:da:8f:bb:e3:65:41:b7:46:3b:90:81:23:5c:5c:ad:3d:
53:b5:bb:87:91:2f:55:1a:5b:07:72:15:73:6d:fc:1e:f3:13:
60:79:a2:07:9c:b2:6a:1b:1a:cc:f3:0d:9d:a6:71:b0:02:28:
38:f7:e7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org