Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/K4Wn_8acCXNQKc7otxZVFtMerMw.roa
File: K4Wn_8acCXNQKc7otxZVFtMerMw.roa (raw, json)
Hash identifier: MdA6Iqst4oaVK34AlvfYHCwcHYjeiHWsklulEIQHnEY=
Subject key identifier: 2B:85:A7:FF:C6:9C:09:73:50:29:CE:E8:B7:16:55:16:D3:1E:AC:CC
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 04706863
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/K4Wn_8acCXNQKc7otxZVFtMerMw.roa
Signing time: Fri 07 Jan 2022 16:18:59 +0000
ROA not before: Fri 07 Jan 2022 16:18:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 85.237.198.0/24 maxlen: 24
85.237.202.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.158.62.0/24 maxlen: 24
85.158.63.0/24 maxlen: 24
85.158.60.0/24 maxlen: 24
85.158.61.0/24 maxlen: 24
185.89.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74475619 (0x4706863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 7 16:18:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b85a7ffc69c09735029cee8b7165516d31eaccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:5b:95:99:88:7a:e4:c1:81:32:dd:a1:d0:
1c:aa:f4:19:c5:fa:a9:df:87:51:25:ca:69:56:70:
aa:c1:bc:af:0f:bf:9d:91:20:eb:3f:e6:57:38:2b:
3c:10:3b:7e:f4:f6:bb:5d:42:81:01:db:70:a2:16:
85:85:e3:44:ba:30:da:79:68:36:2a:80:ac:7a:b5:
27:77:40:32:c7:39:85:c0:73:b0:01:ef:e7:98:95:
72:d6:8b:c4:15:ed:e2:cd:d0:36:54:fb:d1:3a:43:
fd:e2:0e:b7:e8:ee:2f:ea:e1:5f:4e:a7:d2:eb:26:
d3:6a:ca:f7:20:72:ea:dd:c7:2d:7c:14:77:3d:7b:
bc:ea:83:69:30:84:03:ed:4c:06:5c:46:04:9d:c7:
1f:87:3d:99:7d:03:a7:e9:fe:f2:fe:ab:1e:e4:de:
c4:48:eb:f1:ec:40:a8:6b:bf:07:a8:59:e5:ce:34:
fd:eb:08:fb:cb:66:00:8e:70:6c:9d:77:d6:9f:4f:
da:da:27:53:ce:93:fd:a8:f5:f9:75:df:0c:b4:85:
45:7f:c5:05:23:d4:4f:f5:0f:d9:53:85:6f:7d:dd:
98:94:b9:e1:10:67:84:92:1c:44:60:9e:e2:ca:88:
e0:30:5d:70:19:92:16:e4:dd:e7:ae:5a:f3:9f:35:
d4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:85:A7:FF:C6:9C:09:73:50:29:CE:E8:B7:16:55:16:D3:1E:AC:CC
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/K4Wn_8acCXNQKc7otxZVFtMerMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
85.158.60.0/22
85.237.198.0/24
85.237.202.0/24
185.89.77.0/24
Signature Algorithm: sha256WithRSAEncryption
34:24:51:9b:12:21:aa:e3:f1:3e:03:b9:6c:3f:3f:fc:08:45:
4c:3b:b9:fd:b5:12:d7:96:f5:88:99:6d:f0:74:78:b2:c0:59:
d2:d9:93:1f:4c:d4:f3:77:0d:c1:5f:70:00:75:82:9c:c2:5b:
de:42:3b:d3:ae:3b:92:37:5a:f9:fe:17:5b:1b:f0:ef:f7:ff:
97:78:2a:05:9b:ae:86:95:15:9c:a1:e8:e1:15:8d:78:10:0d:
c0:09:9f:35:f0:74:ce:70:b2:1a:99:8b:a4:ce:d7:59:12:2f:
ec:d5:5f:31:57:5c:19:30:71:35:6e:2d:a3:23:f5:76:ef:6c:
a6:18:de:f9:04:24:de:7e:e6:1d:f1:00:b4:f0:82:e1:18:ba:
56:13:df:3f:e3:fa:0e:5c:fb:e7:65:ed:23:20:78:99:a2:4d:
16:96:b3:68:71:2d:3f:7f:e6:77:4b:89:3d:34:6f:f9:e3:27:
d1:3a:d0:d9:d2:b0:6a:7e:07:17:92:03:c0:de:bf:f8:a3:6c:
b0:e8:09:ea:9e:f2:bf:93:dc:98:07:0f:16:f6:13:ac:87:d3:
56:67:bf:07:fc:d1:fa:ad:56:37:82:51:ab:2f:db:35:4d:f4:
af:80:39:6c:e3:29:57:88:b4:50:45:cf:8c:e7:cb:da:76:ea:
dd:fc:e0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org