Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/YLDl3Xn8itagH5I4A6AS-JwhztI.roa
File: YLDl3Xn8itagH5I4A6AS-JwhztI.roa (raw, json)
Hash identifier: Rg9PJwYjH44bgmqRT7p5c5IhJ3wA/0mA2PpfZw0VE5Y=
Subject key identifier: 60:B0:E5:DD:79:FC:8A:D6:A0:1F:92:38:03:A0:12:F8:9C:21:CE:D2
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018624641C966EB0CADCA89B4E4CF480BCB7
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/YLDl3Xn8itagH5I4A6AS-JwhztI.roa
Signing time: Mon 06 Feb 2023 01:43:05 +0000
ROA not before: Mon 06 Feb 2023 01:43:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 85.237.201.0/24 maxlen: 24
85.158.58.0/24 maxlen: 24
85.237.211.0/24 maxlen: 24
85.237.209.0/24 maxlen: 24
85.158.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:24:64:1c:96:6e:b0:ca:dc:a8:9b:4e:4c:f4:80:bc:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Feb 6 01:43:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=60b0e5dd79fc8ad6a01f923803a012f89c21ced2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:a3:55:97:55:d3:74:8e:e1:93:45:3d:02:
d0:8a:5c:ff:a4:db:52:c4:76:85:be:77:c4:62:e9:
89:7a:a5:01:fc:e6:dc:e3:98:30:6a:f2:9f:a5:5e:
99:93:3f:5f:6c:ae:20:0b:c0:1c:bb:2f:b4:2f:65:
b0:10:51:af:7c:f5:3d:75:c3:0f:2e:0a:d6:a9:f2:
88:f7:99:d0:c7:b5:0c:3b:02:99:88:01:08:90:cf:
a1:10:47:13:30:a9:17:9d:55:ea:a7:43:a6:66:ff:
39:70:1a:5e:16:65:48:ae:e1:69:66:44:4d:b7:94:
f6:0f:24:ba:7c:36:f4:f3:f0:16:88:68:0b:c6:91:
9c:b6:9c:21:17:4c:48:bf:6e:63:49:37:22:58:a3:
af:85:95:0c:88:1f:a4:fd:3b:e8:63:20:fe:53:b7:
2e:af:a3:05:3f:df:ea:e3:6b:ba:4a:43:73:c0:85:
a8:9a:dd:0b:34:db:cc:33:e0:e1:cf:98:ca:a2:c5:
d0:26:81:74:2b:1c:2b:df:5d:81:87:db:3c:f6:3c:
79:ba:e0:8c:b5:7b:e5:04:31:f0:63:8f:3f:86:41:
cc:96:46:79:55:1c:8e:02:f2:3c:ef:5b:be:d8:6e:
90:c9:54:da:e7:12:dd:32:87:e5:e5:10:f3:46:9e:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B0:E5:DD:79:FC:8A:D6:A0:1F:92:38:03:A0:12:F8:9C:21:CE:D2
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/YLDl3Xn8itagH5I4A6AS-JwhztI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.58.0/23
85.237.201.0/24
85.237.209.0/24
85.237.211.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0d:6e:2f:ae:df:77:2a:80:e9:78:b7:56:af:92:92:03:04:
a8:9e:54:1a:27:04:15:de:2d:f9:ae:4a:aa:8f:cb:05:ff:16:
e7:93:90:e7:6b:a5:9c:2e:cc:5e:e1:ac:27:89:3f:26:e2:c7:
14:d9:08:f6:f3:78:ba:4e:79:56:58:fb:0e:c7:9d:64:f6:21:
7f:86:61:b2:94:91:8e:2d:c5:14:cb:50:24:f5:6d:86:e3:87:
4d:00:58:94:3f:62:46:41:ed:9c:ba:f8:49:73:b2:7d:cd:a2:
d1:8e:f9:10:40:09:fc:be:b9:b2:81:34:f5:7e:7b:f3:7d:98:
93:b9:0b:2a:77:ce:d1:56:72:db:a8:ac:64:3e:66:67:f8:e1:
5b:0c:3b:de:5d:e2:c6:66:11:bd:83:c9:f0:26:93:4a:93:7b:
d1:0d:6c:3b:13:3d:dd:e6:d5:32:e1:e4:6c:f0:60:c1:c6:56:
a7:9b:21:b3:86:25:e8:aa:de:aa:3d:6d:97:46:52:4a:94:32:
f8:f9:68:77:ab:3e:7e:36:1f:65:38:b8:ee:7d:ae:7a:89:6c:
80:38:6f:a2:54:33:76:50:d5:3c:6e:62:c4:18:11:df:ff:e4:
6e:20:77:a8:89:54:26:13:d9:e5:ac:a7:1b:6a:ac:31:ed:4c:
e9:91:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org