Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/yJIj7WWGaeJtGpeZP4UbX2u3dWg.roa
File: yJIj7WWGaeJtGpeZP4UbX2u3dWg.roa (raw, json)
Hash identifier: nEzoEu04dU0H8xZKLqk7SzesT1LEFtRcrqNQ+U2yxiA=
Subject key identifier: C8:92:23:ED:65:86:69:E2:6D:1A:97:99:3F:85:1B:5F:6B:B7:75:68
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 0183C071BD3C5484130CC9AFB1064BECFF20
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/yJIj7WWGaeJtGpeZP4UbX2u3dWg.roa
Signing time: Mon 10 Oct 2022 05:50:22 +0000
ROA not before: Mon 10 Oct 2022 05:50:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59432
IP address blocks: 194.147.4.0/23 maxlen: 24
193.151.180.0/23 maxlen: 24
176.105.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c0:71:bd:3c:54:84:13:0c:c9:af:b1:06:4b:ec:ff:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Oct 10 05:50:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c89223ed658669e26d1a97993f851b5f6bb77568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:ed:3b:c5:23:23:8c:78:90:44:bd:4d:6d:
0d:95:84:48:7d:6c:71:59:5f:22:cb:be:8b:de:c7:
d6:ac:57:ce:2b:6b:f3:e4:98:73:c4:6f:1c:cf:a1:
a8:c4:12:8d:3a:cc:79:d0:05:7d:61:78:2e:bf:83:
4f:a6:7e:37:30:f0:0d:e7:5e:bd:51:53:0c:b8:b2:
17:fc:00:4d:72:1f:e8:9b:fc:d0:c5:e6:f9:19:36:
0f:3a:b8:f8:5e:50:0c:d0:3a:27:7c:80:a1:b7:4c:
22:36:e7:dc:9d:89:74:40:df:21:60:24:d8:48:5a:
d3:2b:9d:d9:a7:59:9d:5c:29:a7:a6:16:18:a1:8a:
a5:25:17:d8:c5:98:99:cb:9e:a3:a9:0c:93:ec:3b:
97:8a:10:75:78:5e:88:4a:ff:05:de:90:f0:11:59:
b0:2d:f6:72:ef:c2:d7:df:56:28:ec:59:e1:04:aa:
93:b4:0a:23:91:f6:77:f7:ba:93:86:e4:ac:82:ff:
ff:b1:e8:46:75:a2:9e:a1:b2:65:8e:e0:0a:dc:95:
7e:3d:2e:58:52:14:76:81:42:00:53:95:39:43:01:
13:ee:d1:0f:dd:8a:a0:60:2e:9a:76:9c:9f:08:b9:
c3:10:15:2f:eb:9c:f1:85:9b:28:4a:79:57:8d:65:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:92:23:ED:65:86:69:E2:6D:1A:97:99:3F:85:1B:5F:6B:B7:75:68
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/yJIj7WWGaeJtGpeZP4UbX2u3dWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.226.0/23
193.151.180.0/23
194.147.4.0/23
Signature Algorithm: sha256WithRSAEncryption
70:6e:d8:df:cf:9b:33:ae:85:02:c2:c7:a1:cd:37:52:bc:85:
79:b0:59:69:36:4d:5a:22:1d:2b:df:f8:d4:a5:7a:e8:ff:d1:
83:e3:4d:95:0a:0e:d1:23:6c:77:dd:88:67:18:3d:e2:fa:84:
f0:31:7b:e4:38:4d:f9:10:5d:98:d7:06:db:94:68:ed:18:5b:
8c:e8:0a:27:c8:cf:83:ea:bc:61:ba:f2:46:92:eb:a7:1e:a9:
00:de:5f:99:8c:3b:c4:65:ab:1d:2b:24:6a:5f:2d:5b:f6:b0:
e2:48:41:1c:1c:46:b7:16:ab:e2:ae:d0:58:b7:81:b3:99:62:
59:f6:20:9a:0a:ee:34:8f:f4:0a:4a:27:7c:24:c1:f5:d5:4c:
47:56:d0:b1:5f:0e:d1:8f:43:ee:b7:13:4a:7b:ba:24:ef:58:
37:66:f8:77:d9:fb:d2:48:0a:1f:6f:b3:9c:43:24:61:b0:60:
90:e8:41:52:82:0f:92:9d:75:19:6a:6d:a7:5d:c5:cb:c0:c1:
79:a1:4c:0e:f4:99:91:7f:1f:c2:39:e6:b6:af:9a:3f:dc:02:
c5:f4:6b:15:0b:52:7a:89:6e:07:42:2a:0e:a4:43:ec:a5:98:
0f:4e:af:76:72:62:00:d0:7b:3e:5f:dc:42:30:bf:d5:7a:2e:
94:7a:63:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org