Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/hAXDo3UtK3d-4c0sQonxBVx6ETI.roa
File: hAXDo3UtK3d-4c0sQonxBVx6ETI.roa (raw, json)
Hash identifier: q8Qa4Zx6phwVBKJsa1oT8mBDtJPqFFSgUbQcVGZv1HE=
Subject key identifier: 84:05:C3:A3:75:2D:2B:77:7E:E1:CD:2C:42:89:F1:05:5C:7A:11:32
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01880FCA2247F3C290FF59AEE234CD0A7640
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/hAXDo3UtK3d-4c0sQonxBVx6ETI.roa
Signing time: Fri 12 May 2023 11:48:05 +0000
ROA not before: Fri 12 May 2023 11:48:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
85.237.201.0/24 maxlen: 24
85.237.202.0/24 maxlen: 24
85.237.216.0/24 maxlen: 24
185.93.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:ca:22:47:f3:c2:90:ff:59:ae:e2:34:cd:0a:76:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: May 12 11:48:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8405c3a3752d2b777ee1cd2c4289f1055c7a1132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:be:91:a2:06:ba:f5:09:4c:92:3c:56:fe:
fb:5f:6d:fd:7b:aa:3d:73:9c:81:d1:92:d5:c2:fd:
32:48:4b:6c:6e:2a:0e:c6:01:51:6c:ea:85:57:7e:
2e:40:ca:78:9d:a7:9d:37:d7:be:10:8f:e6:ee:f7:
35:56:7b:83:e8:b3:5d:e6:a7:3a:ba:f1:b0:ca:cf:
16:0f:07:b6:e6:8d:46:1a:9c:fc:bd:9c:43:e1:c3:
cd:59:fa:5e:73:bb:22:ae:24:f6:6e:af:53:e5:d3:
43:3f:99:52:c8:e5:84:37:47:86:f9:45:6b:8c:e8:
ef:19:5d:57:fd:11:71:fa:fd:11:a3:03:ab:64:bc:
cb:64:64:b2:8c:22:8b:36:1b:7b:b3:91:68:78:0e:
8e:8f:a3:fd:49:0d:70:85:9c:f9:37:22:98:17:64:
45:d1:bb:1a:0a:d1:bb:15:3a:43:11:cb:f0:b3:e9:
ed:1e:79:68:10:0b:cd:0a:37:bb:95:13:8f:04:8b:
85:54:87:2f:5d:5e:e8:92:47:15:18:d1:1d:ce:61:
5c:e7:4b:71:7a:2a:2e:8a:41:bf:ac:ea:f6:f0:28:
37:42:35:e4:fe:e9:74:27:2a:61:bb:a5:b4:eb:4d:
ab:7b:5d:9b:5c:7c:78:6f:51:44:55:ff:a9:bb:a2:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:05:C3:A3:75:2D:2B:77:7E:E1:CD:2C:42:89:F1:05:5C:7A:11:32
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/hAXDo3UtK3d-4c0sQonxBVx6ETI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.201.0-85.237.202.255
85.237.216.0/24
185.93.35.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:92:8c:be:74:fb:a0:b3:b4:f2:32:06:a1:76:55:6f:51:34:
cc:5b:ca:50:fb:91:40:82:e8:2d:0b:3c:c1:b6:bc:4e:85:6a:
52:c9:a2:01:7c:35:bb:eb:8e:13:aa:2e:90:d9:ed:2f:8e:10:
7a:1a:5c:a7:58:7d:69:de:b3:c0:29:8d:1b:d0:25:3c:b0:38:
81:08:fb:5b:5f:50:d4:fc:c7:e3:53:f4:4e:4c:c1:41:d7:1f:
89:e4:a4:27:fe:3c:04:da:01:09:bb:b8:c4:98:b9:91:b6:f6:
af:08:ea:a9:56:ef:6a:e8:ec:a4:28:a6:3b:aa:f9:78:02:74:
6e:1f:ac:39:d8:29:b6:cd:cf:9b:24:e6:eb:08:1a:8b:8d:bb:
31:ad:74:2c:78:24:de:23:52:2f:d7:07:7f:f8:83:af:87:f1:
2b:6a:6d:59:45:dd:a9:a8:f1:36:42:b7:f0:fc:db:a1:21:06:
f7:ff:7a:91:9e:25:bd:ca:a3:73:90:45:1b:13:bc:a1:cc:5f:
36:01:e2:1d:15:b0:c8:f6:88:c6:8a:0f:34:b3:08:af:55:71:
f2:05:0b:e3:5b:5e:f8:2a:88:4d:10:5e:cd:57:00:4a:bf:a0:
51:09:5a:af:0d:f7:60:83:bb:24:01:14:91:ff:2b:c3:69:9c:
16:1a:64:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org