Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/uTePE-9uKD80E1B4p_Y4_9XBias.roa
File: uTePE-9uKD80E1B4p_Y4_9XBias.roa (raw, json)
Hash identifier: JLSnEkW6pIuk0sVDFryF/DzE4Hy20T8bRIUz1m1UBhE=
Subject key identifier: B9:37:8F:13:EF:6E:28:3F:34:13:50:78:A7:F6:38:FF:D5:C1:89:AB
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DE99CFF1FBB9A1355932138ACE8AA9
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/uTePE-9uKD80E1B4p_Y4_9XBias.roa
Signing time: Mon 02 Jan 2023 09:44:51 +0000
ROA not before: Mon 02 Jan 2023 09:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 85.237.211.0/24 maxlen: 24
85.237.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:99:cf:f1:fb:b9:a1:35:59:32:13:8a:ce:8a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9378f13ef6e283f34135078a7f638ffd5c189ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:81:71:c5:c8:75:b8:fe:fc:fa:70:6b:e6:
28:4c:42:9c:63:c6:25:1d:4d:f1:9d:58:d7:87:10:
93:93:c7:de:8b:31:df:ad:eb:50:f6:b2:88:0c:db:
0d:0d:58:01:e5:85:02:3f:c7:58:51:a1:6b:cf:ce:
fa:45:c9:4f:e6:bc:b8:9a:07:63:17:a9:81:a5:a2:
70:c3:3d:cd:12:3f:f6:21:e1:01:48:fc:a0:d3:04:
52:34:82:47:72:6f:03:14:69:11:41:ba:82:b0:32:
40:72:d2:69:bd:a6:86:d9:df:dc:8b:cb:62:c4:4f:
58:69:78:81:6e:d0:c7:db:d0:1a:27:11:07:57:e7:
8b:b8:c6:8e:ec:5f:52:d8:01:e6:ab:e4:47:df:c3:
0a:b4:5e:0c:07:db:b7:a3:d7:0d:fa:81:01:c9:46:
5c:d8:ac:6e:4a:02:27:d8:45:76:e5:16:b4:d9:9c:
08:cc:08:b6:1f:c0:6f:e7:0b:ac:3e:d8:f3:e8:9e:
82:25:32:69:d5:6b:05:a9:a7:ce:e9:7d:14:60:b9:
a7:e7:f3:e4:22:3d:6a:5c:10:52:e8:a3:12:d6:96:
c0:65:7c:fe:83:bb:89:06:c8:2b:51:79:c0:60:bd:
ee:5d:55:d8:df:a2:4e:67:7c:06:e1:7d:eb:1e:91:
94:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:37:8F:13:EF:6E:28:3F:34:13:50:78:A7:F6:38:FF:D5:C1:89:AB
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/uTePE-9uKD80E1B4p_Y4_9XBias.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
85.237.216.0/24
Signature Algorithm: sha256WithRSAEncryption
44:22:ba:f0:37:6d:89:19:78:3e:de:bc:01:0e:2c:7f:13:10:
48:49:3d:f6:82:43:68:5f:b2:56:84:18:bc:b3:a4:e2:1e:92:
43:e1:5a:fa:2b:a4:b2:7a:45:e0:3c:1c:29:54:3d:24:87:14:
cb:4c:d2:9c:18:4b:d5:2a:2b:34:bb:6f:66:8a:f7:cc:7a:3e:
18:b1:27:05:77:87:22:1e:19:1d:ff:91:6c:e5:fb:ad:f8:56:
3d:c8:7e:fd:bb:5c:ea:89:5c:14:f0:18:b5:ce:69:73:83:94:
cc:4a:e3:bb:52:f4:de:4b:34:5e:76:0d:e0:0e:c1:bb:20:1e:
91:28:37:12:bf:f1:4f:7e:82:ef:69:af:3f:05:13:d9:45:75:
6a:4a:c0:20:4b:e3:a4:e7:c4:66:d8:d2:6d:3b:4f:d5:44:52:
14:56:42:1d:1c:41:5d:0a:fa:c0:56:ad:18:82:3f:3d:e6:f8:
11:c6:1b:24:21:fe:62:9c:c8:82:5f:b8:ec:43:04:4c:a2:e0:
50:31:7c:92:d6:fa:11:92:68:ba:76:50:09:d7:5f:bf:8d:ef:
b0:1f:84:dd:db:3f:f5:79:10:41:96:04:71:b5:2d:59:85:87:
cb:0d:49:42:8d:93:9f:cf:ac:32:20:cb:ab:1a:c7:3a:37:5f:
45:2b:10:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org