Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/svCLSMqjDMaCxQgHsfmu0W2NDUY.roa
File: svCLSMqjDMaCxQgHsfmu0W2NDUY.roa (raw, json)
Hash identifier: iQGVTRiU8gIwcV+EHxeILpta/jn+sq2gOs8307iJnjI=
Subject key identifier: B2:F0:8B:48:CA:A3:0C:C6:82:C5:08:07:B1:F9:AE:D1:6D:8D:0D:46
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DE9D73A074B6D265BF87AAA80D44E1
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/svCLSMqjDMaCxQgHsfmu0W2NDUY.roa
Signing time: Mon 02 Jan 2023 09:44:52 +0000
ROA not before: Mon 02 Jan 2023 09:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 85.237.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:9d:73:a0:74:b6:d2:65:bf:87:aa:a8:0d:44:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2f08b48caa30cc682c50807b1f9aed16d8d0d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:37:aa:55:c1:0e:e8:95:e1:5e:45:76:0c:6a:
da:ee:42:03:80:d2:12:91:6f:43:73:9e:a6:07:6e:
53:0f:70:08:69:b7:a7:b7:d5:9d:46:1d:b3:e3:d4:
6e:96:59:0e:03:01:b5:ce:ed:dd:14:8b:bd:a7:81:
99:7d:37:bc:59:51:56:7b:c9:0c:7f:1c:76:58:51:
69:a3:fb:e3:14:f7:aa:a3:69:35:ee:4e:e5:b3:ae:
bc:90:91:a6:ad:45:28:f5:23:ec:79:b2:2e:f9:2c:
bb:90:ff:e5:d0:3c:99:1a:b0:45:76:86:03:d5:8b:
07:2c:0c:c3:90:55:33:b6:ce:74:33:cb:99:b1:b5:
c6:77:8f:41:e3:8c:74:16:b8:f9:f1:e6:b7:78:b0:
68:b5:d8:af:6b:b3:5e:e2:37:60:14:7d:0c:a9:9b:
52:4a:06:68:fb:c7:d6:63:2d:ab:47:62:ff:e0:c4:
57:d6:d2:18:33:af:cc:bf:ca:35:71:06:05:fa:60:
d0:95:87:1c:2d:1c:db:c7:b3:35:2f:75:ab:b6:7b:
d8:76:9d:f5:82:0a:cd:13:61:a7:61:0c:ba:fa:7d:
2e:84:6b:55:81:4f:5f:d8:af:3c:e6:87:0b:06:b7:
3f:6e:6f:bd:be:88:c8:b4:6a:8d:19:b9:99:bd:79:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F0:8B:48:CA:A3:0C:C6:82:C5:08:07:B1:F9:AE:D1:6D:8D:0D:46
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/svCLSMqjDMaCxQgHsfmu0W2NDUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.201.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:2a:70:72:0b:e6:a7:cb:94:03:bd:22:ff:74:c8:e9:95:08:
97:b7:92:be:e9:f6:77:23:ae:4d:8a:2d:b0:53:ee:84:75:0f:
cb:db:19:3d:2d:00:d5:a1:01:56:11:43:f9:f6:d3:3f:e5:21:
8a:ee:26:6f:a8:c2:2b:e9:b8:95:5d:84:07:5b:9c:4a:8f:3b:
03:13:05:17:69:d0:1a:96:88:aa:03:1a:38:e9:93:3d:69:8c:
d7:5a:91:ca:0f:b2:70:e5:85:22:2a:f5:4d:6e:18:88:79:ce:
a6:b0:35:c7:6c:b4:34:ed:5f:c3:e8:b4:a5:d5:fe:70:12:82:
d6:5d:21:51:2c:ec:bc:d2:6c:2a:ec:2b:cd:63:54:97:4e:73:
22:2b:19:a7:35:2d:51:d0:e9:71:c6:aa:9e:dd:a8:04:95:b5:
01:6d:62:6f:1f:00:62:b8:c7:a4:16:bb:b2:9f:05:51:32:af:
c4:37:34:85:e5:06:13:52:4c:71:39:96:6a:23:a0:b6:6e:cb:
72:d1:9a:e2:84:9e:00:9a:18:7f:70:28:49:9f:6e:c5:df:80:
38:94:a2:ce:57:b1:0a:7c:c6:5f:3b:d4:3a:4b:5d:16:2e:d4:
35:15:8e:8f:ab:ab:ee:3b:81:0a:c1:a9:a6:50:96:0c:1f:23:
e8:86:33:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:08 2023 by rpki-client on console-ams.rpki-client.org