Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/iXMf2BFSl3ZSpRcFbyHCJI_xnWM.roa
File: iXMf2BFSl3ZSpRcFbyHCJI_xnWM.roa (raw, json)
Hash identifier: Ilsdm5XbmL+ZGfcbukBwMRPyiNgYJ4vweEi8s3CdLY0=
Subject key identifier: 89:73:1F:D8:11:52:97:76:52:A5:17:05:6F:21:C2:24:8F:F1:9D:63
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DE954B1566F6568749F36580D073B3
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/iXMf2BFSl3ZSpRcFbyHCJI_xnWM.roa
Signing time: Mon 02 Jan 2023 09:44:50 +0000
ROA not before: Mon 02 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 85.237.199.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.158.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:95:4b:15:66:f6:56:87:49:f3:65:80:d0:73:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89731fd81152977652a517056f21c2248ff19d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:eb:5f:6b:28:64:fa:6d:c6:85:e2:cf:87:
6b:81:f2:25:42:dd:02:e3:09:9f:dd:26:ea:f4:38:
dc:06:3d:88:bb:27:e0:19:1f:fc:ae:f5:af:ce:9b:
da:82:b9:d0:71:35:5b:c0:27:7b:ef:be:f2:e8:eb:
05:ba:06:e0:2d:c4:8a:59:9c:62:65:99:cc:9c:56:
8e:b1:31:ce:de:c5:4b:3c:c2:ec:96:b4:30:7c:47:
28:58:ec:24:f1:f6:e1:f9:3b:04:86:2c:ef:d9:dc:
4a:fc:95:4b:c0:fb:e5:f9:ac:12:ea:0b:3a:c7:06:
c4:95:1b:ef:c7:b2:d5:0b:df:62:6a:00:82:81:f3:
eb:c8:85:df:ef:d8:97:5a:06:51:ef:6f:af:ee:4e:
d6:4d:4f:24:a1:82:24:bc:c4:ab:b4:3f:a4:f9:2d:
57:9d:eb:d9:41:21:c6:3c:69:e8:fe:4a:8e:04:41:
35:a0:92:27:1a:c8:63:7d:49:b4:55:a1:b9:fa:68:
da:cf:ac:f2:7e:75:64:58:31:aa:03:98:d5:1b:d0:
a4:a1:92:da:e6:40:b2:fb:db:3a:12:fe:99:bd:e9:
ed:3c:6a:79:68:29:94:08:ee:4c:e2:90:b1:28:0a:
75:9a:0a:f4:02:44:a2:b6:7e:28:22:d0:05:fa:b8:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:73:1F:D8:11:52:97:76:52:A5:17:05:6F:21:C2:24:8F:F1:9D:63
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/iXMf2BFSl3ZSpRcFbyHCJI_xnWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
85.158.62.0/24
85.237.199.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:43:12:9f:f0:35:fe:21:c0:c2:93:65:e8:c4:92:a7:25:82:
14:5f:40:dd:16:7d:f4:4d:0d:eb:82:aa:d0:07:e2:a4:e6:43:
a4:cd:62:02:67:58:37:ca:94:62:32:ee:ce:32:ec:8a:59:9d:
e5:fb:59:9e:32:49:ed:fe:94:ee:7e:9e:05:a4:c8:bd:2a:ed:
0d:0a:f2:66:2a:90:50:c8:e4:cd:44:81:96:f7:15:5c:ca:35:
e8:99:99:56:24:ae:ba:5d:46:71:9c:64:c9:3d:60:09:66:64:
12:17:ca:8b:ad:8e:4a:68:10:b4:9c:52:c8:dc:79:de:f6:57:
42:d1:56:1e:79:2a:30:6a:25:a4:1c:c5:78:50:69:30:71:fd:
86:02:05:23:22:d8:78:89:e2:5d:2a:47:b3:c9:d1:15:63:e3:
56:50:ba:bd:9c:d7:74:8c:45:ca:65:85:2a:40:f6:b8:e0:3c:
ad:3f:a4:0d:db:42:fe:a0:b8:d6:df:c6:13:f5:5c:83:20:16:
84:08:5b:a0:4b:6b:46:b4:3b:65:0c:a5:d8:fc:f3:31:94:76:
f6:cf:1d:b7:73:b4:d3:b0:ff:d6:9d:8e:47:62:f9:ea:25:22:
f4:bd:8b:23:47:3f:5d:2c:73:23:5f:7e:32:c3:70:b6:66:ff:
fc:5a:41:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org