Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/n5KEDQUOUSr_N-hOkdKIHIdeyD0.roa
File: n5KEDQUOUSr_N-hOkdKIHIdeyD0.roa (raw, json)
Hash identifier: O0H7p9B5mreX2ozy/m5y5s2DG6FC9MAdnTgzo88FH2Y=
Subject key identifier: 9F:92:84:0D:05:0E:51:2A:FF:37:E8:4E:91:D2:88:1C:87:5E:C8:3D
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01880FC1F5F69AAD23F039DB42D31E1C5F93
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/n5KEDQUOUSr_N-hOkdKIHIdeyD0.roa
Signing time: Fri 12 May 2023 11:39:09 +0000
ROA not before: Fri 12 May 2023 11:39:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 85.237.211.0/24 maxlen: 24
85.237.209.0/24 maxlen: 24
85.158.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:c1:f5:f6:9a:ad:23:f0:39:db:42:d3:1e:1c:5f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: May 12 11:39:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f92840d050e512aff37e84e91d2881c875ec83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:e6:95:05:06:c4:82:47:3c:25:52:eb:85:
d2:b4:b8:4a:19:e3:9f:28:bc:a8:7e:a8:5e:72:b3:
0f:ba:b0:d8:61:14:da:b1:ca:8e:78:67:69:c3:81:
6d:e7:e2:f7:a6:e2:f3:42:32:da:ac:cc:b0:b1:80:
82:d4:d3:8b:ca:cb:c3:75:31:f7:a5:b5:46:35:a4:
69:fd:e8:45:a9:64:24:8f:f8:4b:66:58:d8:ac:a0:
63:9e:c2:70:b5:de:99:e5:7d:60:a6:af:47:d0:84:
99:e7:73:05:b1:b2:3d:25:f8:7f:74:70:03:6d:4f:
bf:20:b5:6d:ed:a3:41:03:da:fd:76:ce:a2:f7:ed:
ad:1a:42:92:61:0d:3b:d4:8e:49:98:9d:4e:63:19:
1d:ae:9b:88:86:53:14:9c:ec:50:59:20:5f:1a:66:
e1:61:8a:d1:80:27:a5:f6:f4:be:b5:cc:50:a5:d4:
c0:fa:ee:b0:01:2f:d4:1f:d0:a3:29:6f:f9:1f:2c:
34:ad:a8:e6:e9:33:47:28:b5:83:2f:23:3a:56:8f:
c6:6d:41:f6:33:5d:61:50:d6:18:b7:7f:5b:09:ef:
af:e6:5a:e0:bf:ee:14:86:e8:01:9a:a8:8e:8b:1a:
ff:03:19:c6:b5:e3:a6:69:14:09:35:ce:c9:b6:73:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:92:84:0D:05:0E:51:2A:FF:37:E8:4E:91:D2:88:1C:87:5E:C8:3D
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/n5KEDQUOUSr_N-hOkdKIHIdeyD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.59.0/24
85.237.209.0/24
85.237.211.0/24
Signature Algorithm: sha256WithRSAEncryption
46:25:db:16:43:16:62:7a:99:b3:95:bf:08:a1:f5:66:41:02:
e8:a7:b2:65:93:6f:20:a7:7d:67:f1:97:50:67:29:8d:67:45:
a0:be:60:c1:28:1c:1b:b8:a4:86:9c:f3:f6:59:3f:7c:5b:b2:
ab:51:cb:37:8c:88:8b:ad:0b:a2:bb:9d:a8:80:66:be:68:f1:
25:c9:a8:1a:87:b5:07:03:c2:b5:2d:53:f2:08:57:3a:f8:bd:
39:f7:37:28:b5:67:c3:22:b2:7a:5c:72:35:40:61:27:06:f0:
52:f6:00:0d:69:a7:e5:1c:8e:54:78:fb:94:bb:6d:64:ea:08:
1f:9b:fa:7b:1c:e1:99:e4:d0:71:47:bc:ec:99:8a:40:42:c9:
7c:32:d7:67:26:1f:13:6b:99:3c:5f:da:99:69:e0:8f:7a:55:
20:43:6b:ef:4c:d3:80:b9:c6:0f:b5:95:7d:a3:b1:ff:50:64:
06:77:00:35:cf:90:b5:ca:12:53:a6:e3:e0:0b:53:d4:13:c3:
e5:32:53:95:00:1f:a4:5f:7d:64:5b:8a:00:07:3d:ed:54:3d:
a8:b0:35:a2:d7:8c:97:50:bc:af:24:4d:27:57:7f:cc:92:1d:
f9:f5:8b:65:5d:78:4b:78:cc:23:64:24:8c:29:17:c7:39:5e:
11:d9:36:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org