Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/GHm9PjJgyNE1Xz_yIBuYjtWCJFU.roa
File: GHm9PjJgyNE1Xz_yIBuYjtWCJFU.roa (raw, json)
Hash identifier: tRVGyn3fR1S8wB4pVWoVjSsfR74/273rxNkg8TuQjHc=
Subject key identifier: 18:79:BD:3E:32:60:C8:D1:35:5F:3F:F2:20:1B:98:8E:D5:82:24:55
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DEA0E5B968D5CFDB589A3C510FDFB7
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/GHm9PjJgyNE1Xz_yIBuYjtWCJFU.roa
Signing time: Mon 02 Jan 2023 09:44:53 +0000
ROA not before: Mon 02 Jan 2023 09:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212077
IP address blocks: 85.237.206.0/24 maxlen: 24
85.237.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:a0:e5:b9:68:d5:cf:db:58:9a:3c:51:0f:df:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1879bd3e3260c8d1355f3ff2201b988ed5822455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0b:ea:c7:9e:9f:9e:34:29:dc:5c:f9:de:63:
e0:74:28:64:0f:a9:17:ed:c4:ee:43:b3:4a:ee:d6:
bb:3e:5a:7e:59:57:76:cb:c7:52:c1:d5:fb:6b:fa:
e3:49:c6:73:bb:b5:73:13:29:55:39:d6:e2:17:a2:
af:53:eb:0f:92:89:10:74:8e:a4:2e:ca:87:6c:ac:
c4:13:b1:2d:d1:52:f4:1d:d9:02:d2:8d:34:8d:39:
58:39:64:90:1d:07:6f:6d:a9:78:b2:06:be:e1:0b:
cd:2c:9b:54:67:53:32:bd:74:74:8f:95:a0:c9:f0:
02:74:5b:ac:a5:f0:e8:d4:42:7d:7c:6d:98:f1:2f:
9d:79:1a:af:b9:6e:a4:73:fc:52:5b:c2:24:de:13:
4f:fb:d6:f7:8a:49:0b:73:5b:29:4e:77:a7:4a:13:
03:e2:c5:3b:a5:54:5c:72:d6:ed:18:c5:cd:09:bb:
30:83:2b:62:1f:ce:c6:87:3b:ad:fd:9d:68:c8:0b:
0c:80:ea:83:b0:55:56:26:78:3c:cb:38:c4:0a:c7:
f2:f1:8b:64:c8:eb:30:36:b1:a4:ca:39:98:a2:17:
14:06:3b:40:d9:7e:51:23:81:c5:c2:11:68:e4:0f:
77:cd:80:07:b0:ae:d5:6a:bd:e8:ae:86:09:b9:14:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:79:BD:3E:32:60:C8:D1:35:5F:3F:F2:20:1B:98:8E:D5:82:24:55
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/GHm9PjJgyNE1Xz_yIBuYjtWCJFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.206.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:d1:0c:98:4e:26:84:be:6f:b7:ce:3c:ba:59:db:dc:04:36:
c5:47:09:0c:75:c2:32:5a:31:d4:f2:0a:65:4d:17:2e:95:28:
f8:b2:fd:02:8e:4b:56:3b:fd:a8:1c:ad:0a:1e:8d:a7:9d:38:
ed:2a:86:f3:be:00:24:77:34:86:0a:d3:76:86:be:4a:39:65:
81:40:e3:3c:62:4b:54:a0:8f:0d:71:8d:8d:c9:6e:8c:c8:97:
15:a2:e7:39:ab:31:3c:5c:b0:77:ac:04:cd:d9:8d:13:ad:ab:
21:4d:75:fb:90:c9:0e:6f:d1:c8:79:17:cf:e3:af:9b:0d:00:
54:0a:e0:ee:d1:a8:ef:02:f0:4a:ba:0d:ef:94:1f:85:0b:69:
4d:d2:1d:08:b7:43:38:e1:4c:f6:43:77:15:d9:a6:13:8c:63:
d1:7d:d5:58:23:24:2d:60:0a:a4:ed:3c:df:41:00:64:68:72:
65:63:63:3d:49:71:cd:71:95:b0:d5:6d:31:c5:99:89:fd:66:
03:1e:15:c3:b3:4c:32:80:1f:3a:70:59:df:d5:07:c1:a9:2c:
5a:25:3a:8c:88:03:94:3f:79:9c:c0:f6:f0:41:94:67:70:7d:
1d:9d:91:b4:e7:c6:24:34:bc:69:cf:2a:b5:18:83:71:13:a8:
0e:7e:c1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org