Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/W9kWVRyX_uOGII1NkUvGqv8UEjQ.roa
File: W9kWVRyX_uOGII1NkUvGqv8UEjQ.roa (raw, json)
Hash identifier: KPeyOaLrVBfuy5TGYZ4YPzIkauRKxZ4s8RFHKCgrTHM=
Subject key identifier: 5B:D9:16:55:1C:97:FE:E3:86:20:8D:4D:91:4B:C6:AA:FF:14:12:34
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0185A1EA97D5AC20C55DBAA28273A63D81C6
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/W9kWVRyX_uOGII1NkUvGqv8UEjQ.roa
Signing time: Wed 11 Jan 2023 17:39:44 +0000
ROA not before: Wed 11 Jan 2023 17:39:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.237.206.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:ea:97:d5:ac:20:c5:5d:ba:a2:82:73:a6:3d:81:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 11 17:39:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bd916551c97fee386208d4d914bc6aaff141234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fe:b9:23:53:40:1f:67:c0:6d:12:10:b1:0a:
17:0f:e5:40:6d:06:73:2f:bd:f6:69:65:9d:fe:18:
30:1e:c1:7a:f6:15:10:b0:a2:28:be:51:b0:a1:22:
9f:5a:48:13:43:65:c7:3c:d0:86:f9:ab:65:81:21:
98:41:fe:7e:8f:2a:fa:fd:07:c3:3b:c1:67:56:f6:
54:95:79:af:b8:35:ec:07:f7:54:f9:3c:23:5e:7a:
d3:44:7c:ab:96:6f:b3:3c:2c:af:24:30:c5:7e:a4:
e8:a0:73:23:f6:2c:d5:31:a3:89:18:27:71:72:50:
aa:c6:43:65:56:43:63:3f:47:6a:fc:97:86:8d:09:
61:0e:39:76:03:95:09:d2:07:d5:14:16:32:79:0c:
b1:62:85:08:8b:76:8f:40:46:fd:ef:2b:0a:30:8e:
69:dc:24:e2:03:91:83:a4:75:e1:4f:53:8a:d6:c1:
f4:3d:7b:ad:92:49:6d:3f:9a:f4:cd:ba:ca:f3:0d:
cf:16:68:07:19:02:ac:7d:58:c9:ae:14:65:66:70:
98:bd:13:cd:4e:f3:69:76:34:08:c9:48:02:8f:ff:
4d:04:c5:a7:bf:da:6d:95:0b:ca:67:98:46:b6:66:
95:0e:ce:9e:29:76:10:83:f3:7d:52:36:a9:58:4f:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D9:16:55:1C:97:FE:E3:86:20:8D:4D:91:4B:C6:AA:FF:14:12:34
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/W9kWVRyX_uOGII1NkUvGqv8UEjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.206.0/23
Signature Algorithm: sha256WithRSAEncryption
91:55:b1:02:13:98:dc:03:96:4d:44:9c:4e:5b:5c:0b:06:c7:
fb:30:bb:c7:77:ca:cd:13:64:db:3c:3d:f5:f2:3d:02:45:86:
68:d8:56:7e:7e:a3:12:d4:4a:40:43:67:ec:e0:f9:3f:dc:b3:
92:e5:bb:67:6e:df:04:d9:f5:e1:73:2b:85:0a:77:54:33:dd:
7a:f1:89:c4:8f:fa:66:78:2f:4e:63:c2:0a:ec:a0:66:52:76:
e2:77:4b:6d:3b:71:3f:d5:97:2a:6f:c5:4a:b3:cc:18:8b:10:
06:1d:09:24:b4:0e:4a:cd:7a:ed:e2:1d:24:12:dc:af:e0:33:
31:59:9f:92:87:23:58:ee:ee:e2:05:c8:d4:d8:10:30:f9:23:
dd:18:82:8c:cc:98:33:7c:49:ae:0c:40:7f:f1:7d:dd:c5:48:
3a:54:8e:92:e6:70:37:2d:85:44:b6:39:5d:e5:52:d5:2c:4e:
82:68:d3:4a:66:63:16:cc:40:37:c4:8d:a8:c4:aa:d7:4e:7a:
d1:57:f2:70:94:8b:d0:53:8a:04:d9:82:10:71:b7:64:18:c2:
b8:df:90:52:bc:af:06:7f:8e:c1:5d:52:a5:cb:c0:4f:5c:d3:
8f:c1:a6:8e:56:4f:bd:00:a1:c5:bc:81:37:ff:dc:a5:02:0c:
4c:5e:e4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org