Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/x0hzRbIqyiHbs0EB7ST2hs3wGt4.roa
File: x0hzRbIqyiHbs0EB7ST2hs3wGt4.roa (raw, json)
Hash identifier: +BQqBqTVWuQagTFm+SQW9kx4hXJqpSnWWfoWrZ2oEFI=
Subject key identifier: C7:48:73:45:B2:2A:CA:21:DB:B3:41:01:ED:24:F6:86:CD:F0:1A:DE
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183B0E57D5E1BC9214157DC1C179FBE95AE
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/x0hzRbIqyiHbs0EB7ST2hs3wGt4.roa
Signing time: Fri 07 Oct 2022 05:22:53 +0000
ROA not before: Fri 07 Oct 2022 05:22:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 45.149.185.0/24 maxlen: 24
195.206.234.0/24 maxlen: 24
194.104.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b0:e5:7d:5e:1b:c9:21:41:57:dc:1c:17:9f:be:95:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 7 05:22:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c7487345b22aca21dbb34101ed24f686cdf01ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:96:6e:ac:13:6d:3f:20:d4:a0:f9:ae:9c:
82:57:dd:6c:f6:60:ef:e8:78:d8:04:cd:66:75:03:
01:f1:95:18:4b:1d:78:87:9e:f0:a0:ab:06:18:8e:
d0:1e:3d:4c:9f:34:dc:8b:ac:7b:03:64:4c:b3:4f:
b0:0e:e5:9c:17:8b:5d:07:ae:8e:b7:1c:59:20:07:
2a:8c:2f:cb:a8:fa:69:84:10:f7:b0:d4:d8:bb:c5:
a6:fe:0e:56:44:d2:ba:2c:81:ab:ea:8a:9f:5a:0c:
af:64:b2:91:2d:b0:c3:32:96:69:23:24:7f:dc:eb:
53:ee:6c:b4:df:87:f4:ad:c4:34:94:ee:d8:fb:44:
f9:6d:f2:3f:45:b7:05:f5:8e:04:a6:f4:3a:c3:07:
e3:3e:20:4b:e2:cb:83:19:cf:be:5e:2c:03:e0:63:
78:a6:e5:a1:ca:aa:ad:79:c4:7d:48:35:48:16:9f:
2a:79:e5:0d:a5:25:1c:0a:1d:5f:c4:b0:4d:41:45:
15:b5:99:0d:27:d1:b4:6c:92:f0:36:8c:b8:22:eb:
ef:d0:0c:20:48:f2:c7:71:03:e2:08:e8:38:33:36:
c5:a0:69:57:cb:4e:97:c5:e6:07:a5:fa:c5:26:10:
26:0a:a0:eb:a8:69:84:6b:13:ce:14:40:c4:87:e9:
39:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:48:73:45:B2:2A:CA:21:DB:B3:41:01:ED:24:F6:86:CD:F0:1A:DE
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/x0hzRbIqyiHbs0EB7ST2hs3wGt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.185.0/24
194.104.158.0/24
195.206.234.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:e3:97:61:5a:6a:b5:35:1c:e0:33:49:5d:ba:16:82:b5:64:
9d:10:b8:9e:80:89:e1:0e:a6:6e:05:04:7b:67:30:9f:a1:e8:
49:e7:5b:ec:11:16:e0:e6:53:9a:6b:e7:b5:6d:88:ff:24:cd:
30:4a:20:42:66:95:ee:12:38:97:b9:60:3b:f6:ce:96:f0:bc:
07:65:43:5e:98:09:6b:81:84:1c:f2:aa:86:ab:73:e2:0a:7a:
ef:7e:05:22:3b:d9:d3:ea:2d:7e:4b:d4:0d:47:56:37:5d:45:
af:40:99:5c:e4:ce:52:28:b6:73:2f:71:07:60:15:0d:a8:67:
b5:be:62:fc:8c:9c:77:3e:4f:ac:ce:b6:c3:57:b4:56:cd:df:
12:27:b7:21:00:fb:0c:fc:38:5d:a5:c4:24:c4:f1:e7:01:e9:
85:c1:f5:7a:31:82:cd:b7:57:9d:6f:23:65:98:16:b4:0f:ed:
fc:16:c5:24:9c:b8:80:0d:2b:27:b2:20:68:7f:e5:cb:ce:82:
32:72:9c:e8:e6:91:d1:43:b5:d1:62:db:f4:a6:b2:cb:26:e3:
f5:8e:7b:d5:73:70:1a:dc:67:63:e5:37:07:1c:b7:75:88:1d:
1c:7b:5f:20:31:85:be:62:0e:01:ec:2a:8d:27:2c:62:85:a4:
bb:7e:e5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org