Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wBl1dsqi-786t10aLnhvHXuC-3U.roa
File: wBl1dsqi-786t10aLnhvHXuC-3U.roa (raw, json)
Hash identifier: 7UkMtfWh76LXxVPtcuYsi3VZLJzqHPQoiYcWfj+LyeE=
Subject key identifier: C0:19:75:76:CA:A2:FB:BF:3A:B7:5D:1A:2E:78:6F:1D:7B:82:FB:75
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0181D3AAF3300CBB92E3C8594CF1DF7BA456
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wBl1dsqi-786t10aLnhvHXuC-3U.roa
Signing time: Wed 06 Jul 2022 13:20:04 +0000
ROA not before: Wed 06 Jul 2022 13:20:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.111.125.0/24 maxlen: 24
91.198.66.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
193.176.128.0/24 maxlen: 24
193.142.4.0/24 maxlen: 24
192.166.114.0/24 maxlen: 24
147.78.122.0/23 maxlen: 24
194.113.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d3:aa:f3:30:0c:bb:92:e3:c8:59:4c:f1:df:7b:a4:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 6 13:20:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0197576caa2fbbf3ab75d1a2e786f1d7b82fb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ac:1a:24:be:06:56:21:bb:cf:8c:67:60:7d:
d2:ee:98:46:4e:00:5b:c4:bc:85:e9:68:77:ed:f0:
07:00:2b:0c:ab:1d:18:78:9b:5f:57:74:d8:77:49:
c9:cc:f7:28:db:8f:4a:e5:df:de:f0:fe:5b:9b:13:
ee:4d:f8:5a:38:85:e8:30:5a:2d:a0:47:8e:9d:fc:
25:c1:59:e7:5b:f1:aa:2d:ce:f0:28:e8:3a:ec:61:
2e:07:ad:88:42:ce:ee:88:69:b1:2f:90:7c:71:70:
6e:78:37:2c:ea:7f:ac:3f:b5:b9:3e:14:4e:fd:14:
ef:8d:10:ef:d5:8a:4a:fa:5c:3c:33:f6:67:2d:c3:
a2:78:b2:b9:51:b3:46:bf:be:6b:f5:d0:3f:9a:69:
ac:c0:46:d8:54:91:89:37:c5:0e:eb:28:03:0a:3b:
39:9c:24:ff:35:6f:38:01:ca:15:fc:9f:f4:ba:8e:
c1:9a:e1:3e:09:25:cf:45:92:0e:cc:e0:16:49:70:
f4:c2:5a:86:f0:83:0d:51:d5:4c:b6:4e:81:ef:a9:
9a:fe:89:eb:3d:4f:8c:ee:a3:3d:db:20:dc:b4:a9:
e0:83:13:70:b7:27:27:7c:a3:da:eb:24:d0:a1:13:
14:58:ba:37:85:cd:85:ed:83:3d:d1:94:2c:3b:0f:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:19:75:76:CA:A2:FB:BF:3A:B7:5D:1A:2E:78:6F:1D:7B:82:FB:75
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wBl1dsqi-786t10aLnhvHXuC-3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
91.198.66.0/24
147.78.122.0/23
192.166.114.0/24
193.111.125.0/24
193.142.4.0/24
193.176.128.0/24
194.113.226.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8a:52:97:1d:70:d5:67:00:29:ef:e1:fb:0b:16:c2:1f:e3:
87:48:20:21:1d:ef:6f:3d:00:05:be:23:5f:c7:a4:6f:a2:2a:
b3:5b:12:3f:a3:38:7b:b5:18:be:ec:18:c9:5f:aa:ce:dc:0e:
46:3d:d4:14:47:5a:21:48:12:77:9f:c7:41:7f:93:2a:55:0b:
4f:5d:2d:1e:f3:51:52:ec:d4:ec:d3:43:9d:08:ef:11:07:fd:
02:ff:ff:5e:80:9d:b9:fa:c6:5d:8c:12:6e:da:cd:c5:64:d3:
c1:84:64:4d:a0:4f:87:9d:f7:7a:fd:ce:e3:50:98:08:f9:17:
73:af:db:20:1c:0c:f6:16:36:48:01:24:4a:3d:09:ed:09:bc:
ee:fd:15:b8:0a:8d:b0:b8:4c:24:74:c7:7c:08:6b:87:6f:09:
0c:95:35:3b:ae:f8:a1:af:e5:b3:1f:9d:6a:47:e4:9e:88:16:
e7:91:b7:53:40:e4:6c:66:cb:b0:d3:16:48:37:4e:01:0e:a7:
99:fe:0d:bf:14:78:f7:62:96:91:c1:df:c9:44:bd:81:db:59:
31:e8:b7:8e:7f:4f:86:49:c3:02:7c:47:43:5d:38:9e:78:b0:
07:cb:d8:61:94:1e:f3:41:24:f5:d7:d1:85:e4:94:31:da:0a:
ed:9f:9d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:58 2025 by rpki-client