Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/R-AvWiOFv-tmwbUruHknYMI4oAw.roa
File: R-AvWiOFv-tmwbUruHknYMI4oAw.roa (raw, json)
Hash identifier: CSo9dMx9vOvsr6fVEuPSxCeB8y+vdHofhAuudbbnq3Y=
Subject key identifier: 47:E0:2F:5A:23:85:BF:EB:66:C1:B5:2B:B8:79:27:60:C2:38:A0:0C
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018770029204870EAE82CE8E592B874E1038
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/R-AvWiOFv-tmwbUruHknYMI4oAw.roa
Signing time: Tue 11 Apr 2023 11:10:29 +0000
ROA not before: Tue 11 Apr 2023 11:10:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 85.237.196.0/24 maxlen: 24
85.237.205.0/24 maxlen: 24
85.237.203.0/24 maxlen: 24
85.158.58.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.237.208.0/20 maxlen: 24
85.158.60.0/24 maxlen: 24
185.93.32.0/24 maxlen: 24
185.93.34.0/23 maxlen: 24
194.169.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:02:92:04:87:0e:ae:82:ce:8e:59:2b:87:4e:10:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Apr 11 11:10:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47e02f5a2385bfeb66c1b52bb8792760c238a00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:0d:9a:5d:11:b0:26:7b:ba:27:17:d8:4b:
ad:f4:4b:00:d5:86:91:d5:47:86:0f:c6:76:aa:32:
ba:53:fe:5e:b7:9e:a7:a8:72:77:8e:01:72:2c:1b:
b4:36:d3:af:c4:8c:65:2c:e4:84:e3:f1:70:9a:bd:
24:f8:f7:7e:d8:36:9a:9c:4e:1f:52:14:44:e2:cc:
60:89:92:99:6f:1c:35:df:eb:d9:d1:ac:a4:76:6d:
90:71:50:52:b1:03:ac:c2:09:ce:82:4c:bd:00:81:
9c:fd:32:95:2c:86:ee:97:71:68:38:7d:f4:da:92:
0c:7e:1e:51:00:56:d5:65:0f:31:63:8e:7b:59:ed:
d0:ae:f3:4f:d1:22:08:72:cf:8b:c3:98:d2:b3:16:
7c:af:6e:b8:52:bf:fd:1f:43:71:30:96:b0:d8:50:
6a:9d:03:e8:9d:8e:80:0b:ca:07:b8:4a:1e:30:35:
3b:2c:7d:22:a0:a6:8d:eb:74:84:8c:13:25:9f:01:
f0:4d:f2:25:78:9d:23:36:37:a4:21:39:50:ea:6d:
e9:e1:30:f7:73:61:0d:f1:9d:de:f8:50:25:fa:5c:
68:ac:b4:5d:2b:86:e2:87:81:bb:e4:d6:1b:20:39:
aa:ae:54:19:11:05:83:3a:fb:be:83:fc:40:89:a5:
76:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E0:2F:5A:23:85:BF:EB:66:C1:B5:2B:B8:79:27:60:C2:38:A0:0C
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/R-AvWiOFv-tmwbUruHknYMI4oAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0-85.158.58.255
85.158.60.0/24
85.237.196.0/24
85.237.203.0/24
85.237.205.0/24
85.237.208.0/20
185.93.32.0/24
185.93.34.0/23
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:b5:c9:f9:2d:ba:f0:05:5f:ae:45:07:9d:48:25:c2:a8:0f:
87:7f:71:29:be:2b:75:93:b4:27:f9:f2:15:11:0d:30:e6:85:
a0:92:8b:80:7f:d3:34:93:7f:9c:b6:92:90:04:0f:78:d8:2c:
df:08:3f:6e:bd:8b:6c:09:8e:13:84:f1:1c:a6:15:fd:3b:28:
ef:d9:97:04:0b:b6:57:42:dd:a7:33:7e:d0:8b:be:32:c5:4a:
7e:ee:89:da:52:a4:88:2f:40:a2:28:a9:40:b6:54:33:52:dc:
a2:5f:88:6f:85:51:c8:eb:41:74:ab:c1:92:0c:61:ba:26:9a:
7c:65:16:c3:59:60:c8:19:9d:be:e7:cd:ac:85:6b:5c:4f:50:
4f:1c:7b:7a:14:85:0b:58:db:33:b9:2f:a8:b6:ff:3b:2d:7a:
82:ef:c3:fe:9d:43:31:32:be:7b:f3:99:08:b1:8c:88:08:b4:
54:78:41:10:f2:11:db:08:37:bc:de:82:7b:38:09:5a:c2:a7:
fe:7c:75:16:5d:97:05:01:b9:6c:74:9c:d3:4f:64:13:0c:0a:
74:25:48:57:74:ae:4f:f5:fe:ad:87:dd:6d:91:af:51:f2:1f:
71:10:72:b3:ec:4b:17:30:e3:e5:af:fc:6d:4d:f5:2b:f1:bd:
1a:58:1b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org