Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/jfsttW-sJr8qIP7X7RJ07d_RTHE.roa
File: jfsttW-sJr8qIP7X7RJ07d_RTHE.roa (raw, json)
Hash identifier: /e8rJX4MUGcr0hO9DbzXJQjuFx7SB03xsY1S8mSINco=
Subject key identifier: 8D:FB:2D:B5:6F:AC:26:BF:2A:20:FE:D7:ED:12:74:ED:DF:D1:4C:71
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DEA2EE840F41499C7B55C35A08FEC7
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/jfsttW-sJr8qIP7X7RJ07d_RTHE.roa
Signing time: Mon 02 Jan 2023 09:44:54 +0000
ROA not before: Mon 02 Jan 2023 09:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397630
IP address blocks: 85.237.213.0/24 maxlen: 24
185.93.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:a2:ee:84:0f:41:49:9c:7b:55:c3:5a:08:fe:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8dfb2db56fac26bf2a20fed7ed1274eddfd14c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a1:09:6b:85:87:5b:df:f2:35:69:5a:51:34:
77:0a:a2:c0:d9:e9:55:c0:09:d5:6f:84:be:3c:26:
da:03:ce:3f:de:29:4a:22:8a:6b:09:f9:e3:e5:a3:
68:70:c5:7c:4c:fd:c8:7b:7a:8c:0a:ed:41:e8:82:
f2:90:1a:c7:0b:03:0c:1c:5e:a1:6d:38:49:2b:8f:
6e:8e:5c:a3:88:0b:59:68:24:9c:b4:56:e0:dd:9c:
a7:19:6f:48:50:72:ea:a3:e1:62:64:2d:31:aa:db:
ea:eb:b1:2a:b9:5a:ff:97:17:2a:89:ca:92:82:00:
86:59:b2:af:ab:33:21:36:79:a7:2e:bc:d2:f7:8e:
fe:7b:d3:f4:9c:17:3a:78:e6:01:66:4e:91:8c:05:
7a:4d:16:ec:30:51:9c:a7:b2:0c:c9:cd:fe:9a:26:
ae:cd:31:52:d2:18:54:27:f8:c0:fb:fb:3d:f4:41:
87:01:4b:02:2f:55:67:f8:c9:1e:b0:ac:6e:31:52:
6e:be:c7:e3:e5:b6:88:25:5b:ef:dd:d0:91:cd:02:
ef:c0:b6:58:ef:67:e9:df:1d:5d:e4:55:fc:0d:d2:
16:0e:87:64:45:97:af:bb:52:b6:d5:34:de:ed:05:
0b:f8:b8:36:f3:fe:1a:ae:b1:c5:44:b8:21:18:95:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FB:2D:B5:6F:AC:26:BF:2A:20:FE:D7:ED:12:74:ED:DF:D1:4C:71
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/jfsttW-sJr8qIP7X7RJ07d_RTHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.213.0/24
185.93.32.0/24
Signature Algorithm: sha256WithRSAEncryption
74:9c:b6:c6:ed:07:2c:a4:8b:3e:26:10:d6:fb:94:03:de:a6:
f7:a3:d5:fe:e5:f8:2f:3f:6e:e4:96:13:39:96:a0:54:f4:31:
f7:4b:9c:03:f7:a2:25:a6:df:4c:a2:a0:e0:c2:e8:d6:07:54:
b3:58:c2:26:6f:a0:0d:3f:50:b8:ab:e5:92:e5:99:24:65:1b:
73:84:5e:fd:f0:0e:9e:06:68:17:57:58:22:b6:bb:0a:91:2f:
97:28:a2:23:5f:54:77:72:0c:0e:d0:9a:b0:01:6b:4d:57:a9:
37:04:8b:b5:06:f4:cf:06:be:07:35:98:77:87:79:6f:51:72:
f6:50:03:94:d2:10:92:4d:61:9d:19:f1:dd:b4:c3:d9:ef:6d:
f5:14:85:0d:d5:8f:be:58:03:93:e8:89:c7:2d:24:3f:e6:71:
27:9c:39:e7:52:d9:27:47:7a:40:88:44:a2:b5:a4:91:2e:2e:
d1:81:92:85:3a:64:84:01:69:32:bf:18:fb:33:71:fd:e4:19:
39:dc:99:a0:76:dc:be:69:03:bb:9c:cc:6b:5c:7e:e6:e9:29:
8d:38:44:a5:5e:a3:24:ef:65:f5:99:66:78:08:a2:c3:59:4a:
44:14:61:26:15:d3:85:12:d3:61:5f:9e:86:94:05:a5:15:2a:
ba:ef:47:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org