Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/eqpzfcNiwirwNEQxe5u48wAqqMY.roa
File: eqpzfcNiwirwNEQxe5u48wAqqMY.roa (raw, json)
Hash identifier: N9m3T2gFJvVfxmt46peuSXYLyRAQsqta6qfr8NXtHPI=
Subject key identifier: 7A:AA:73:7D:C3:62:C2:2A:F0:34:44:31:7B:9B:B8:F3:00:2A:A8:C6
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0185184FB81963146132AA0886737CDAC5F0
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/eqpzfcNiwirwNEQxe5u48wAqqMY.roa
Signing time: Fri 16 Dec 2022 00:22:35 +0000
ROA not before: Fri 16 Dec 2022 00:22:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210439
IP address blocks: 85.158.58.0/24 maxlen: 24
85.237.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:18:4f:b8:19:63:14:61:32:aa:08:86:73:7c:da:c5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Dec 16 00:22:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7aaa737dc362c22af03444317b9bb8f3002aa8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:37:b3:37:cc:08:88:76:64:13:4b:7f:a6:
57:36:5b:7d:08:5f:c0:9e:13:d9:9c:78:24:54:2d:
8e:8e:7d:3c:13:12:46:7d:e8:db:af:12:51:f7:04:
e6:a2:4b:ba:b0:7c:93:c1:37:9c:97:77:02:e1:85:
8a:55:a6:0e:f6:42:39:d9:0a:ab:95:a8:37:9b:42:
93:82:aa:bf:e4:73:4f:89:91:05:3a:50:b0:2a:49:
b0:07:72:45:21:4a:12:f8:1f:4c:de:72:a8:d8:c1:
b2:5f:34:6d:2b:b4:4f:6b:e0:a4:22:e8:4c:ec:02:
63:2b:c9:f8:45:04:1b:da:8a:d7:63:02:99:49:1b:
52:d7:3d:14:dd:5a:25:a0:84:18:7f:e0:20:58:08:
c0:42:7e:8a:72:a0:14:84:ac:da:5e:f4:d2:05:37:
76:ec:6d:46:4e:0f:77:fc:ff:3f:2e:ef:b8:20:19:
e3:84:7d:f7:b0:a4:86:7c:a9:bc:55:b5:f8:0b:de:
9f:82:74:8a:b9:73:f0:1e:9c:3f:5d:19:ab:b8:7f:
4e:fb:b7:bc:71:75:c7:57:28:96:07:29:05:3a:46:
e8:4f:1b:72:33:d8:92:d5:75:61:00:10:1d:b8:1c:
2a:7d:3d:79:3f:0a:ef:b1:28:9d:6c:77:cd:5a:18:
d0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AA:73:7D:C3:62:C2:2A:F0:34:44:31:7B:9B:B8:F3:00:2A:A8:C6
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/eqpzfcNiwirwNEQxe5u48wAqqMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.58.0/24
85.237.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:09:17:d7:5b:7d:ac:f8:c2:00:32:c3:b0:42:68:e5:d6:6a:
6f:c5:de:48:2c:85:50:66:3d:35:2c:ec:16:55:90:73:20:2c:
8a:cd:a0:dd:1b:83:10:13:56:aa:bd:3e:0c:01:75:c6:ec:2a:
b2:72:2a:cd:05:f9:df:ca:7f:3a:83:36:18:0b:b8:c1:60:cd:
30:af:75:a4:2e:15:56:b3:e6:ec:3e:89:be:80:e0:f5:05:5d:
47:23:ce:f5:ca:4c:d3:5d:de:51:03:de:64:a3:03:1f:08:d1:
65:ae:32:02:35:b1:25:5d:86:55:80:91:bc:80:c7:f4:58:98:
34:c4:fb:a0:79:fc:d6:c2:d0:85:b7:0e:40:17:29:b2:49:7d:
4c:78:5c:28:e9:2e:8c:53:d5:76:94:da:19:a6:73:f8:bd:a2:
5b:4e:91:9a:0c:47:18:2d:68:34:ac:1b:89:2e:28:ac:22:84:
bf:38:ba:19:87:13:3b:84:b0:22:3f:b8:f5:a6:e8:7a:1e:b0:
d5:9a:f2:cc:09:1f:43:16:7e:95:38:31:79:70:26:a5:98:96:
9f:f2:2a:ae:08:74:0f:ea:db:20:79:30:53:ef:92:94:cf:b6:
78:4f:14:d1:63:d9:cd:68:76:ff:ef:a9:96:dc:0e:09:a2:f6:
42:67:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org