Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Uuc1VyDoa_keZKjQxAthnDsDg0w.roa
File: Uuc1VyDoa_keZKjQxAthnDsDg0w.roa (raw, json)
Hash identifier: C6xWxmSCNx7VBp1H5sGJ/Lbj4dqAi5R7praHPvtG848=
Subject key identifier: 52:E7:35:57:20:E8:6B:F9:1E:64:A8:D0:C4:0B:61:9C:3B:03:83:4C
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0188A3A693825257EFF53D4EFD90C09FB6BA
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Uuc1VyDoa_keZKjQxAthnDsDg0w.roa
Signing time: Sat 10 Jun 2023 04:53:02 +0000
ROA not before: Sat 10 Jun 2023 04:53:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
85.237.202.0/24 maxlen: 24
85.237.223.0/24 maxlen: 24
185.93.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a3:a6:93:82:52:57:ef:f5:3d:4e:fd:90:c0:9f:b6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jun 10 04:53:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52e7355720e86bf91e64a8d0c40b619c3b03834c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:af:98:1e:bf:c5:ac:37:18:62:49:62:22:5e:
4f:c8:c4:c8:75:a1:51:d4:84:42:27:29:70:3a:bc:
a6:47:af:22:5e:08:62:a4:bc:42:12:74:8b:d6:22:
96:b5:d5:a2:6e:69:c6:c4:14:63:bf:ed:a7:d8:a0:
44:a4:48:29:bb:8e:69:c8:c2:ef:f4:dc:e1:89:6e:
42:b3:b7:a2:00:a1:f0:6b:16:86:55:ff:26:5a:f2:
69:af:37:fb:fa:24:ab:54:72:c1:01:ab:6a:7a:05:
7b:17:ea:2d:c9:47:55:24:ab:2f:68:3b:cd:49:5c:
e4:66:f6:36:05:4f:57:00:98:94:c8:ac:25:f4:b5:
57:80:ff:d2:b4:44:02:c8:a7:6c:6b:1e:a1:58:93:
d7:5b:b3:20:c7:65:58:a6:54:8d:ba:04:89:bb:e3:
a1:f6:ce:40:64:45:65:2d:df:25:7a:b7:82:67:3d:
e7:42:e6:7b:70:0d:56:17:67:75:8f:6d:77:03:4c:
38:e9:8c:48:2a:cc:0a:0c:96:48:08:c8:cf:da:31:
1f:cc:9a:c4:cd:b6:40:43:96:9f:46:6c:f2:54:26:
2d:15:94:4d:ed:3b:ad:72:8f:be:9a:a2:d9:ce:08:
9c:23:3b:86:2e:78:b2:62:b8:5e:c3:48:25:e8:aa:
53:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E7:35:57:20:E8:6B:F9:1E:64:A8:D0:C4:0B:61:9C:3B:03:83:4C
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Uuc1VyDoa_keZKjQxAthnDsDg0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.202.0/24
85.237.223.0/24
185.93.33.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
25:42:05:90:45:bf:20:86:21:d4:76:41:4a:ae:37:d9:32:53:
48:83:af:39:18:02:14:62:7b:35:5b:a4:f2:cd:3d:88:2d:13:
83:d6:b1:17:1b:9f:3e:a9:23:b5:21:c2:cc:87:96:5a:6c:14:
ea:02:64:86:2c:1b:36:ba:9c:b5:54:b2:3e:3b:d7:d3:93:ea:
db:a6:5e:29:13:0c:a1:b7:d5:1b:f9:74:7c:b4:8b:9f:c3:f2:
a9:54:34:74:cb:a8:8f:f1:cd:b0:c8:ed:e6:c4:49:3a:24:43:
b8:a4:fd:b3:b6:45:a6:96:67:a0:94:4d:4b:ef:33:39:44:7c:
85:1d:e4:08:d6:83:0b:bb:b0:c8:8d:39:d5:e1:1a:2a:cf:2a:
69:67:01:17:2d:f1:4e:4b:3b:35:85:c3:14:2f:25:4a:fd:15:
4d:b9:5c:40:85:fa:6e:3a:7d:de:ad:7f:3a:27:eb:29:4c:70:
9c:63:19:94:ef:cc:51:7d:5c:1f:f5:ed:a8:d3:97:3a:96:58:
ff:a2:d2:8d:f4:35:2c:f2:a3:d6:da:34:20:dc:25:b6:97:91:
b0:6b:1f:19:7b:dc:9f:c9:e2:a8:cf:53:57:4b:bd:fa:96:19:
d3:00:a2:f4:cb:08:18:1b:05:ac:fd:fd:72:9a:79:40:66:33:
47:80:b9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org