Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/h_sQTTH_VCXfJeOvaVeag934QoI.roa
File: h_sQTTH_VCXfJeOvaVeag934QoI.roa (raw, json)
Hash identifier: gJEncTwg81esZstXjlYjX1Eemoau1USfFeQJThY+Wsk=
Subject key identifier: 87:FB:10:4D:31:FF:54:25:DF:25:E3:AF:69:57:9A:83:DD:F8:42:82
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0185A1EE4293B25A9486DEB41C183EEC54FB
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/h_sQTTH_VCXfJeOvaVeag934QoI.roa
Signing time: Wed 11 Jan 2023 17:43:44 +0000
ROA not before: Wed 11 Jan 2023 17:43:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 185.93.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:ee:42:93:b2:5a:94:86:de:b4:1c:18:3e:ec:54:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 11 17:43:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87fb104d31ff5425df25e3af69579a83ddf84282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:b4:25:7e:dc:39:0e:ae:13:e9:1c:a6:26:
ed:fd:1a:5f:16:e8:a0:e6:08:67:30:2e:63:47:66:
9e:15:df:5a:67:df:83:23:c8:b2:48:39:3b:d2:40:
72:8c:64:bb:ca:83:93:28:bd:2b:c7:ba:26:12:ca:
a1:32:0c:37:84:44:bd:da:e9:5d:bc:bc:33:22:63:
0d:de:cf:c2:b2:be:40:42:b5:f8:d0:6c:81:91:73:
3a:47:38:ff:22:1f:f2:35:99:ed:da:e2:03:70:7f:
63:8a:d0:69:5e:05:18:f7:f6:4e:1c:d6:4c:58:e3:
cd:c4:22:c5:9a:41:59:8c:be:c1:0e:4e:28:81:1c:
32:24:35:28:e2:f7:0e:94:ff:5c:ea:66:88:be:9e:
50:38:c6:86:bb:8c:a8:56:1d:44:3e:67:0f:6e:86:
ca:11:b3:60:97:57:09:27:2a:a6:30:12:c0:a9:26:
45:b8:55:a1:e8:9b:01:fb:7f:32:88:42:44:5e:08:
20:ef:26:ae:93:b3:c1:f1:fe:a1:5b:dc:1f:e6:7e:
4a:15:07:e4:fd:f7:94:49:05:86:50:0e:64:12:81:
fb:db:5a:83:ae:95:8b:1c:f0:67:f7:5a:0d:88:5c:
85:73:e0:cf:6e:f9:ea:9d:fd:4b:2d:8c:01:81:24:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FB:10:4D:31:FF:54:25:DF:25:E3:AF:69:57:9A:83:DD:F8:42:82
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/h_sQTTH_VCXfJeOvaVeag934QoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.35.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:8c:ab:e3:c4:12:6b:fb:3f:f1:b0:b4:74:d9:4e:8c:96:07:
92:87:fd:f8:db:68:39:72:c3:d2:0c:e0:a2:0b:30:42:92:8c:
d5:f6:88:9c:5d:7d:49:89:48:b9:3a:67:02:ac:f3:6d:cf:2e:
6e:f9:5b:01:92:de:93:cd:bb:57:3c:a5:67:e7:b2:c5:08:c1:
d9:e6:02:e7:4e:03:ba:08:0a:ea:d8:3a:cc:fb:bc:b6:57:bd:
c0:df:bd:b6:12:6d:85:e6:18:e3:9f:d0:a6:e6:6f:6d:7e:95:
e8:d5:28:09:14:50:ed:28:75:52:20:40:1d:7d:14:01:b6:0f:
a3:41:87:b1:37:41:c6:0a:8b:9c:e0:94:ad:44:52:f4:5d:fe:
3d:70:98:0f:3f:64:42:e4:da:d5:47:5a:be:62:b5:fd:94:ff:
77:f9:af:fa:65:51:03:f9:35:7b:9f:f4:ee:5f:55:ab:5e:06:
a4:18:2a:25:ed:9e:74:86:1d:63:0b:95:a4:d6:e6:11:0f:bb:
e3:e3:9c:7f:ee:67:71:d2:f9:c9:8a:e1:9a:fd:c7:a0:9d:75:
44:00:d8:f5:23:75:d6:48:fc:02:f5:b2:39:b2:92:4b:d6:f6:
28:5f:8d:da:34:4b:27:54:60:f1:68:ba:cb:25:a2:a2:4f:73:
52:67:78:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org