Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/I3xRgAmBfpvqnIyOhqmLAphZFac.roa
File: I3xRgAmBfpvqnIyOhqmLAphZFac.roa (raw, json)
Hash identifier: /t9rl0k76mgWJypnUamcRSVfT5VPwWMdJjYC9K6B5rE=
Subject key identifier: 23:7C:51:80:09:81:7E:9B:EA:9C:8C:8E:86:A9:8B:02:98:59:15:A7
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0185BC37A6982AE43BC238FC90E26B6B0023
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/I3xRgAmBfpvqnIyOhqmLAphZFac.roa
Signing time: Mon 16 Jan 2023 20:14:01 +0000
ROA not before: Mon 16 Jan 2023 20:14:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 85.237.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bc:37:a6:98:2a:e4:3b:c2:38:fc:90:e2:6b:6b:00:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 16 20:14:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=237c518009817e9bea9c8c8e86a98b02985915a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9d:6a:a2:68:18:a2:ff:3f:5b:a1:36:d7:f8:
9f:e6:0f:52:84:28:66:81:20:7a:61:f6:3c:1c:0f:
76:ad:08:a0:fc:8a:73:4e:14:b0:6d:1c:09:b8:79:
bb:23:29:e5:56:cb:a3:ec:88:ad:27:8e:d1:75:01:
61:05:df:53:27:c8:24:16:50:3d:34:31:b4:ab:41:
85:de:d3:71:b2:2e:c5:90:82:80:a8:fe:43:25:c1:
67:41:ca:da:06:27:d7:08:28:c9:9e:20:37:8a:23:
e2:a4:69:b1:43:00:cf:de:0d:9a:4e:15:ff:8c:2c:
c2:20:b8:5c:e5:2a:5c:32:ee:5c:46:5c:c5:cc:75:
60:df:03:3a:fc:52:b1:66:67:69:77:cc:96:38:42:
1e:35:af:9b:90:e8:2a:c0:6e:76:7d:6c:08:b5:bb:
9f:15:a0:0f:94:11:72:90:21:62:44:f3:2d:9c:2c:
7c:da:ac:ec:62:99:3a:e9:20:54:d9:b9:ff:c2:d9:
27:33:2a:0e:c4:dc:d0:10:bf:6a:87:91:e9:1f:9a:
20:c7:28:c7:ea:c7:49:19:0f:59:16:97:f4:97:a5:
a4:88:5c:c7:7b:9d:93:eb:08:85:83:cb:66:d2:0d:
b6:15:88:01:41:8e:5c:34:e7:72:60:1e:e2:4a:08:
67:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:51:80:09:81:7E:9B:EA:9C:8C:8E:86:A9:8B:02:98:59:15:A7
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/I3xRgAmBfpvqnIyOhqmLAphZFac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
Signature Algorithm: sha256WithRSAEncryption
58:12:92:9b:d2:d9:6d:4e:b7:d2:0f:40:14:d2:56:44:7c:59:
ce:f8:96:78:bd:b0:52:67:ee:8e:0d:39:6d:bc:8d:52:70:26:
07:49:9f:c3:08:80:f4:70:c1:49:1f:dd:5a:f3:85:84:d3:c7:
90:0d:2d:ea:94:02:b4:42:5e:0a:6c:8c:2b:cb:d2:d0:1f:49:
73:2c:3e:77:67:42:b2:f3:5b:92:cf:b1:9e:e8:e5:d5:ea:ae:
ab:53:ec:5f:e1:5c:33:e3:b8:54:47:81:04:29:12:97:84:9b:
42:ca:a5:ba:1c:6f:01:2c:3a:51:a4:5f:78:48:6d:c9:72:6c:
8f:1f:95:41:47:04:f8:84:48:95:05:6d:41:c9:88:ee:84:ba:
9f:18:cc:98:8c:33:e3:61:b1:a1:c2:34:30:5c:81:6c:a4:ac:
41:68:94:c8:72:28:57:61:d9:2e:39:29:17:84:48:02:f6:5d:
c5:b1:71:fb:c4:c3:ea:cf:43:c1:c3:5b:73:dd:ab:ff:fc:bb:
01:8f:db:f3:0d:2a:0a:d1:bd:66:0f:36:bc:a1:88:3d:65:a2:
e6:6b:d9:bc:07:a3:05:c5:64:1f:8c:c7:12:f7:e3:a2:7d:2b:
06:e6:c1:86:5a:03:8a:e0:fa:2d:db:ca:64:6e:6e:14:dd:61:
12:97:b7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org