Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/bHBxYeNpwo-VNuralOjY94_3rX4.roa
File: bHBxYeNpwo-VNuralOjY94_3rX4.roa (raw, json)
Hash identifier: 9R990oYUMzne2JCC4c4eBNwZfEpojF93G862G0ld4eU=
Subject key identifier: 6C:70:71:61:E3:69:C2:8F:95:36:EA:DA:94:E8:D8:F7:8F:F7:AD:7E
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0184D25CFEE457FB07A3D142258DE3434DD1
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/bHBxYeNpwo-VNuralOjY94_3rX4.roa
Signing time: Fri 02 Dec 2022 10:23:40 +0000
ROA not before: Fri 02 Dec 2022 10:23:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211373
IP address blocks: 85.237.200.0/24 maxlen: 24
85.158.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:5c:fe:e4:57:fb:07:a3:d1:42:25:8d:e3:43:4d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Dec 2 10:23:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c707161e369c28f9536eada94e8d8f78ff7ad7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:03:e5:69:04:a4:de:de:38:4c:59:e7:73:00:
a2:69:e4:6b:54:a1:9c:9b:b6:4c:c6:9e:6c:1b:e0:
0d:3d:35:c3:5c:0d:28:57:67:b8:96:dc:c2:21:94:
05:13:45:72:73:80:2a:f6:55:da:fa:70:82:de:9a:
18:43:8d:92:24:0d:04:2a:56:98:7f:3d:0c:eb:a4:
23:6e:c7:8c:72:3c:03:57:68:7e:78:53:8e:df:bc:
d5:30:ce:89:3e:09:9e:e8:c3:43:c7:7d:3f:28:8b:
b5:1a:90:62:3b:b9:4c:fe:e5:3a:a0:e4:7e:ae:c1:
33:cc:27:b3:50:5b:d8:ee:ae:92:f3:8e:84:f3:74:
01:ab:a6:95:6a:7b:2d:84:85:a6:e6:18:24:a1:be:
7f:01:09:a5:64:d7:bb:e7:98:14:70:31:25:92:f2:
d4:4e:e3:1a:3a:3f:bc:2e:39:6b:8e:13:d7:0a:4a:
18:a0:48:33:f3:64:4e:84:d9:bf:23:ab:43:cc:a8:
5f:8e:d5:18:f7:15:37:13:1b:0e:70:e2:85:63:c6:
2f:c6:52:a4:d2:e4:c5:fe:d7:05:fc:ce:a1:f8:02:
7a:f3:fb:70:cc:8a:80:f9:3d:45:b0:45:75:9e:db:
3e:6f:f4:7b:09:89:0f:86:f1:6e:3d:ee:cd:e2:12:
48:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:70:71:61:E3:69:C2:8F:95:36:EA:DA:94:E8:D8:F7:8F:F7:AD:7E
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/bHBxYeNpwo-VNuralOjY94_3rX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.56.0/24
85.237.200.0/24
Signature Algorithm: sha256WithRSAEncryption
65:24:89:39:e7:cf:2d:50:5f:a2:35:0d:0d:73:9a:52:ce:f0:
a9:17:c4:a8:12:41:f4:c4:ae:f5:d8:37:ec:93:97:4c:29:4a:
fd:fe:51:21:b0:20:ee:62:09:46:2c:e1:62:12:a6:4f:1f:5b:
13:80:29:b2:fc:ca:b0:72:74:92:01:e2:dc:09:8d:6c:f2:7c:
79:f4:95:32:6c:5c:a3:2f:38:29:31:96:37:9c:ed:6c:40:cc:
fb:7b:9e:37:56:c7:a4:37:43:dd:30:fb:51:df:3b:1d:51:ae:
3a:95:de:f1:49:46:3f:0c:8a:41:b1:8f:ed:5f:e0:b0:1d:26:
f0:e9:ed:cb:d1:a9:e4:5e:52:d2:27:fb:63:99:eb:a6:af:cf:
b5:a7:1c:93:8b:25:ad:42:52:a0:4a:69:36:86:3a:da:78:24:
0d:f0:59:a3:e7:a2:48:ed:ca:e9:12:e6:e6:2e:ba:6c:89:9f:
9c:3f:98:fc:ed:21:2a:8a:1d:0e:c5:60:ab:80:9e:b8:b7:30:
c8:c0:a1:1f:32:c6:92:6c:16:ce:c9:dc:dd:a0:5e:29:5d:4c:
57:34:12:91:d6:27:c5:f9:49:8f:db:59:9e:28:e4:2f:47:fd:
a4:4f:ca:b1:e1:59:ef:45:9f:0f:29:d0:be:eb:5f:5f:55:61:
05:16:3e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org