Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OiokLrPS3ZmhytECTksj4A0K4dA.roa
File: OiokLrPS3ZmhytECTksj4A0K4dA.roa (raw, json)
Hash identifier: hXTXRB9z/Bhq8MgDbc+4VSSbbS4D49DXAF1yYIpFBBY=
Subject key identifier: 3A:2A:24:2E:B3:D2:DD:99:A1:CA:D1:02:4E:4B:23:E0:0D:0A:E1:D0
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0184BBE53430C259F3C036CBA2F27D374555
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OiokLrPS3ZmhytECTksj4A0K4dA.roa
Signing time: Mon 28 Nov 2022 01:41:11 +0000
ROA not before: Mon 28 Nov 2022 01:41:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 85.237.199.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.158.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bb:e5:34:30:c2:59:f3:c0:36:cb:a2:f2:7d:37:45:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Nov 28 01:41:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a2a242eb3d2dd99a1cad1024e4b23e00d0ae1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:7c:4d:55:2e:30:19:e0:9f:75:59:2f:13:
3d:9c:82:26:32:2a:db:35:81:30:a2:1c:26:1a:49:
59:43:7b:6a:b2:d1:3f:03:46:d0:a1:1f:0f:ba:bb:
48:2c:4b:bb:c1:1f:8f:9f:d7:7c:22:eb:80:6f:56:
38:9c:c4:e5:83:d6:39:37:40:1c:c9:f2:62:a8:07:
40:95:f9:4d:4e:fe:f0:cd:db:cf:82:64:59:9a:55:
5c:8e:44:32:0f:d5:ff:91:42:08:56:68:ca:95:b2:
95:5d:a9:3c:26:69:b4:0f:34:fd:95:be:50:1a:11:
53:f2:0b:51:75:76:8c:3a:3d:4d:7a:49:87:be:04:
bd:d1:e1:45:bb:52:42:e2:70:db:ec:5f:d0:80:da:
c1:78:05:dd:38:95:cf:ac:67:2f:18:77:b7:3a:4c:
78:2d:39:ed:d8:4d:e2:2c:ac:87:28:32:d9:42:cd:
3c:11:7e:1d:0d:5a:57:73:b0:2a:df:dd:a7:02:1c:
05:80:47:8e:45:69:3a:40:13:5f:7b:54:29:a1:8c:
81:cb:e6:20:cf:28:98:b6:76:99:9a:ba:8a:8a:ce:
6e:ce:1a:91:f0:5e:5e:2c:d0:42:5b:44:b9:ea:7e:
22:b7:8c:69:13:77:81:1b:87:aa:b4:b9:81:10:04:
e3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2A:24:2E:B3:D2:DD:99:A1:CA:D1:02:4E:4B:23:E0:0D:0A:E1:D0
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OiokLrPS3ZmhytECTksj4A0K4dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
85.158.62.0/24
85.237.199.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5d:2d:35:09:54:eb:84:b0:2e:5a:a1:72:0b:2d:f2:4e:7d:
c8:42:d2:7c:97:e2:66:75:95:d2:02:5a:0f:b3:f0:f1:dc:a4:
11:6c:44:1b:ca:2d:05:66:c5:9a:88:2c:d4:30:75:0c:34:7e:
fa:00:61:6a:98:26:fa:28:e9:2b:91:d8:23:14:a8:c2:e5:74:
1c:8d:34:7d:c6:1b:bf:66:9f:88:1e:17:c7:e2:bc:f4:2a:f4:
dc:16:ac:71:8c:ea:21:9f:db:9d:7f:bd:cd:8f:84:be:78:ac:
f9:c4:ff:1e:39:ee:30:f2:97:4c:c9:2b:95:79:c8:25:85:5b:
6d:a3:2c:f0:20:94:db:98:60:c5:98:c1:67:0d:4c:5e:2f:4b:
5d:88:08:cd:93:a0:3f:3b:5a:cd:fa:3f:97:4b:2c:db:58:17:
e4:1f:e4:ef:c8:f2:a9:29:25:86:bb:1a:dc:1e:e5:0d:1c:bb:
e3:51:de:b5:47:9f:e7:b0:87:ec:f4:77:3c:c2:4a:17:c4:e3:
38:c3:08:ca:ea:31:0a:66:99:1f:63:b9:1d:c2:7e:ec:7c:b1:
94:79:3e:0f:73:f0:f3:3b:01:a1:19:a5:41:8a:67:f4:11:1f:
a8:55:f4:84:dd:ac:6a:12:65:0f:d4:cf:45:4a:75:28:4c:37:
ac:b1:c9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org