Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/vW3U2VPSh1J2VpNmeh4vqXCHiFA.roa
File: vW3U2VPSh1J2VpNmeh4vqXCHiFA.roa (raw, json)
Hash identifier: 2PMNDD17Uo4OOqow4Jd5sZMdP0s+76WHcxzai6v7TsM=
Subject key identifier: BD:6D:D4:D9:53:D2:87:52:76:56:93:66:7A:1E:2F:A9:70:87:88:50
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0352CB45
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/vW3U2VPSh1J2VpNmeh4vqXCHiFA.roa
Signing time: Mon 24 Jan 2022 11:12:09 +0000
ROA not before: Mon 24 Jan 2022 11:12:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.146.80.0/23 maxlen: 23
45.146.82.0/23 maxlen: 23
152.89.248.0/22 maxlen: 22
193.29.96.0/22 maxlen: 22
141.98.156.0/22 maxlen: 22
194.5.146.0/23 maxlen: 23
194.5.148.0/23 maxlen: 23
193.142.4.0/24 maxlen: 24
176.105.224.0/22 maxlen: 22
194.113.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55757637 (0x352cb45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jan 24 11:12:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd6dd4d953d28752765693667a1e2fa970878850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:08:5f:bf:5e:bb:38:35:b6:a3:33:ba:45:
40:b8:65:01:72:57:65:d8:3e:ad:e7:28:ac:82:f9:
fe:8f:7b:51:d2:a6:59:61:33:52:9d:7a:c6:59:b0:
c3:bc:2e:38:22:32:e5:f5:12:83:9f:ce:77:27:a4:
be:44:23:d3:8b:e5:54:c2:08:ea:0f:3b:78:42:c3:
10:c8:b1:3e:3f:c8:e2:27:63:23:0f:b3:11:07:76:
80:d8:79:a7:42:f6:bc:00:71:9f:98:20:b3:54:8e:
52:c1:b0:22:2f:c1:6b:7d:e9:8e:3b:25:7d:a5:f8:
bf:16:52:aa:35:de:d9:17:1d:c8:88:48:37:66:89:
34:61:c3:da:1b:33:9a:0f:9d:b5:8d:20:bd:20:44:
7e:3a:8d:aa:d8:c1:c1:b6:ec:e5:b4:97:d1:91:1d:
cf:dd:bf:1c:b0:0e:44:bd:c4:6e:e6:69:15:73:60:
5b:65:e3:37:7f:dd:cf:e2:5e:4e:98:ee:73:ad:4f:
89:8d:fe:15:47:7c:50:ea:4a:2a:5f:fc:37:7f:e8:
7b:c6:e7:14:22:94:b3:54:3a:94:50:31:94:26:0b:
a4:82:51:e3:65:ef:a9:34:09:38:25:d7:1e:3c:1f:
dc:62:d3:63:45:a9:81:db:74:72:86:b0:41:96:48:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6D:D4:D9:53:D2:87:52:76:56:93:66:7A:1E:2F:A9:70:87:88:50
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/vW3U2VPSh1J2VpNmeh4vqXCHiFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/22
141.98.156.0/22
152.89.248.0/22
176.105.224.0/22
193.29.96.0/22
193.142.4.0/24
194.5.146.0-194.5.149.255
194.113.223.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:85:dc:f5:f3:ae:cb:ad:59:dd:72:b0:4e:8c:26:ff:eb:f2:
ae:ef:09:c3:b6:7b:15:48:e5:c9:ae:8a:3e:3e:4d:28:50:4d:
7f:2c:75:60:56:e6:60:d1:2d:8d:87:64:ad:e7:ce:bd:d3:3e:
ed:23:b8:21:ef:3c:48:68:81:a0:72:e7:5b:d3:bd:ae:35:1e:
13:95:80:f8:2f:98:f4:c4:a0:7c:b7:b6:6a:4c:f0:06:93:57:
66:e3:37:9d:ef:b0:99:8f:f7:1c:5b:9b:2b:8a:e7:1b:49:86:
dc:7c:15:b9:6d:3c:15:38:34:90:c6:5a:42:e6:e3:61:e8:59:
1b:95:7c:e5:cf:53:82:33:19:22:cf:c0:95:e6:7b:c2:ed:28:
f5:c2:26:b8:0a:25:b5:60:5d:2c:46:0c:7e:b9:86:3d:2f:0f:
bc:b7:c6:97:ba:64:90:80:d3:ef:84:e3:52:e5:cc:a5:42:04:
19:b5:be:a2:38:50:19:ba:0c:10:18:4d:f4:0b:a3:d9:c1:52:
bc:f6:e3:fd:71:98:32:57:d3:5f:01:1f:db:5f:20:7c:16:9a:
17:0e:fd:97:4b:3a:8a:2c:98:b2:0c:82:a7:d2:49:2c:7a:df:
5c:5c:34:b7:01:0b:fa:f1:e5:e4:e3:65:c4:c3:32:9d:60:3d:
fc:fb:05:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:44 2023 by rpki-client on console-ams.rpki-client.org