Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/uTJIpeV7btO8_CawGE_JHY0pg00.roa
File: uTJIpeV7btO8_CawGE_JHY0pg00.roa (raw, json)
Hash identifier: 88sXHO5uhKTBmIKuI+V6YqGZj5SFHIeZGCO4vKGR304=
Subject key identifier: B9:32:48:A5:E5:7B:6E:D3:BC:FC:26:B0:18:4F:C9:1D:8D:29:83:4D
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184ADB54E1F23645340499A5AA0B2755A80
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/uTJIpeV7btO8_CawGE_JHY0pg00.roa
Signing time: Fri 25 Nov 2022 07:34:11 +0000
ROA not before: Fri 25 Nov 2022 07:34:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 193.176.54.0/24 maxlen: 24
193.176.55.0/24 maxlen: 24
45.154.104.0/23 maxlen: 24
45.154.106.0/23 maxlen: 24
91.199.168.0/24 maxlen: 24
141.98.156.0/23 maxlen: 24
147.78.122.0/23 maxlen: 24
147.78.120.0/23 maxlen: 24
45.149.186.0/23 maxlen: 24
45.149.184.0/23 maxlen: 24
45.158.10.0/23 maxlen: 24
45.158.8.0/23 maxlen: 24
45.153.4.0/23 maxlen: 23
195.206.230.0/24 maxlen: 24
195.206.231.0/24 maxlen: 24
176.105.224.0/23 maxlen: 24
195.206.234.0/24 maxlen: 24
45.153.6.0/23 maxlen: 24
195.206.235.0/24 maxlen: 24
45.142.236.0/23 maxlen: 24
45.142.238.0/23 maxlen: 24
193.111.116.0/24 maxlen: 24
193.111.117.0/24 maxlen: 24
45.158.170.0/23 maxlen: 24
45.158.168.0/23 maxlen: 24
193.151.182.0/23 maxlen: 24
193.151.180.0/23 maxlen: 24
195.20.98.0/24 maxlen: 24
194.104.156.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
195.20.105.0/24 maxlen: 24
195.20.99.0/24 maxlen: 24
194.105.21.0/24 maxlen: 24
152.89.250.0/23 maxlen: 24
193.29.96.0/23 maxlen: 24
193.29.98.0/23 maxlen: 24
194.147.4.0/23 maxlen: 24
194.147.6.0/23 maxlen: 24
194.5.146.0/23 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ad:b5:4e:1f:23:64:53:40:49:9a:5a:a0:b2:75:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 25 07:34:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b93248a5e57b6ed3bcfc26b0184fc91d8d29834d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:77:ba:f8:c3:5c:53:36:63:19:3a:e0:3a:a6:
2c:e9:7b:e9:3b:bb:59:42:4b:15:8e:70:0d:16:99:
9d:e3:d9:0a:dc:98:bf:f4:3f:be:20:d2:23:b4:3e:
f5:17:34:1f:61:19:f3:57:a9:2d:2b:99:9b:1d:19:
be:76:ba:4e:8c:8e:87:96:8e:11:a6:c3:9f:96:15:
e4:4f:b1:0b:2b:98:ed:6f:34:d3:6c:f6:a1:e5:71:
58:ff:89:dc:cd:21:65:2c:5e:de:2b:3e:83:cf:a8:
35:de:4f:0f:e9:d0:5e:9d:76:f1:6c:d8:e6:49:e9:
9a:59:3c:0e:a6:42:66:01:f4:34:96:a3:ca:a7:56:
72:d5:a5:89:d3:a5:4a:6c:29:2e:6b:39:22:c5:6d:
fd:5d:04:bb:be:de:06:8d:be:94:b8:9f:74:31:86:
cf:08:ba:a4:f0:61:42:eb:ea:4d:c7:7f:e9:c4:03:
68:b8:b3:ca:46:0e:c9:92:d5:12:27:20:5d:9f:3c:
0b:31:76:77:6e:69:cd:d3:02:7d:e8:2d:5f:97:44:
77:5b:83:8a:9f:5b:c9:f5:ff:74:f0:23:b3:d4:42:
f3:84:96:fa:06:ef:54:11:e6:6c:31:c3:68:a0:3e:
f9:6e:5f:61:13:a5:aa:0e:90:25:c1:f0:84:b9:9a:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:32:48:A5:E5:7B:6E:D3:BC:FC:26:B0:18:4F:C9:1D:8D:29:83:4D
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/uTJIpeV7btO8_CawGE_JHY0pg00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.236.0/22
45.149.184.0/22
45.153.4.0/22
45.154.104.0/22
45.158.8.0/22
45.158.168.0/22
91.199.168.0/24
141.98.156.0/23
147.78.120.0/22
152.89.250.0/23
176.105.224.0/23
193.29.96.0/22
193.111.116.0/23
193.142.22.0/24
193.151.180.0/22
193.176.54.0/23
194.5.146.0/23
194.104.156.0/24
194.104.158.0/24
194.105.21.0/24
194.147.4.0/22
195.20.98.0/23
195.20.105.0/24
195.206.230.0/23
195.206.234.0/23
Signature Algorithm: sha256WithRSAEncryption
44:40:e1:ee:8c:07:8a:26:40:16:01:d1:44:6c:03:af:fb:ce:
62:19:2a:12:a7:f3:13:cf:15:bd:12:42:01:75:39:b3:15:10:
a7:22:f7:31:2e:7f:b1:38:1f:f1:cf:7c:f6:7c:05:ec:1f:9f:
c8:41:c2:65:c8:c3:d1:9c:86:dd:29:91:60:73:f5:32:bc:31:
ea:c2:ea:7a:82:3b:44:3f:d5:3f:2a:07:db:4b:c6:29:ce:f8:
d2:c8:aa:2e:61:b3:a4:e8:e2:29:ea:c5:f7:1e:61:fe:fe:c9:
5f:78:fb:13:77:0d:06:0c:47:ae:d6:81:b2:cf:ff:f8:8e:0e:
4e:b2:4e:26:cd:a2:4c:e1:eb:59:e1:80:75:3d:2c:a6:2c:30:
02:9b:4a:b1:bf:c0:38:c2:98:ab:43:8f:61:41:93:38:d2:81:
2d:37:a2:3b:6d:e4:14:83:94:b9:95:5e:ab:6d:90:c6:16:27:
8b:d9:eb:1b:b2:3a:5f:73:f4:bb:ae:2a:5d:24:23:95:fa:a4:
e7:e5:a3:2c:0d:78:e1:78:13:d6:59:39:3e:7c:b3:a7:8a:d5:
d1:50:03:eb:77:95:46:78:2e:0d:61:66:a4:ad:06:da:93:bf:
12:87:e6:c0:c9:c0:8d:0f:db:72:f8:47:ad:d0:8a:d6:4d:87:
b7:e3:66:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org