Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/LW6zReH5ud9dDkhauedub_GQsUw.roa
File: LW6zReH5ud9dDkhauedub_GQsUw.roa (raw, json)
Hash identifier: jp9rdhktPJv8jbiGWhcI7MpB5kIya5cwyAfPK0Jm8A4=
Subject key identifier: 2D:6E:B3:45:E1:F9:B9:DF:5D:0E:48:5A:B9:E7:6E:6F:F1:90:B1:4C
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DE94B16FF76CCF610E8954823094E8
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/LW6zReH5ud9dDkhauedub_GQsUw.roa
Signing time: Mon 02 Jan 2023 09:44:50 +0000
ROA not before: Mon 02 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56540
IP address blocks: 85.237.192.0/23 maxlen: 24
185.89.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:94:b1:6f:f7:6c:cf:61:0e:89:54:82:30:94:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d6eb345e1f9b9df5d0e485ab9e76e6ff190b14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:b5:26:cb:5a:63:9d:a7:f9:de:8e:58:2b:
0a:88:e9:e3:80:19:14:a6:d1:97:26:d3:0a:54:8a:
9a:ce:c7:b8:ef:a3:0b:28:18:55:88:43:93:7f:90:
66:67:3c:22:40:f0:9b:32:22:ea:fb:33:d5:0b:9c:
be:e5:65:78:23:98:75:4c:db:fb:3a:d3:d1:7e:ea:
5d:bc:2e:77:9f:01:2f:e8:02:54:4f:0d:d2:4a:61:
6d:bc:1f:31:a6:ee:44:d6:74:45:e5:cc:ba:bf:e0:
b5:40:17:66:45:aa:30:8b:20:89:64:b8:9c:a2:11:
f5:2e:d7:ba:21:8b:ff:87:03:52:fc:1a:6f:cb:11:
04:77:37:66:ff:78:47:fe:f2:d2:bc:13:e2:af:fc:
fd:c9:ac:b9:c6:a0:78:30:42:ae:e4:14:61:ab:1b:
bf:bb:61:a8:d3:ea:20:2a:0d:38:a4:d6:cb:b7:34:
bc:75:30:9e:04:e6:b8:ea:79:f6:4b:84:fc:9e:2a:
f1:7f:12:21:d0:43:52:f7:be:34:71:2b:fc:4a:3b:
93:f3:ae:4d:10:fc:45:32:43:db:35:79:00:5c:56:
47:04:59:b4:d4:49:81:46:1a:f9:7e:2e:4a:0f:67:
9c:98:63:7c:6b:72:c5:1a:27:4f:5c:df:30:e0:12:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6E:B3:45:E1:F9:B9:DF:5D:0E:48:5A:B9:E7:6E:6F:F1:90:B1:4C
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/LW6zReH5ud9dDkhauedub_GQsUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.192.0/23
185.89.78.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:aa:21:c0:c8:b8:f6:41:8e:32:54:67:b3:9b:70:24:69:68:
5a:a1:fe:13:4e:87:88:a7:25:1b:d0:18:2d:d2:6b:8f:b3:89:
0f:fa:51:82:e9:87:9b:ce:78:13:1f:97:9c:32:ec:58:58:65:
33:45:c7:05:71:f6:8b:f6:c9:1e:30:b6:30:be:46:63:2f:38:
06:0e:93:30:1e:59:59:bc:05:87:69:8f:37:55:33:8e:76:a5:
eb:29:68:53:7c:e8:51:fb:98:6e:98:68:36:d1:b7:56:59:0d:
55:e6:6b:87:3d:52:25:06:dc:6d:39:52:69:e4:ec:1d:b7:c6:
28:c6:b1:14:3f:ab:2a:20:7c:eb:f3:a7:2c:26:d7:5e:f6:3c:
17:83:0e:45:23:c2:19:20:2a:e8:44:a6:51:c5:c0:76:1d:f3:
70:7a:d4:f8:83:74:f3:51:03:bb:3a:2f:bc:3e:a6:03:b3:39:
bb:a2:e4:76:59:7e:cd:1e:67:9f:41:69:3e:02:a6:42:1f:95:
49:9e:5b:c7:43:c1:27:51:d1:49:62:4d:a1:02:6b:3a:16:37:
4a:e6:a5:69:56:90:64:a5:7f:42:83:65:ee:2c:c3:ee:8a:69:
6d:37:be:8f:42:c5:cc:70:c2:c7:4a:5e:7f:e5:10:7d:32:f8:
b0:7d:da:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org