Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/LOz0krViivGxfo1NN3-q_K5mT9c.roa
File: LOz0krViivGxfo1NN3-q_K5mT9c.roa (raw, json)
Hash identifier: HjCqi2Owu9PSxUgjQzhQXdawxYyKfortVOyc3nCAVh4=
Subject key identifier: 2C:EC:F4:92:B5:62:8A:F1:B1:7E:8D:4D:37:7F:AA:FC:AE:66:4F:D7
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01885FDCDF27E56ACA4AA0F3B6A3F6D859DE
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/LOz0krViivGxfo1NN3-q_K5mT9c.roa
Signing time: Sun 28 May 2023 00:58:10 +0000
ROA not before: Sun 28 May 2023 00:58:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30058
IP address blocks: 85.237.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5f:dc:df:27:e5:6a:ca:4a:a0:f3:b6:a3:f6:d8:59:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: May 28 00:58:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2cecf492b5628af1b17e8d4d377faafcae664fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:ee:af:bb:3d:54:31:6f:f9:69:f3:78:00:
3f:8c:96:03:0a:1d:ea:23:8f:5c:5b:0a:7c:24:dc:
19:bb:c7:40:be:4e:a5:77:f7:e9:1b:9e:23:59:fe:
aa:21:dc:18:c9:34:50:29:a4:e3:83:d0:21:76:59:
76:2e:d0:e3:48:ed:a5:52:0b:21:7b:ab:c2:83:da:
7c:7b:53:50:80:2f:b1:cc:52:69:2f:e2:79:de:a8:
20:b2:52:2e:9e:1b:e7:ad:99:b1:2b:2b:5a:30:ad:
5f:49:78:ff:fd:07:ab:4b:30:74:03:3f:f9:fe:8a:
74:ee:6c:4d:7c:2d:b9:8b:c3:5b:24:82:0a:d4:4e:
b5:8d:8f:9d:24:de:49:6d:e3:ab:9e:b9:a6:49:f7:
a2:c7:30:96:f3:48:f6:98:a0:3b:98:ea:34:66:59:
f8:0d:01:12:00:da:fa:2a:fe:81:3e:9a:82:5e:50:
76:d5:61:6d:ca:10:6d:9e:71:05:df:70:37:22:65:
c4:4d:6f:dd:2f:2b:c4:41:0c:73:9e:e7:5f:e1:bf:
35:8b:a1:d4:dd:41:be:ee:9e:8c:63:aa:67:ee:31:
c6:89:7c:82:cb:05:56:d4:09:a1:30:f0:29:2e:94:
ea:d5:58:fd:2f:00:fe:38:27:18:bd:e3:08:e5:e6:
42:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EC:F4:92:B5:62:8A:F1:B1:7E:8D:4D:37:7F:AA:FC:AE:66:4F:D7
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/LOz0krViivGxfo1NN3-q_K5mT9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:81:48:84:ad:08:1d:34:a9:0b:c1:0a:c7:eb:a9:56:44:c8:
b5:8e:9d:09:c0:b8:00:12:d5:21:a5:9f:f3:a8:e2:32:be:7b:
8f:06:cd:8b:65:dd:91:ee:19:8c:98:1d:fc:45:b2:58:e9:62:
21:8e:6f:d3:94:41:d8:ed:a7:c3:1c:10:bc:fe:97:9b:88:8a:
34:9e:94:24:cc:3b:83:15:0a:29:b0:bd:1a:3d:58:da:f0:72:
b5:3e:8d:b2:40:fa:00:28:77:ed:c0:ad:17:25:b8:ff:82:d4:
e1:e1:29:99:e9:78:10:43:0b:34:ff:59:b8:0f:7c:60:0f:88:
13:5b:12:08:86:03:24:95:7c:47:90:de:08:ca:09:65:c9:61:
88:7e:fb:fa:02:4f:26:80:a9:38:47:64:c3:74:9b:3d:c0:76:
0e:a7:74:3f:0d:d3:f1:03:03:a7:d4:17:30:80:94:0b:75:71:
9e:16:de:be:d6:92:72:39:ab:77:70:96:cc:d0:8b:9d:39:4b:
3d:a4:c2:90:c6:b9:9e:36:25:17:50:e7:73:66:3a:e7:59:4e:
38:f8:dc:4f:aa:7d:8b:8d:ef:3e:e5:cb:1d:0f:db:c9:c7:33:
23:0a:62:30:23:57:48:5f:93:96:bf:c9:85:bb:a4:db:9d:09:
98:5a:c5:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhf3N8n5WrKSqDztqP22FneMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MGI2NzM2OGM5MWI4NWU4NDg4OGM1ZWQyZTgyNGQxMzkw
ODEwYmIwHhcNMjMwNTI4MDA1ODEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2VjZjQ5MmI1NjI4YWYxYjE3ZThkNGQzNzdmYWFmY2FlNjY0ZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbLur7s9VDFv+WnzeAA/jJYDCh3q
I49cWwp8JNwZu8dAvk6ld/fpG54jWf6qIdwYyTRQKaTjg9Ahdll2LtDjSO2lUgsh
e6vCg9p8e1NQgC+xzFJpL+J53qggslIunhvnrZmxKytaMK1fSXj//QerSzB0Az/5
/op07mxNfC25i8NbJIIK1E61jY+dJN5JbeOrnrmmSfeixzCW80j2mKA7mOo0Zln4
DQESANr6Kv6BPpqCXlB21WFtyhBtnnEF33A3ImXETW/dLyvEQQxznudf4b81i6HU
3UG+7p6MY6pn7jHGiXyCywVW1AmhMPApLpTq1Vj9LwD+OCcYveMI5eZCUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCzs9JK1YorxsX6NTTd/qvyuZk/XMB8GA1UdIwQY
MBaAFDkLZzaMkbhehIiMXtLoJNE5CBC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYt
NWM5ZDYyNjI5Yzg2LzEvTE96MGtyVmlpdkd4Zm8xTk4zLXFfSzVtVDljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYtNWM5ZDYyNjI5Yzg2
LzEvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVe3TMA0G
CSqGSIb3DQEBCwUAA4IBAQB/gUiErQgdNKkLwQrH66lWRMi1jp0JwLgAEtUhpZ/z
qOIyvnuPBs2LZd2R7hmMmB38RbJY6WIhjm/TlEHY7afDHBC8/pebiIo0npQkzDuD
FQopsL0aPVja8HK1Po2yQPoAKHftwK0XJbj/gtTh4SmZ6XgQQws0/1m4D3xgD4gT
WxIIhgMklXxHkN4IygllyWGIfvv6Ak8mgKk4R2TDdJs9wHYOp3Q/DdPxAwOn1Bcw
gJQLdXGeFt6+1pJyOat3cJbM0IudOUs9pMKQxrmeNiUXUOdzZjrnWU44+NxPqn2L
je8+5csdD9vJxzMjCmIwI1dIX5OWv8mFu6TbnQmYWsXd
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org