Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wExd-l31BVl8swEVSxab5_D6yOQ.roa
File: wExd-l31BVl8swEVSxab5_D6yOQ.roa (raw, json)
Hash identifier: onniOTViTenakIAN8nzJj9SKKXXYZZVpTm7bev9qfPQ=
Subject key identifier: C0:4C:5D:FA:5D:F5:05:59:7C:B3:01:15:4B:16:9B:E7:F0:FA:C8:E4
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0184ECA2C433E141789AC77BCA371B5C0FD2
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wExd-l31BVl8swEVSxab5_D6yOQ.roa
Signing time: Wed 07 Dec 2022 12:50:00 +0000
ROA not before: Wed 07 Dec 2022 12:50:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 193.29.97.0/24 maxlen: 24
45.152.240.0/23 maxlen: 24
195.206.234.0/24 maxlen: 24
194.113.226.0/24 maxlen: 24
194.113.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:a2:c4:33:e1:41:78:9a:c7:7b:ca:37:1b:5c:0f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Dec 7 12:50:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c04c5dfa5df505597cb301154b169be7f0fac8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e4:2d:f7:ca:8d:f2:ca:71:45:0f:a7:1a:96:
81:f4:66:27:3f:27:49:25:fb:ae:c1:b6:6e:fa:ea:
ef:3e:96:b2:c2:19:9c:50:b7:0f:39:e7:00:c5:d5:
d5:4a:53:d5:2e:ac:7d:46:37:e9:0f:53:a6:21:9a:
4b:91:b2:5b:5a:9b:1f:80:bf:bb:0d:f6:5a:05:83:
b2:1a:3e:b3:f4:d0:3e:62:28:10:e5:63:83:33:02:
99:9f:32:2f:b8:57:d8:00:3f:fe:db:b8:2b:f0:49:
02:4b:30:27:30:9d:4d:7e:69:6b:39:31:96:84:44:
5f:ec:3a:55:15:13:5f:eb:04:2c:d0:ac:12:9e:41:
e0:6f:01:ac:36:a2:95:91:cd:77:fb:e1:99:d9:b1:
73:ef:33:46:74:a2:d5:fb:60:47:f9:ff:6a:ad:12:
a4:6b:14:ec:ab:49:06:a5:b5:53:ed:30:4a:c3:b4:
94:e0:ad:28:3a:fc:fc:82:74:b3:81:71:17:0b:30:
71:74:39:87:78:43:0c:0d:ef:41:3f:a0:0a:65:3f:
ec:e8:04:d6:f3:7f:56:d8:bb:fe:d7:35:43:cd:12:
ae:7b:9d:b1:ff:93:4f:11:ef:ba:6f:dc:72:70:7a:
7d:5c:3e:84:b3:b2:76:c0:53:ec:08:86:eb:f9:56:
08:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4C:5D:FA:5D:F5:05:59:7C:B3:01:15:4B:16:9B:E7:F0:FA:C8:E4
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/wExd-l31BVl8swEVSxab5_D6yOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.240.0/23
193.29.97.0/24
194.113.223.0/24
194.113.226.0/24
195.206.234.0/24
Signature Algorithm: sha256WithRSAEncryption
03:0b:b9:fc:6a:f6:e1:b0:1a:52:66:22:a8:50:45:56:87:39:
9e:8e:1a:a2:b5:c2:c8:e2:e5:b6:51:cd:38:48:c6:fd:43:89:
d3:a5:2d:4f:43:86:e0:59:ac:d1:14:ea:ca:97:97:5c:64:82:
11:64:70:07:ac:9a:80:3b:88:fd:c1:5a:ff:de:db:d6:6c:af:
98:38:b4:fa:29:31:ca:17:33:77:2f:34:58:8c:e2:34:ef:04:
e5:a2:b0:b1:ce:7d:23:c5:57:52:50:20:0f:88:96:e1:a9:07:
57:f5:bf:4f:84:b2:14:7d:9b:06:8c:18:16:cb:36:e8:8b:5c:
89:cf:4a:f7:b3:99:31:2a:01:89:99:d0:8d:20:4c:80:40:ec:
9f:5e:9e:24:80:73:aa:cd:6b:af:ac:94:2f:5e:5f:93:11:c6:
d4:af:52:b1:b1:dc:98:2d:d6:74:42:8c:18:98:51:94:0d:e7:
04:c4:03:83:63:63:aa:5e:77:aa:b1:72:fa:39:15:ba:a6:73:
08:dc:2d:07:27:78:ec:ae:b0:fe:52:0c:87:38:a3:df:bb:a9:
03:b1:77:1a:f7:4c:e6:c9:99:53:98:74:3d:89:9f:7d:12:e5:
eb:3f:17:eb:ea:26:73:65:d6:26:24:ad:06:e2:98:eb:ec:4e:
a0:fe:b1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org