Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Ed8a0fPNO6QT8sqHJfSrypG-Qeo.roa
File: Ed8a0fPNO6QT8sqHJfSrypG-Qeo.roa (raw, json)
Hash identifier: 5LvE2Gw0vvH9d8Zp5SPCUBDrDVHCxVNGtC2V+0G/n+M=
Subject key identifier: 11:DF:1A:D1:F3:CD:3B:A4:13:F2:CA:87:25:F4:AB:CA:91:BE:41:EA
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DE9F5ED2CCA872FB816EC3D9F9FD27
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Ed8a0fPNO6QT8sqHJfSrypG-Qeo.roa
Signing time: Mon 02 Jan 2023 09:44:53 +0000
ROA not before: Mon 02 Jan 2023 09:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 85.158.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:9f:5e:d2:cc:a8:72:fb:81:6e:c3:d9:f9:fd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11df1ad1f3cd3ba413f2ca8725f4abca91be41ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c9:56:ee:78:ef:76:1a:21:ae:26:f7:fd:e3:
3e:a1:fa:ef:94:75:44:d7:4a:2b:5d:88:60:b5:92:
b6:c5:b2:22:73:c8:6e:5e:ea:5c:f8:13:dd:a5:e5:
15:e3:82:e1:54:93:0e:3b:0d:3b:08:3d:e5:df:07:
a7:ee:b1:4f:a1:61:01:a3:76:3e:e6:76:16:51:a4:
c0:e8:cf:76:64:81:dc:2e:44:fd:91:db:97:2d:24:
41:f7:35:bb:11:3e:bd:a6:d9:51:53:12:fb:2b:37:
a8:fa:4a:aa:27:16:51:71:21:21:5d:37:39:8a:8b:
fd:6a:a7:c9:01:a0:17:48:c2:58:44:e0:6f:aa:b8:
98:8e:2f:56:2f:2a:73:8e:0a:e4:c9:d8:1b:a7:78:
9f:95:67:b3:a6:c5:92:48:98:03:29:02:fc:81:d2:
75:7a:6b:3e:f9:40:7f:b1:5e:65:45:90:3b:16:5e:
9f:00:08:71:0c:9d:9d:e9:bd:f1:80:d8:48:c7:3f:
7a:3a:90:7c:56:87:9e:0f:a8:c5:e4:3d:6f:0c:86:
87:ac:68:7a:78:aa:63:bd:f9:dc:00:84:c1:52:ae:
67:1d:ef:fc:72:84:82:da:81:2c:13:d9:26:83:3e:
b4:f2:6c:2b:36:78:76:a2:96:be:40:fd:0c:65:2f:
ae:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DF:1A:D1:F3:CD:3B:A4:13:F2:CA:87:25:F4:AB:CA:91:BE:41:EA
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Ed8a0fPNO6QT8sqHJfSrypG-Qeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.60.0/24
Signature Algorithm: sha256WithRSAEncryption
41:9c:e8:1b:80:c7:bc:92:8b:81:fd:cf:0e:11:33:4f:b2:d9:
66:0f:c2:cd:e5:92:82:0c:6f:71:57:d5:6d:9e:f8:33:81:a6:
f1:ac:43:e7:0e:df:39:4c:fa:85:01:cd:99:8f:ee:d6:92:8a:
15:db:3e:67:b6:09:90:c9:d7:df:44:73:ea:35:5b:cd:04:d4:
7e:f7:b2:cd:33:d3:ed:1f:7b:ae:d0:4f:5d:1e:40:f7:1e:b0:
07:99:be:ab:a5:02:6f:0a:c6:c7:2f:64:32:5e:c7:db:d0:24:
fb:e8:22:92:b2:32:70:c9:0a:c7:4c:f4:f1:07:e1:29:54:54:
41:bd:14:cd:f0:b3:cc:6b:36:09:16:67:32:05:d7:e5:5f:0f:
b4:95:a3:63:24:b7:59:74:62:8e:40:d9:46:1c:aa:38:dc:ff:
79:d1:d1:12:6e:e9:8a:19:e3:86:13:04:44:62:e6:70:95:bf:
3a:12:40:0b:46:24:85:d3:10:73:69:ee:4a:28:86:c2:e8:40:
45:81:99:13:79:b0:4b:c4:74:e9:0d:89:db:76:03:b7:54:39:
da:5d:68:ab:68:36:7a:a5:45:11:7c:7d:f2:ef:0c:08:1d:7b:
74:57:dc:77:d7:d2:cf:54:26:20:86:69:4c:4f:52:89:28:74:
e6:74:fa:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx3p9e0syocvuBbsPZ+f0nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MGI2NzM2OGM5MWI4NWU4NDg4OGM1ZWQyZTgyNGQxMzkw
ODEwYmIwHhcNMjMwMTAyMDk0NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWRmMWFkMWYzY2QzYmE0MTNmMmNhODcyNWY0YWJjYTkxYmU0MWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjclW7njvdhohrib3/eM+ofrvlHVE
10orXYhgtZK2xbIic8huXupc+BPdpeUV44LhVJMOOw07CD3l3wen7rFPoWEBo3Y+
5nYWUaTA6M92ZIHcLkT9kduXLSRB9zW7ET69ptlRUxL7Kzeo+kqqJxZRcSEhXTc5
iov9aqfJAaAXSMJYROBvqriYji9WLypzjgrkydgbp3iflWezpsWSSJgDKQL8gdJ1
ems++UB/sV5lRZA7Fl6fAAhxDJ2d6b3xgNhIxz96OpB8VoeeD6jF5D1vDIaHrGh6
eKpjvfncAITBUq5nHe/8coSC2oEsE9kmgz608mwrNnh2opa+QP0MZS+uhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBHfGtHzzTukE/LKhyX0q8qRvkHqMB8GA1UdIwQY
MBaAFDkLZzaMkbhehIiMXtLoJNE5CBC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYt
NWM5ZDYyNjI5Yzg2LzEvRWQ4YTBmUE5PNlFUOHNxSEpmU3J5cEctUWVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYtNWM5ZDYyNjI5Yzg2
LzEvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVZ48MA0G
CSqGSIb3DQEBCwUAA4IBAQBBnOgbgMe8kouB/c8OETNPstlmD8LN5ZKCDG9xV9Vt
nvgzgabxrEPnDt85TPqFAc2Zj+7WkooV2z5ntgmQydffRHPqNVvNBNR+97LNM9Pt
H3uu0E9dHkD3HrAHmb6rpQJvCsbHL2QyXsfb0CT76CKSsjJwyQrHTPTxB+EpVFRB
vRTN8LPMazYJFmcyBdflXw+0laNjJLdZdGKOQNlGHKo43P950dESbumKGeOGEwRE
YuZwlb86EkALRiSF0xBzae5KKIbC6EBFgZkTebBLxHTpDYnbdgO3VDnaXWiraDZ6
pUURfH3y7wwIHXt0V9x319LPVCYghmlMT1KJKHTmdPqL
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org