Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/fuY_rt0bPVHFJt156UX128kRzuI.roa
File: fuY_rt0bPVHFJt156UX128kRzuI.roa (raw, json)
Hash identifier: gn7KGaPJDdB5/l1HL/p+LSNRM/JlNVCaq5pZBowScdY=
Subject key identifier: 7E:E6:3F:AE:DD:1B:3D:51:C5:26:DD:79:E9:45:F5:DB:C9:11:CE:E2
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01850EF0148C9D47839AE90917F02ACD6C21
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/fuY_rt0bPVHFJt156UX128kRzuI.roa
Signing time: Wed 14 Dec 2022 04:41:32 +0000
ROA not before: Wed 14 Dec 2022 04:41:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 85.237.202.0/24 maxlen: 24
185.93.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0e:f0:14:8c:9d:47:83:9a:e9:09:17:f0:2a:cd:6c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Dec 14 04:41:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ee63faedd1b3d51c526dd79e945f5dbc911cee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:09:3b:ca:d1:0f:8a:97:6e:1a:b3:5e:d7:8c:
7b:85:ac:e9:88:99:3e:ce:f9:77:2f:25:0b:8c:50:
25:1e:77:c0:89:e6:cb:67:26:83:4e:04:a4:c3:5c:
11:11:e6:10:02:d8:77:9d:5a:ff:52:a1:86:e1:b5:
50:a0:7e:51:e4:05:27:67:20:38:07:50:01:87:a6:
0d:78:cc:b6:3a:a9:63:60:d8:c2:62:17:f8:cf:95:
6d:9e:e8:bb:2e:34:09:f9:aa:3e:58:3d:34:5d:10:
4a:81:76:6b:ad:b9:ad:8b:e5:a8:28:3b:36:66:ee:
60:80:5d:dd:47:cc:28:2b:60:d6:b4:f8:b9:f4:db:
54:07:30:56:09:8d:bd:dc:8e:b7:7b:bc:95:0f:fa:
5e:5e:17:cc:e0:e5:a5:c9:70:ff:c9:d2:e8:35:d3:
e0:75:05:1c:51:cf:3f:32:f1:1e:2f:d7:ec:55:b2:
48:b0:a6:2f:12:4a:e1:78:f5:bb:f8:57:26:4f:8c:
b8:7c:4d:e2:6c:30:f5:40:b5:9a:78:d7:85:17:ab:
7d:ec:ea:4a:e5:ee:2e:25:01:51:f0:c7:82:2f:1e:
ea:9c:8d:92:52:56:4f:26:60:bb:ee:30:5e:45:ca:
f5:c7:fb:4e:f0:cd:2b:09:bf:46:43:ee:eb:e4:55:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E6:3F:AE:DD:1B:3D:51:C5:26:DD:79:E9:45:F5:DB:C9:11:CE:E2
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/fuY_rt0bPVHFJt156UX128kRzuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.202.0/24
185.93.35.0/24
Signature Algorithm: sha256WithRSAEncryption
23:7e:64:13:87:32:d4:cb:cb:8a:47:bc:3e:8b:36:df:33:e8:
d7:38:7c:6d:46:57:23:38:7f:68:e0:4b:6d:d0:b3:bb:7d:d1:
4c:40:1f:56:2d:6a:6a:29:46:89:bf:d3:43:b1:c2:51:7e:3d:
49:36:be:8a:c1:2c:14:76:23:8b:13:92:9e:6c:fa:b7:79:37:
84:40:f5:8f:c6:61:b2:70:07:f5:88:ee:d0:a9:72:f2:d8:ba:
5a:e7:1c:90:7c:26:a6:32:b7:21:cd:b7:c8:7a:b2:74:cc:e3:
3b:a9:aa:83:78:ba:e5:50:d0:ea:f8:ff:88:e9:18:08:15:6a:
23:54:1f:5a:b8:23:fa:d2:e2:59:df:11:0a:21:c7:10:6e:df:
a4:8e:f6:36:be:4b:41:c5:5b:80:18:07:f1:c7:0a:51:21:b5:
ff:0f:9e:78:86:b5:a8:9f:56:58:36:20:3d:77:b7:05:35:4a:
fc:b3:f8:61:9c:18:83:ba:b3:9a:a1:6a:4a:c2:d7:62:be:12:
2c:19:e7:b3:44:39:af:b0:b5:4e:a1:e4:90:86:29:b0:b1:17:
58:b4:f5:d4:a0:6e:cb:e4:f1:2a:ba:4a:b0:8f:57:ec:5e:78:
2f:ba:40:8b:1b:3c:ab:f9:33:31:ef:6a:1e:87:12:38:29:b1:
e0:57:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org