Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Fr0bZmHNVe_lopgGMJ8mPzJm6FE.roa
File: Fr0bZmHNVe_lopgGMJ8mPzJm6FE.roa (raw, json)
Hash identifier: +XZi5GSsnEGZrdxQ1We+Or2PySFBG2pIS1rLjf2kKz8=
Subject key identifier: 16:BD:1B:66:61:CD:55:EF:E5:A2:98:06:30:9F:26:3F:32:66:E8:51
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01885FDCDE19786F674367870432C157972C
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Fr0bZmHNVe_lopgGMJ8mPzJm6FE.roa
Signing time: Sun 28 May 2023 00:58:10 +0000
ROA not before: Sun 28 May 2023 00:58:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 85.237.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5f:dc:de:19:78:6f:67:43:67:87:04:32:c1:57:97:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: May 28 00:58:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16bd1b6661cd55efe5a29806309f263f3266e851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:47:a1:16:81:a2:cf:33:c7:72:d0:8c:a0:d9:
17:a8:98:3b:c6:e6:0e:a1:8f:06:a5:62:dd:b0:f9:
10:ed:a7:04:a2:df:6d:5b:91:c5:f7:79:61:35:35:
a9:49:6a:ad:91:53:5e:00:f2:9a:1a:65:de:fb:41:
6d:77:07:ab:31:a6:c0:f4:ce:91:02:5a:74:3d:71:
8c:af:2a:fc:df:08:10:de:f1:88:9b:80:ad:7f:3f:
8e:ff:e9:1d:6f:81:e3:60:33:6c:c1:e5:46:5d:95:
cb:11:3e:5e:44:c6:74:b1:86:52:5a:fd:6f:5a:08:
a5:30:d0:ac:c5:89:f1:81:5a:a2:29:9e:10:04:7b:
39:70:cd:00:77:50:eb:de:0b:ce:b2:b1:3c:3f:ed:
40:c8:a4:f7:0a:cb:6f:aa:10:46:65:b9:de:d3:29:
0d:57:34:f1:f8:d0:0c:85:5c:d5:32:30:6a:fa:01:
ac:bd:12:0a:9b:cd:03:61:a9:af:27:5c:68:e4:ee:
95:85:c2:79:15:f4:9b:a9:cc:97:34:02:82:0e:c0:
fe:20:c3:75:93:b5:e3:bf:e7:c9:d6:cb:0c:6a:f4:
85:85:b2:2f:ad:0c:ff:e0:61:dc:d3:2c:67:ce:66:
54:b0:dc:0b:92:00:da:ce:42:a9:6f:9e:c7:ab:8c:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BD:1B:66:61:CD:55:EF:E5:A2:98:06:30:9F:26:3F:32:66:E8:51
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Fr0bZmHNVe_lopgGMJ8mPzJm6FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:03:d3:df:65:4f:39:4a:e7:73:97:58:6f:43:6a:8c:a3:3d:
45:ce:7c:c7:2c:3d:7f:e0:b4:83:9b:20:40:36:45:1c:e7:0c:
bc:a9:37:27:20:4e:d7:42:e6:59:2f:72:8f:87:a1:b6:d7:ec:
10:91:13:2f:45:6d:de:49:56:60:ca:c5:be:26:71:da:b9:c3:
bf:9e:ed:50:65:ef:ae:14:4b:4a:c8:1e:28:12:c2:42:99:39:
54:4e:b2:63:3d:2e:2d:03:bb:70:5d:64:ef:c9:91:85:12:c8:
75:7c:59:c0:b3:31:2e:d1:bf:1a:11:63:77:48:3f:f3:14:5a:
d4:9f:5a:6c:fe:f2:1a:0b:26:de:4b:74:82:85:24:32:ac:8a:
5f:53:0c:48:61:5d:86:62:b3:2d:42:8b:81:4f:81:a7:54:ba:
5c:e1:7e:d8:37:24:9d:9f:bd:54:5a:4d:2e:b4:f2:a7:61:e6:
4d:78:42:4c:38:53:34:34:46:22:ad:50:2f:6c:ea:dc:3e:05:
2c:fc:39:a0:7a:dd:0f:82:e5:bb:01:87:cd:00:f4:65:d9:ea:
18:dc:a5:f9:e1:49:51:6a:61:0b:27:3c:a9:92:b2:e3:c5:70:
68:f5:eb:38:25:24:14:f5:88:22:0c:7f:6d:23:d6:e1:3a:ee:
65:51:18:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org