Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/D8eZ_WbJQ4UcoSOxAMTAckKUE3E.roa
File: D8eZ_WbJQ4UcoSOxAMTAckKUE3E.roa (raw, json)
Hash identifier: EJvzqB0xOqWYVZencWbMYC3vM+dkrCN3MN0C5INDhFE=
Subject key identifier: 0F:C7:99:FD:66:C9:43:85:1C:A1:23:B1:00:C4:C0:72:42:94:13:71
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018592F13E56F682FFA3771C61AD125710E0
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/D8eZ_WbJQ4UcoSOxAMTAckKUE3E.roa
Signing time: Sun 08 Jan 2023 19:52:41 +0000
ROA not before: Sun 08 Jan 2023 19:52:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 85.237.208.0/24 maxlen: 24
85.158.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:92:f1:3e:56:f6:82:ff:a3:77:1c:61:ad:12:57:10:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 8 19:52:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fc799fd66c943851ca123b100c4c07242941371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:07:79:ff:7b:da:c0:37:3a:61:af:bd:fe:17:
d2:fc:22:1a:1a:4c:91:af:69:4a:5a:b5:60:e5:bc:
ae:5a:36:3b:1c:dc:58:7f:5e:0b:3f:1a:78:65:d5:
bd:b9:cd:86:30:87:de:bc:f0:c3:96:4c:85:37:8b:
3d:da:59:a5:c7:cf:95:8a:35:7b:98:be:c6:ef:c3:
15:28:e9:b7:4d:a2:76:8c:95:24:26:d2:99:66:ea:
ff:86:af:8d:38:87:54:87:24:19:6a:8c:65:3f:eb:
f1:6b:0e:4f:84:74:44:2f:8d:15:1d:c1:98:fb:f3:
9d:a1:6c:89:37:36:c9:0e:f9:5a:53:55:da:e4:08:
f4:bb:17:f7:67:40:60:4a:41:5e:52:24:f9:bb:b0:
b2:9f:56:3f:6a:6a:1c:0a:0b:8f:c9:52:d9:7a:1c:
1b:97:c7:2e:b4:66:c4:d0:e9:47:8b:17:b5:13:98:
1d:9a:90:d1:b8:07:3e:da:8a:c0:86:97:57:45:a9:
ae:83:7a:51:93:95:16:09:9d:41:fc:0d:ed:90:5c:
bc:ea:e8:66:19:62:4a:56:75:37:ed:f0:9a:0e:23:
c9:81:5b:31:5d:eb:ca:da:35:6a:17:bd:92:5b:24:
8f:5c:55:2f:05:ba:eb:48:e4:9c:7b:ce:cb:40:f9:
ef:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C7:99:FD:66:C9:43:85:1C:A1:23:B1:00:C4:C0:72:42:94:13:71
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/D8eZ_WbJQ4UcoSOxAMTAckKUE3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.61.0/24
85.237.208.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b1:e6:6c:f8:ba:76:a1:05:9c:81:78:20:7f:a4:81:6f:23:
45:3f:8d:48:9d:78:ed:fd:7e:80:de:24:56:0b:ec:b3:dd:5b:
8f:f5:f5:a9:16:de:40:ec:a1:01:c7:c1:81:1b:4d:50:5e:52:
c2:f5:3e:2a:87:62:22:d3:fd:da:08:ae:50:73:94:c9:87:ce:
73:0b:21:1d:23:43:a0:ce:dc:89:36:6c:20:dc:e0:15:56:9a:
9a:b0:7b:12:c7:74:2c:8d:6f:71:7e:ff:57:b8:4a:42:99:40:
00:0c:cd:fb:70:0a:5b:71:9f:55:b6:7e:e8:97:84:72:cf:24:
0e:72:a8:61:aa:0e:62:f6:e9:c0:d0:b7:de:c6:fb:d6:41:cf:
61:8d:50:06:ee:c1:9d:b8:37:b6:3a:74:ef:95:6b:a4:d8:c6:
c3:7a:ea:fe:79:ef:a1:8a:1f:9b:1f:c1:0e:4f:0c:91:13:40:
d2:fe:bd:89:ed:a7:3b:64:c2:fa:ac:bf:e0:5d:51:95:c7:64:
af:5b:18:9b:ce:7a:1f:ea:8d:f3:94:4b:ed:a9:82:de:e6:57:
92:d4:db:71:9a:5a:10:de:b2:ff:17:9d:69:87:ad:d7:9f:01:
97:e6:97:fe:bf:c9:85:db:53:b1:82:f8:c5:12:6e:4a:21:1c:
3a:a1:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org