Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/6Z3Auj5beaY_omaEtvxN0GUKGKI.roa
File: 6Z3Auj5beaY_omaEtvxN0GUKGKI.roa (raw, json)
Hash identifier: hyl6tZ+IxYZsKJp0zyG4NbZrvvAAyvLpJVo6T7l6kyU=
Subject key identifier: E9:9D:C0:BA:3E:5B:79:A6:3F:A2:66:84:B6:FC:4D:D0:65:0A:18:A2
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0184CF7CEAC68B42CF1F1814100B0ABC4AB6
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/6Z3Auj5beaY_omaEtvxN0GUKGKI.roa
Signing time: Thu 01 Dec 2022 20:59:40 +0000
ROA not before: Thu 01 Dec 2022 20:59:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 85.237.198.0/24 maxlen: 24
85.158.63.0/24 maxlen: 24
85.158.60.0/24 maxlen: 24
85.158.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cf:7c:ea:c6:8b:42:cf:1f:18:14:10:0b:0a:bc:4a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Dec 1 20:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e99dc0ba3e5b79a63fa26684b6fc4dd0650a18a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:70:48:08:c4:67:15:36:43:e7:f7:c7:6b:
b7:1e:b8:5d:cb:38:fb:95:b7:c1:16:fd:06:3f:ab:
ed:ec:5f:55:d5:61:ea:5c:90:3c:00:3c:d1:89:fc:
23:15:26:21:d7:2c:ae:2d:d3:8b:6c:c6:f4:21:e9:
bd:59:db:23:76:e1:17:14:5b:f2:93:02:58:85:32:
9e:ef:22:4b:c8:9b:14:be:7e:cd:b7:39:1c:24:1a:
f4:c9:59:42:fd:2e:b2:ed:2e:13:70:e1:af:59:de:
62:5f:72:2b:b3:32:ae:7b:c1:09:64:ed:54:93:0b:
a0:9a:d8:24:37:09:12:b1:f2:b5:67:c4:08:1b:ee:
8e:1e:4e:49:29:82:c0:88:2c:2f:78:d0:1b:ea:0e:
0b:82:5d:99:32:3b:5c:c6:a3:b1:a4:32:51:20:6b:
bf:0f:3f:74:7a:4e:0f:a3:ed:a1:f2:d3:5a:1f:3f:
cf:8b:81:34:00:af:19:59:7c:91:be:25:58:9f:da:
6f:62:70:a9:e5:67:3d:90:bf:32:bf:1a:37:b1:2d:
36:62:67:33:ca:2a:3e:23:c6:fd:2a:23:59:71:4b:
9d:68:71:d7:31:3d:02:70:ec:08:9f:d9:cd:c7:6d:
e9:ba:89:b3:70:30:96:b2:0f:71:66:d1:86:ce:ed:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9D:C0:BA:3E:5B:79:A6:3F:A2:66:84:B6:FC:4D:D0:65:0A:18:A2
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/6Z3Auj5beaY_omaEtvxN0GUKGKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.60.0/23
85.158.63.0/24
85.237.198.0/24
Signature Algorithm: sha256WithRSAEncryption
64:55:e2:9e:f2:a2:2b:2f:ed:e9:8f:11:00:d1:9c:81:ca:9a:
26:33:b7:03:0f:30:d7:53:d6:1d:27:54:90:ab:a6:bb:b2:17:
7e:63:00:38:1d:03:a3:87:ee:1e:f4:bb:39:5b:9d:d0:57:52:
74:0b:c5:36:31:30:26:a4:af:a4:84:0e:ff:eb:de:71:a5:39:
63:6b:2b:8b:eb:a1:30:0e:8d:a1:27:82:31:e5:2e:a2:f1:e7:
f0:51:af:6c:12:76:6c:f2:c5:d2:48:24:e6:a9:63:40:18:ad:
de:a5:33:28:2f:c3:8d:58:3f:2f:31:54:05:86:34:ec:b0:b9:
ac:c4:62:37:b7:cc:c3:d4:70:3e:58:44:82:8e:e2:34:0b:3d:
43:63:7f:da:6b:9d:23:53:39:ed:be:5b:4d:5d:98:eb:ba:14:
ca:39:7e:4d:ba:30:26:e5:d3:99:e4:ee:5f:3c:64:d9:d7:cf:
26:a4:56:86:33:8c:e5:98:19:a2:46:1e:47:cb:53:32:20:67:
91:46:46:2e:57:ba:cb:2f:ed:59:d2:12:9f:fb:69:ba:09:14:
8e:48:02:7d:97:6f:bb:6e:d0:9c:b3:7a:5e:2d:a2:8b:67:27:
d4:d0:26:ea:0d:be:29:7d:a2:40:2a:1c:a5:3c:28:46:dd:66:
ca:a0:a1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org