Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/z5NUmruRS7OjEZXUR1rpdk-eJBk.roa
File: z5NUmruRS7OjEZXUR1rpdk-eJBk.roa (raw, json)
Hash identifier: P3Y/NyrTXca2mtrRjoLwL1usZkOb12uAjjDX2mdR9aA=
Subject key identifier: CF:93:54:9A:BB:91:4B:B3:A3:11:95:D4:47:5A:E9:76:4F:9E:24:19
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 040B7EAC
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/z5NUmruRS7OjEZXUR1rpdk-eJBk.roa
Signing time: Tue 29 Mar 2022 08:16:22 +0000
ROA not before: Tue 29 Mar 2022 08:16:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.146.80.0/23 maxlen: 23
45.146.82.0/23 maxlen: 23
193.164.1.0/24 maxlen: 24
152.89.248.0/22 maxlen: 22
193.29.96.0/22 maxlen: 22
141.98.156.0/22 maxlen: 22
193.142.4.0/24 maxlen: 24
176.105.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67862188 (0x40b7eac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Mar 29 08:16:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf93549abb914bb3a31195d4475ae9764f9e2419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:99:cb:29:59:92:65:bc:04:90:fa:d9:75:
9a:86:01:d5:14:7f:c1:d9:33:04:37:24:3e:a8:85:
00:6e:1b:87:9e:ae:43:62:50:27:1a:d4:ad:c7:6f:
d1:bd:54:b3:b6:72:f6:03:17:e7:0b:e2:5f:20:71:
28:a6:4e:7f:4f:c3:e3:41:c5:6f:ac:67:d4:e1:75:
a5:38:ff:c8:a3:2e:36:11:1d:43:a0:f5:28:85:2f:
11:60:a5:11:f0:d5:58:8e:97:f0:42:18:4e:a1:69:
c3:5c:37:73:50:e5:b8:61:75:e5:52:1a:02:57:cf:
d0:77:5d:28:e9:16:8e:89:8c:f7:db:9b:c9:df:17:
b8:41:89:c6:82:ff:9c:22:03:e2:1f:6d:1f:77:7f:
b5:04:ea:a4:67:95:5b:aa:91:8c:05:0c:c9:62:66:
5c:ae:93:c9:ab:94:8d:4d:02:25:7b:4e:5b:2f:72:
1f:60:f3:1a:c1:28:bc:5b:c0:47:ac:ff:bd:a6:b1:
89:5a:3d:7a:5a:c7:92:a3:38:a1:73:c2:44:db:34:
42:ff:26:37:a0:6a:89:37:52:d2:89:c5:75:ce:3c:
d7:b5:8f:e2:54:79:29:04:e2:5d:e7:18:2a:25:ad:
78:bf:1c:84:26:c4:09:80:fc:38:97:c0:44:79:1b:
55:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:93:54:9A:BB:91:4B:B3:A3:11:95:D4:47:5A:E9:76:4F:9E:24:19
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/z5NUmruRS7OjEZXUR1rpdk-eJBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.80.0/22
141.98.156.0/22
152.89.248.0/22
176.105.224.0/22
193.29.96.0/22
193.142.4.0/24
193.164.1.0/24
Signature Algorithm: sha256WithRSAEncryption
30:fb:86:ce:99:25:76:8d:4f:1f:c0:f1:80:da:17:77:08:f2:
f3:cb:be:07:b1:f2:b2:00:cc:26:55:b4:51:2f:76:86:a9:a8:
e7:c8:61:5c:a4:3a:3c:e7:b5:d5:4e:0b:3b:ea:f0:1e:65:a8:
03:9f:87:78:25:07:6e:12:ad:72:93:01:2c:a5:b3:3c:54:c2:
4b:db:cb:6f:c5:a5:31:53:60:66:aa:71:d2:f3:f7:9e:ac:62:
56:f4:52:d8:36:72:49:fb:33:d5:71:7b:b2:89:a5:d5:b8:54:
5f:c8:cc:45:8b:12:78:98:ca:01:e0:4e:1c:ff:97:57:c1:fd:
36:cc:b1:6f:ec:9f:3f:d6:8c:ac:ca:4d:72:4d:c0:be:83:e1:
ea:bf:c1:75:fb:d0:4b:5b:27:4b:8e:98:3f:60:51:be:dc:ac:
b9:90:7e:47:d7:9b:2f:17:f2:ac:d7:1d:84:09:93:96:30:89:
27:80:be:24:cb:c7:25:7c:e5:41:6a:d1:e0:84:fa:10:bb:42:
af:44:e1:39:8c:f4:8f:16:da:7e:7e:c5:dd:1b:bf:1a:6c:91:
f1:0c:28:7c:90:12:ec:a2:05:37:df:f3:ad:76:f6:f7:d3:ef:
ee:0f:62:4d:de:fe:ef:11:5b:51:93:cd:a3:1d:cb:30:4f:ea:
d7:e4:9d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-fra.rpki-client.org