Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/JJARVMMWJbdPrLtrv5HP-lcglho.roa
File: JJARVMMWJbdPrLtrv5HP-lcglho.roa (raw, json)
Hash identifier: uGNfv7Z78qbByiA94cJYlhPkBVtQoP1q+dsLy69W5vc=
Subject key identifier: 24:90:11:54:C3:16:25:B7:4F:AC:BB:6B:BF:91:CF:FA:57:20:96:1A
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018459B327328C6894F43ED9BF1770806B41
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/JJARVMMWJbdPrLtrv5HP-lcglho.roa
Signing time: Wed 09 Nov 2022 00:03:44 +0000
ROA not before: Wed 09 Nov 2022 00:03:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 85.237.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:59:b3:27:32:8c:68:94:f4:3e:d9:bf:17:70:80:6b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Nov 9 00:03:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24901154c31625b74facbb6bbf91cffa5720961a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:25:2d:15:97:e5:36:42:0a:2c:06:d4:fd:
85:b3:41:10:1c:f7:85:c7:0e:f2:ae:04:57:82:32:
fd:c6:04:f2:3f:42:7a:c8:56:5b:6d:30:f1:8e:53:
70:9b:9f:9f:07:7d:e7:53:33:54:03:20:f1:f1:80:
79:12:bf:33:74:d7:c6:db:ff:b9:f3:fe:b9:13:93:
ff:c1:d1:07:47:fa:32:7a:e8:7f:08:d3:b9:5a:9a:
ad:22:1d:85:14:a1:9e:80:4f:3d:53:45:84:31:f7:
93:6f:e0:c8:ca:d2:d1:20:c8:42:a8:7d:da:8b:f9:
4e:8c:fc:ad:2c:53:a7:cb:7f:6c:b8:fe:33:86:5d:
11:16:33:b8:70:a9:9e:46:1b:7b:89:16:9a:53:74:
8e:ce:d8:67:ed:e2:cb:e2:bb:69:bf:8c:b6:22:83:
d2:4f:65:1b:f0:77:13:29:98:0a:f6:c1:38:3a:23:
2b:e1:cb:89:69:10:82:7c:68:22:4f:8b:09:cf:23:
80:2c:12:d4:1d:59:3c:35:dd:81:f8:15:e7:a5:12:
ee:03:03:53:d3:44:65:e6:5e:88:58:5f:1d:a6:b8:
8d:bc:98:ee:71:cc:de:76:64:61:f7:fd:46:c9:86:
97:8c:24:f6:8b:d8:29:ad:18:11:6c:6b:39:25:21:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:90:11:54:C3:16:25:B7:4F:AC:BB:6B:BF:91:CF:FA:57:20:96:1A
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/JJARVMMWJbdPrLtrv5HP-lcglho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
Signature Algorithm: sha256WithRSAEncryption
97:4b:af:e0:c7:46:ed:df:e1:f1:91:c7:48:75:21:61:0d:d8:
4f:0a:c6:1f:69:a6:76:d1:ea:34:59:e7:5e:3c:68:25:e1:d7:
eb:88:8e:fb:64:59:01:e9:7a:03:b6:c6:0e:91:6d:58:c6:ca:
18:2a:a8:ad:71:7f:3e:89:f5:ea:33:72:9c:84:fc:a3:e2:1d:
af:55:e9:a4:fe:bc:fd:20:b3:50:b5:6f:03:b5:b1:18:70:9b:
89:c2:6d:d3:c8:16:3b:3e:c4:af:e3:c7:f6:05:13:5a:0e:ea:
58:6c:c8:14:bd:fd:18:cd:19:ff:73:0a:ca:26:3d:88:b8:70:
22:a4:c5:b3:48:1b:ec:71:f8:e0:de:e5:ab:1b:75:44:15:cc:
04:af:3c:8f:dc:29:84:49:a8:5f:9a:4c:19:02:61:2c:8c:39:
6b:fb:0c:1b:d1:4a:9c:bc:c4:6f:c6:a1:41:47:ff:57:ba:ff:
c2:7f:11:5d:66:3c:e0:fd:e0:a9:e1:27:e9:44:95:37:2a:12:
70:0d:44:b0:a6:ce:ee:dd:5e:79:f8:a1:68:cf:ad:c0:0d:c1:
8f:6f:d7:3d:03:8b:d4:59:9d:f5:b5:9b:28:93:8e:f5:db:ea:
42:23:5f:5f:12:e6:19:cc:68:29:94:a5:be:8a:6c:a3:3d:e6:
0c:46:53:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org