Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/v-SXWt7oew6FZ5HP-wTlg5NdZ2c.roa
File: v-SXWt7oew6FZ5HP-wTlg5NdZ2c.roa (raw, json)
Hash identifier: Hn2vzwlBep6edcTLESD9wssXSvN6/9arIP+uYvQmNMo=
Subject key identifier: BF:E4:97:5A:DE:E8:7B:0E:85:67:91:CF:FB:04:E5:83:93:5D:67:67
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184864B2DDC9C8AB8C8C31DF6E7367734BF
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/v-SXWt7oew6FZ5HP-wTlg5NdZ2c.roa
Signing time: Thu 17 Nov 2022 15:53:04 +0000
ROA not before: Thu 17 Nov 2022 15:53:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 194.113.227.0/24 maxlen: 24
194.5.146.0/24 maxlen: 24
147.78.120.0/24 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:86:4b:2d:dc:9c:8a:b8:c8:c3:1d:f6:e7:36:77:34:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Nov 17 15:53:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bfe4975adee87b0e856791cffb04e583935d6767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e3:b5:d6:12:6e:23:b0:c9:f1:9b:49:1c:97:
38:4c:cf:49:d9:2e:3f:fa:1f:97:b4:4e:c0:b1:98:
7f:a2:19:07:3f:a2:b0:cb:f0:51:86:f4:63:68:e2:
2d:15:10:e5:d7:ce:0c:ad:4c:59:20:7e:b0:7f:be:
f3:bc:0f:c6:74:07:70:e8:34:6d:49:8b:ab:65:4b:
3c:33:3d:04:78:1b:ac:1d:16:34:d5:71:46:25:c0:
f3:fa:5a:6e:c8:7d:f9:f8:38:56:85:30:ea:21:be:
96:12:18:09:7f:49:09:7d:f4:22:50:c9:c1:3e:b2:
dc:00:55:dc:32:5e:03:6e:8f:c3:f3:78:97:06:ab:
2f:85:7c:9e:d8:22:5f:33:f3:00:82:b0:1d:5c:e0:
9e:80:06:88:ce:9c:0e:02:b8:90:7b:86:43:22:a0:
6d:33:9b:4a:21:5d:a1:16:66:8f:f0:2f:41:6c:cf:
71:51:1f:80:42:a7:64:bf:94:dc:c3:8f:b0:ba:b6:
31:52:df:6e:12:01:b0:14:b9:7d:0f:15:ff:71:be:
fb:5d:25:4f:f2:f7:91:35:e8:3c:bd:27:d5:3c:a7:
fc:89:f6:41:a4:94:f6:0d:16:d2:6a:96:d6:11:d1:
91:f3:a5:fc:81:6b:29:39:7c:c2:82:84:4a:71:1e:
80:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E4:97:5A:DE:E8:7B:0E:85:67:91:CF:FB:04:E5:83:93:5D:67:67
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/v-SXWt7oew6FZ5HP-wTlg5NdZ2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.120.0/24
193.142.22.0/24
194.5.146.0/24
194.113.227.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a3:06:7a:13:9c:e4:68:71:24:3b:8a:d7:5d:a5:68:2e:de:
aa:0b:50:55:87:11:87:54:bf:50:f0:13:f0:65:85:aa:67:c7:
bd:4b:ae:e3:1a:50:9c:8c:cd:48:d7:d9:b8:5c:9e:93:e8:57:
98:e4:a6:3f:ef:e4:32:6f:bf:36:76:85:89:c3:2b:ac:33:6b:
f5:c1:c3:c1:96:7f:16:98:c4:77:b5:81:f2:d2:7e:1f:e7:08:
e4:60:64:b2:05:d8:0e:87:79:74:0c:0b:7e:86:bf:d8:1c:d5:
b4:01:50:4a:1c:15:44:d1:42:21:38:fb:68:4a:db:53:2a:73:
9a:7b:e7:bc:27:d3:86:db:88:de:ac:b8:06:20:7d:1b:c3:94:
0a:ad:f1:38:e9:71:19:ff:24:35:12:ac:a2:0c:78:dc:83:ba:
2e:5a:a4:b2:30:6b:41:5b:df:17:7b:99:28:df:2b:d3:36:01:
9f:93:fc:31:b9:ae:55:6d:65:ac:00:4b:27:65:3d:85:08:d0:
43:a5:ac:06:6e:4f:ff:66:46:ca:8b:1d:9a:e9:c3:59:2e:48:
70:60:77:27:13:73:80:16:b7:19:dc:d3:e4:06:c4:25:e0:28:
83:d0:d7:3a:a3:1d:f9:29:f2:68:ff:64:69:58:11:85:9c:88:
38:f7:a6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org