Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Xub4X9aErPz9kR7Idyj70eIQMVY.roa
File: Xub4X9aErPz9kR7Idyj70eIQMVY.roa (raw, json)
Hash identifier: 7DsMe21VWD1uNII7bEWAPdsDsmev9Chh+CGZcRL1SxU=
Subject key identifier: 5E:E6:F8:5F:D6:84:AC:FC:FD:91:1E:C8:77:28:FB:D1:E2:10:31:56
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0185BC3C39644ED28B45A044A93D9A5F3504
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Xub4X9aErPz9kR7Idyj70eIQMVY.roa
Signing time: Mon 16 Jan 2023 20:19:01 +0000
ROA not before: Mon 16 Jan 2023 20:19:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 85.237.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bc:3c:39:64:4e:d2:8b:45:a0:44:a9:3d:9a:5f:35:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 16 20:19:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ee6f85fd684acfcfd911ec87728fbd1e2103156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:24:6e:27:a0:7f:56:60:23:80:bf:e5:e4:31:
da:a0:c2:6f:02:e9:f4:a8:9c:e9:4b:7b:ec:b5:18:
60:bb:f2:4b:1c:ce:9f:e0:ad:97:04:7f:79:19:fc:
76:b9:16:1f:d5:5b:ff:43:fb:f1:47:b6:ce:e9:4f:
a0:9b:1c:a7:4a:0d:66:82:d5:c6:de:20:f6:34:36:
0f:50:6e:cf:e8:74:a9:e7:6b:42:f1:79:5d:d2:aa:
9b:1c:a8:f8:10:ba:52:7d:e6:6f:57:d5:c6:1d:05:
05:ef:e7:ed:d0:ee:98:25:0c:54:a0:8e:dd:8d:77:
de:9e:32:b5:71:73:cb:8b:d7:53:c1:2c:d7:64:95:
09:d0:9a:3a:7c:1c:9c:fb:03:12:44:8e:56:05:5d:
0e:93:8a:02:0c:d1:5c:cc:1f:92:0c:13:e2:d7:97:
3e:37:a8:10:90:00:76:ff:b2:51:4a:3c:63:70:db:
4b:cb:9f:26:2a:e4:d6:f1:c2:e4:56:28:ff:d7:6c:
0e:1c:82:94:f2:e2:e1:c1:42:6a:1c:78:48:e0:33:
b6:81:df:70:83:a9:eb:ef:e1:02:5c:bd:b6:7e:b0:
f2:92:09:ed:11:85:ac:88:8c:da:e3:30:29:46:ac:
c1:0a:85:77:37:a9:99:ef:63:87:95:9f:3e:d1:f4:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E6:F8:5F:D6:84:AC:FC:FD:91:1E:C8:77:28:FB:D1:E2:10:31:56
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Xub4X9aErPz9kR7Idyj70eIQMVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.214.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:07:85:53:04:5c:7c:4c:2d:11:ca:66:56:a1:9b:29:11:d0:
d8:77:55:ca:56:40:ac:1d:67:ac:72:2b:b1:14:25:c8:fc:cd:
33:1a:99:fa:01:e7:c0:ba:e7:73:25:61:21:73:7c:72:e6:80:
c2:1d:61:55:a0:e9:2c:ab:bf:d5:b8:a0:8b:ac:b4:fe:d8:18:
33:fc:dc:de:ca:4d:f9:4d:9b:8e:a4:01:e6:12:f1:f1:76:27:
f5:3b:81:0b:36:7c:73:d6:ce:f5:e4:ae:c9:41:f8:ff:0b:e3:
e2:de:28:20:d7:72:e2:70:d7:60:2b:64:a3:ac:a3:64:b7:31:
3c:d2:4f:e7:9b:aa:bb:9c:ff:a6:f2:6b:d5:12:38:14:b5:f4:
a2:d0:13:6c:da:8c:b9:a0:e5:67:8f:f0:c4:3b:73:a0:20:73:
9f:38:3f:6c:81:46:07:44:2e:2b:d2:b6:5c:c1:d6:18:03:88:
a6:db:8b:dc:30:81:fc:af:73:6f:60:19:be:59:e5:f5:34:b4:
b6:6a:a4:54:36:6b:e9:d2:7e:58:99:b9:20:a9:5a:58:86:fb:
98:e4:f6:45:cc:27:2e:c5:8f:ba:e5:d9:f1:17:8f:a9:0d:b4:
61:84:bb:7e:fe:31:3b:dd:9d:93:cc:d3:16:77:a3:1a:0a:7f:
f7:ee:ea:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYW8PDlkTtKLRaBEqT2aXzUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MGI2NzM2OGM5MWI4NWU4NDg4OGM1ZWQyZTgyNGQxMzkw
ODEwYmIwHhcNMjMwMTE2MjAxOTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWU2Zjg1ZmQ2ODRhY2ZjZmQ5MTFlYzg3NzI4ZmJkMWUyMTAzMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yRuJ6B/VmAjgL/l5DHaoMJvAun0
qJzpS3vstRhgu/JLHM6f4K2XBH95Gfx2uRYf1Vv/Q/vxR7bO6U+gmxynSg1mgtXG
3iD2NDYPUG7P6HSp52tC8Xld0qqbHKj4ELpSfeZvV9XGHQUF7+ft0O6YJQxUoI7d
jXfenjK1cXPLi9dTwSzXZJUJ0Jo6fByc+wMSRI5WBV0Ok4oCDNFczB+SDBPi15c+
N6gQkAB2/7JRSjxjcNtLy58mKuTW8cLkVij/12wOHIKU8uLhwUJqHHhI4DO2gd9w
g6nr7+ECXL22frDykgntEYWsiIza4zApRqzBCoV3N6mZ72OHlZ8+0fRnbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF7m+F/WhKz8/ZEeyHco+9HiEDFWMB8GA1UdIwQY
MBaAFDkLZzaMkbhehIiMXtLoJNE5CBC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYt
NWM5ZDYyNjI5Yzg2LzEvWHViNFg5YUVyUHo5a1I3SWR5ajcwZUlRTVZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYtNWM5ZDYyNjI5Yzg2
LzEvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVe3WMA0G
CSqGSIb3DQEBCwUAA4IBAQCzB4VTBFx8TC0RymZWoZspEdDYd1XKVkCsHWesciux
FCXI/M0zGpn6AefAuudzJWEhc3xy5oDCHWFVoOksq7/VuKCLrLT+2Bgz/Nzeyk35
TZuOpAHmEvHxdif1O4ELNnxz1s715K7JQfj/C+Pi3igg13LicNdgK2SjrKNktzE8
0k/nm6q7nP+m8mvVEjgUtfSi0BNs2oy5oOVnj/DEO3OgIHOfOD9sgUYHRC4r0rZc
wdYYA4im24vcMIH8r3NvYBm+WeX1NLS2aqRUNmvp0n5YmbkgqVpYhvuY5PZFzCcu
xY+65dnxF4+pDbRhhLt+/jE73Z2TzNMWd6MaCn/37uqP
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org