Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/2ILE6c7_rgd-GQZaa8B7oELEl-w.roa
File: 2ILE6c7_rgd-GQZaa8B7oELEl-w.roa (raw, json)
Hash identifier: YmaZ5VDbox+R/JFGOS2FfavxQrmJySJsAko+AYuuu8w=
Subject key identifier: D8:82:C4:E9:CE:FF:AE:07:7E:19:06:5A:6B:C0:7B:A0:42:C4:97:EC
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0188B0078DE9CF471C2C1A213B8F6AAC08B3
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/2ILE6c7_rgd-GQZaa8B7oELEl-w.roa
Signing time: Mon 12 Jun 2023 14:34:24 +0000
ROA not before: Mon 12 Jun 2023 14:34:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
85.237.202.0/24 maxlen: 24
85.237.207.0/24 maxlen: 24
85.237.223.0/24 maxlen: 24
185.93.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:07:8d:e9:cf:47:1c:2c:1a:21:3b:8f:6a:ac:08:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jun 12 14:34:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d882c4e9ceffae077e19065a6bc07ba042c497ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:2b:68:fa:f0:94:1d:43:19:1f:3e:23:17:
d2:6c:14:25:9d:da:bf:78:37:1a:71:8d:ad:b3:35:
94:49:89:90:79:a3:ee:8f:d3:18:4e:14:18:0f:54:
15:a7:80:ed:aa:64:7d:b7:75:63:6c:62:0a:62:a3:
59:b0:2e:3b:57:3d:b2:a1:59:31:9d:83:d4:5b:39:
e0:1a:26:ec:62:3b:bb:7a:43:51:fa:50:73:62:2c:
eb:6c:12:6a:e4:60:ea:57:f7:3b:eb:06:7e:d8:58:
97:9b:2f:92:b1:ee:14:bb:33:5d:40:11:a1:a9:9a:
fc:2c:22:8b:8f:36:67:11:0a:81:d1:8d:69:8e:90:
99:a2:76:3a:41:53:c6:79:e6:61:23:42:20:a4:c8:
05:62:06:34:41:59:9c:d5:7e:05:38:36:3d:ca:2d:
f8:83:72:33:de:86:f2:3c:2a:70:6d:7d:df:a6:f5:
fb:1b:a3:07:ec:2d:5d:03:13:eb:e4:5e:5a:47:c8:
f5:90:c3:d7:71:a4:7e:52:37:70:89:e7:1d:0d:64:
13:11:bd:bb:d5:34:ad:87:ee:f7:12:1c:04:5c:59:
d9:72:c9:19:7b:9c:5b:5f:4c:f4:29:60:e7:b3:7d:
0c:6c:bb:c2:6e:45:f6:00:a1:67:f3:c3:c7:dd:12:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:82:C4:E9:CE:FF:AE:07:7E:19:06:5A:6B:C0:7B:A0:42:C4:97:EC
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/2ILE6c7_rgd-GQZaa8B7oELEl-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.202.0/24
85.237.207.0/24
85.237.223.0/24
185.93.33.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
af:79:cc:86:50:aa:ff:ab:9c:8f:18:9e:e2:0b:f3:b8:67:07:
5c:15:57:81:b4:37:d2:a1:c6:cf:20:41:bc:d0:56:f0:5c:93:
25:f8:28:23:11:08:fc:2b:00:1a:bb:e7:95:ef:0c:f1:88:aa:
e9:c7:27:c5:32:54:b9:12:03:da:fb:26:ed:ce:9f:6f:72:ad:
b7:4c:42:a9:c9:e9:80:84:cb:78:89:5e:7f:9c:bf:05:70:2f:
29:f2:74:8d:b5:8b:e4:f0:24:2d:2b:29:f1:ad:30:d7:b9:7e:
cf:35:de:b3:ca:46:49:1f:99:32:6c:2f:8f:0b:11:ae:a2:b3:
82:26:ee:75:35:93:c9:56:64:b3:1c:8b:05:e0:1f:2f:50:c0:
0d:7c:f2:7a:2c:ad:c3:14:56:f9:5e:2e:f3:00:8d:50:36:1a:
48:75:11:e5:63:39:00:df:2c:4d:bd:22:31:a9:74:70:04:f0:
f5:64:73:0a:bb:e5:c5:20:4b:17:a0:bc:f6:7a:37:4b:a0:96:
52:d8:58:20:0f:9b:e3:66:02:2f:10:25:28:23:92:2d:0c:ee:
e9:ec:b8:55:77:07:76:e9:8d:22:60:47:83:80:7e:00:98:ee:
6c:3e:f7:2c:1b:38:fe:ee:96:16:5c:5d:d4:5d:a1:cd:84:bb:
fd:df:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org