Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/NBTqhtxSwKVbUTkTeGO2g_oRhi0.roa
File: NBTqhtxSwKVbUTkTeGO2g_oRhi0.roa (raw, json)
Hash identifier: KtEqS+MIlPYhq7pQtaQAZytWRk+bgPFIIxvcwUWlOxE=
Subject key identifier: 34:14:EA:86:DC:52:C0:A5:5B:51:39:13:78:63:B6:83:FA:11:86:2D
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018459B326B923EE15060F6384283C1A5FFB
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/NBTqhtxSwKVbUTkTeGO2g_oRhi0.roa
Signing time: Wed 09 Nov 2022 00:03:43 +0000
ROA not before: Wed 09 Nov 2022 00:03:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 85.158.59.0/24 maxlen: 24
85.237.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:59:b3:26:b9:23:ee:15:06:0f:63:84:28:3c:1a:5f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Nov 9 00:03:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3414ea86dc52c0a55b5139137863b683fa11862d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:1d:a0:05:4d:3d:65:2e:e1:27:74:ae:3a:
69:24:65:f5:e6:12:15:0f:29:3b:13:e9:7d:8f:21:
fd:14:27:f2:87:85:2d:66:e7:a4:ff:1e:0b:01:42:
11:6f:c8:43:68:6b:07:dd:48:b6:41:8c:36:0c:6e:
61:0b:8d:8e:7b:bc:ed:cf:0b:68:ff:13:45:70:34:
01:67:55:cc:a4:a8:06:aa:d1:18:af:8b:11:6f:60:
06:93:a5:6a:a0:b7:39:a4:95:41:f1:c0:80:15:c3:
87:b3:3f:ce:c8:11:a9:08:1d:5a:2b:74:62:55:74:
6e:3f:0c:f1:4b:ba:78:d0:54:07:be:81:99:a8:3f:
b4:2c:7d:67:06:31:bb:26:ac:f1:d4:20:03:e0:7e:
a5:84:3e:6b:64:9a:c1:40:6d:e9:97:23:2d:d2:62:
e2:90:f6:d0:c1:69:ee:30:07:f9:2e:3f:b5:47:0c:
9e:65:fa:68:e9:ba:8e:77:5f:90:c7:cd:86:a4:eb:
5c:9d:97:da:b4:73:f5:a7:a5:b3:79:5c:74:03:18:
b6:50:40:2d:c5:65:0c:6a:88:03:f1:43:d4:63:a7:
db:6d:ba:98:47:83:03:11:1c:94:5a:9f:6f:df:85:
8b:a1:12:84:27:16:bc:8d:28:6e:24:af:a9:9f:9f:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:14:EA:86:DC:52:C0:A5:5B:51:39:13:78:63:B6:83:FA:11:86:2D
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/NBTqhtxSwKVbUTkTeGO2g_oRhi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.59.0/24
85.237.214.0/24
Signature Algorithm: sha256WithRSAEncryption
51:68:de:58:27:88:fa:fb:74:40:51:ce:84:b7:23:1d:b1:e1:
ff:c7:3f:8b:3d:5d:6f:6f:ba:fd:fa:af:d2:a0:29:a1:d6:aa:
c0:dc:56:9e:4f:7c:27:d7:7b:52:70:dd:fb:c1:10:38:97:09:
36:0f:9f:73:9d:d3:33:5a:57:56:f7:f0:fc:b7:3c:30:6e:c9:
5f:20:c1:60:6e:24:e7:83:3f:1d:6e:87:53:25:b0:59:0b:49:
a3:5c:50:bf:fd:08:47:1a:e3:8f:97:53:d4:81:7e:66:9a:a1:
ed:99:2e:73:2e:6c:54:ab:e6:14:6d:13:1b:b7:9d:cc:46:21:
91:5b:81:44:b4:72:84:8a:db:f5:01:93:b3:09:95:31:6c:ad:
0c:e2:97:6e:5a:86:73:20:fc:2e:58:3b:dd:ae:c8:32:0d:d6:
ac:2e:a0:81:53:a5:34:6c:d5:72:a5:35:64:37:1b:39:45:b2:
ea:72:13:ad:fd:8e:c3:87:d7:32:bb:d4:0c:37:9e:df:54:2e:
18:39:29:ba:54:1b:3d:79:a0:cf:5a:28:6d:46:56:21:75:34:
c2:e7:42:20:47:46:42:92:1e:2c:9e:3f:03:01:35:e7:8b:67:
12:db:d8:0d:2b:d9:b0:7a:91:82:b6:0e:8f:82:24:29:0a:c3:
99:74:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org