Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/vqQucS9AyVmmcYmuTfMDWg2uWgA.roa
File: vqQucS9AyVmmcYmuTfMDWg2uWgA.roa (raw, json)
Hash identifier: dHfLbJa8NZnN3j3RcYs8OtlzzLnh0HGFI5snARZzo70=
Subject key identifier: BE:A4:2E:71:2F:40:C9:59:A6:71:89:AE:4D:F3:03:5A:0D:AE:5A:00
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183D09DF9BEC000B21B264AD12912DB847B
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/vqQucS9AyVmmcYmuTfMDWg2uWgA.roa
Signing time: Thu 13 Oct 2022 09:12:37 +0000
ROA not before: Thu 13 Oct 2022 09:12:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 194.113.227.0/24 maxlen: 24
147.78.120.0/24 maxlen: 24
193.142.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d0:9d:f9:be:c0:00:b2:1b:26:4a:d1:29:12:db:84:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 13 09:12:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bea42e712f40c959a67189ae4df3035a0dae5a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a1:f2:2b:e3:d7:fb:93:1a:0e:56:0b:89:ef:
c5:c8:20:66:10:7a:2d:4b:55:82:a2:2b:a4:65:b2:
ed:8c:01:db:69:81:5a:92:99:89:48:d9:fc:6d:da:
6c:85:ed:dc:76:ba:8d:3b:64:54:bf:a1:bf:92:53:
4d:6b:dc:ea:cc:4a:83:ec:93:b6:3a:d9:98:bf:56:
80:ef:b9:23:9c:47:24:21:1e:3e:86:02:65:17:3f:
67:6c:c1:de:c3:76:f0:63:fa:c8:fd:ea:3b:25:25:
b1:f0:5a:3f:83:17:ed:8d:b7:f5:86:00:17:a7:12:
20:80:13:0a:7e:49:27:a7:9c:15:1b:99:54:12:4c:
36:2c:43:5a:ee:a5:e0:04:3d:fc:80:16:37:d2:57:
65:05:60:0b:94:f6:57:40:c3:f7:87:c8:bd:0c:cc:
42:b8:75:84:73:a8:95:19:cc:de:e6:1c:f8:9e:c0:
9b:54:77:d7:d7:ac:17:5b:c9:37:37:c7:64:26:d1:
d8:2b:18:87:c9:b0:d7:b7:5f:33:c8:65:85:62:14:
fd:4a:7f:25:26:54:ca:13:a1:6a:e8:71:ea:bd:cf:
3c:38:32:b2:97:e0:6b:09:fd:ef:dc:e4:75:05:3a:
30:9a:73:2b:39:fd:89:a0:62:8e:7e:a3:4f:bd:9f:
dc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A4:2E:71:2F:40:C9:59:A6:71:89:AE:4D:F3:03:5A:0D:AE:5A:00
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/vqQucS9AyVmmcYmuTfMDWg2uWgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.120.0/24
193.142.22.0/24
194.113.227.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:2a:a3:91:3c:c9:7d:2a:fa:6f:a6:1d:30:11:d9:f3:19:cf:
eb:7f:4b:30:c1:5d:86:27:be:4d:4f:b9:68:92:ea:54:bb:b9:
c1:23:5e:20:83:89:d7:cc:3c:bb:c1:6a:61:a4:23:44:e6:93:
7b:19:0b:8f:3a:bd:da:cb:13:3d:f6:ba:1b:22:2e:eb:68:1c:
cb:e5:16:0f:38:cd:2b:c4:95:fe:2d:54:c3:ec:1c:14:de:10:
f7:3c:40:e0:b7:7f:23:68:2c:b0:47:96:a1:80:ab:d0:09:27:
fc:05:56:d5:dc:1d:9c:72:4b:bf:ce:17:a9:f5:5b:e1:5a:d6:
45:bc:62:bc:a9:8a:cd:6d:3e:93:12:f0:34:4c:7f:3a:5b:be:
a2:6b:e7:8f:49:57:6a:61:68:d6:75:c3:9e:20:04:0d:77:5f:
0e:f2:b5:b5:23:53:10:29:87:09:4f:19:b4:40:a2:b3:26:d8:
44:b8:e4:78:6a:2e:f6:6a:f4:fb:61:8e:9b:52:a3:a8:b3:d3:
4b:b8:28:c5:70:08:7b:94:97:e3:77:fd:17:af:98:98:46:50:
9e:d6:55:43:a8:20:34:72:ec:d0:e3:0c:66:39:70:31:ac:d1:
97:55:3e:de:3c:b7:6d:d9:f9:4f:81:4d:a2:13:bb:f9:75:58:
00:96:1e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org