Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Vz16VyoOQjGx9lM5jX-siyWre7s.roa
File: Vz16VyoOQjGx9lM5jX-siyWre7s.roa (raw, json)
Hash identifier: n4oLEM/iY4o4YIpwPn40ZQTntY5Rp/9AI0fOCvwEIe4=
Subject key identifier: 57:3D:7A:57:2A:0E:42:31:B1:F6:53:39:8D:7F:AC:8B:25:AB:7B:BB
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DE9DB94810F049EC0AFE4D6C564E86
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Vz16VyoOQjGx9lM5jX-siyWre7s.roa
Signing time: Mon 02 Jan 2023 09:44:52 +0000
ROA not before: Mon 02 Jan 2023 09:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 85.158.58.0/24 maxlen: 24
85.237.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:9d:b9:48:10:f0:49:ec:0a:fe:4d:6c:56:4e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=573d7a572a0e4231b1f653398d7fac8b25ab7bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:f4:7e:1f:f5:81:a8:8e:8c:7a:84:5e:38:
5d:90:e7:7e:fd:3a:3d:54:3c:60:ba:6c:a9:a6:10:
5d:3f:e1:4e:c7:00:3e:c5:d4:dd:a8:93:a7:c4:e4:
20:94:34:c9:d6:24:c0:2b:15:27:46:04:3f:fb:f3:
68:93:04:76:77:ff:e0:59:65:d1:86:33:de:c9:48:
fa:c0:d2:a5:00:5d:e9:30:2e:48:c8:1d:48:52:67:
c0:7a:48:4d:d2:d9:9b:93:54:26:ee:07:aa:96:ef:
37:ff:b4:19:34:68:d5:7c:ec:8b:ca:88:2b:b9:e7:
45:2c:e5:15:ee:f3:d5:89:d4:c5:bc:5a:8d:05:f2:
e0:ef:55:2b:c4:ad:39:7f:24:91:64:4e:41:d5:af:
a6:79:ba:90:ba:fa:d8:27:64:3d:b9:55:a7:fe:99:
6e:7e:0a:15:8e:2b:67:d3:18:d7:06:cc:f5:91:eb:
a6:85:df:99:ed:fe:e9:5c:26:36:8a:f1:fd:3c:18:
2f:f3:50:bb:c2:04:3b:bb:b6:64:9a:72:3b:56:a2:
fb:89:dc:c5:c9:2e:02:1f:76:6c:b9:6c:35:02:6c:
98:6b:db:0f:40:f9:5f:00:01:c2:ac:64:87:2c:fa:
ec:f0:1c:87:bb:5c:86:dd:83:45:38:da:5f:31:9f:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3D:7A:57:2A:0E:42:31:B1:F6:53:39:8D:7F:AC:8B:25:AB:7B:BB
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Vz16VyoOQjGx9lM5jX-siyWre7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.58.0/24
85.237.209.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:c7:43:32:f5:78:6d:6b:fa:14:ab:12:82:d4:d9:92:b2:c2:
08:05:0b:61:da:b1:74:66:ce:5a:ed:70:f2:df:a4:8d:8b:e1:
33:64:e6:74:4a:30:1c:55:43:c6:92:26:0d:47:68:c5:02:ee:
63:32:27:a9:39:80:6d:d0:2d:37:fe:97:f8:64:4e:02:28:fe:
f5:5e:8f:03:5b:4a:17:82:12:a7:36:24:06:81:56:f2:f3:f7:
90:5a:5a:67:45:83:97:b0:1e:80:3a:b8:bf:f4:cd:50:62:bb:
18:8a:72:a0:c6:c1:cf:71:e9:d9:39:91:eb:48:24:1c:6f:4b:
d7:0f:13:e5:ee:48:24:e1:ea:18:76:c7:c4:96:b8:b9:28:3d:
fe:2f:c2:0a:26:1c:95:ee:99:58:d4:3d:f5:ca:fe:09:82:11:
0b:25:5d:f9:14:27:da:b0:f2:48:b4:ba:4e:24:a1:fb:2e:76:
b6:5d:b3:ed:56:2c:1a:d3:05:4b:75:db:95:38:f6:34:39:9a:
e8:a6:91:88:16:81:8c:54:ed:d4:98:d1:e3:16:c3:1e:10:3d:
84:b3:89:35:36:bd:1a:73:7a:c6:c2:d2:ab:0a:43:42:3e:bd:
26:fe:5f:ab:03:04:d8:16:29:5d:dc:c6:c6:ac:7b:a1:d1:97:
8e:bf:f3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org