Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/wZxryaFPgCJXYu2kG7JZ-ZVk5QM.roa
File: wZxryaFPgCJXYu2kG7JZ-ZVk5QM.roa (raw, json)
Hash identifier: aTFySEviF+oE0xAxPIuA86DAeB3X6S7WKXy4wFLlivU=
Subject key identifier: C1:9C:6B:C9:A1:4F:80:22:57:62:ED:A4:1B:B2:59:F9:95:64:E5:03
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0184CF7EC28265D4DBEB079975E2A73E9544
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/wZxryaFPgCJXYu2kG7JZ-ZVk5QM.roa
Signing time: Thu 01 Dec 2022 21:01:41 +0000
ROA not before: Thu 01 Dec 2022 21:01:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.109.192.0/21 maxlen: 24
85.237.192.0/21 maxlen: 24
85.237.206.0/23 maxlen: 24
85.237.205.0/24 maxlen: 24
85.237.203.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.237.208.0/20 maxlen: 24
185.93.32.0/24 maxlen: 24
185.93.34.0/23 maxlen: 24
194.169.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cf:7e:c2:82:65:d4:db:eb:07:99:75:e2:a7:3e:95:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Dec 1 21:01:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c19c6bc9a14f80225762eda41bb259f99564e503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:24:fe:cc:7a:77:5e:aa:ca:be:e3:1b:51:3d:
48:11:ac:a7:8c:1e:a2:50:4d:0c:e7:84:c0:48:df:
80:6d:72:fa:f9:7d:d4:4e:bb:90:83:08:c7:db:22:
b1:b6:1d:51:f0:0c:1f:b0:32:22:bb:e7:82:89:fc:
e0:3d:a7:fb:21:98:e3:ae:b6:14:4a:da:a5:b6:dc:
b0:82:71:e7:9f:05:a0:90:bc:d1:93:fd:2c:f2:8c:
94:47:27:f7:30:80:ec:e0:65:4d:ed:1f:f6:e0:e8:
2a:a6:89:4f:c0:3f:4b:8c:fe:45:22:ab:db:18:93:
c9:c6:be:f4:79:70:bf:13:e5:60:ae:4f:d2:1b:79:
06:26:ca:20:e5:9c:e3:dc:50:52:80:fe:c2:b3:62:
04:36:27:5c:57:80:12:0e:1f:bf:f9:17:05:a5:08:
bb:e6:7e:28:66:06:56:d8:9f:d5:55:47:18:33:25:
79:63:f9:1c:47:25:3b:25:22:a7:c8:3e:b4:5a:04:
be:66:87:1d:17:96:c7:bf:72:f0:d2:7a:3e:7f:72:
b1:ed:83:ee:09:5e:e4:5c:eb:35:36:53:6e:68:3d:
7b:2f:3e:89:4c:18:8c:2c:07:1f:c6:80:a4:14:8f:
e2:12:c6:45:17:0f:3a:c5:ef:3a:ba:2f:e0:04:46:
c6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9C:6B:C9:A1:4F:80:22:57:62:ED:A4:1B:B2:59:F9:95:64:E5:03
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/wZxryaFPgCJXYu2kG7JZ-ZVk5QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
85.237.192.0/21
85.237.203.0/24
85.237.205.0-85.237.223.255
185.93.32.0/24
185.93.34.0/23
193.109.192.0/21
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:0b:09:96:5b:bc:9b:d6:03:58:c8:d1:bb:5f:6c:4a:57:e6:
57:d5:cd:60:80:e8:db:a0:1d:8a:63:81:80:2d:b3:91:ad:95:
e9:22:dd:45:37:52:62:cd:da:44:68:b2:fe:af:34:7a:e0:ec:
8d:6a:dc:a3:73:4d:0a:9f:5a:e5:cb:ca:29:3f:4f:d6:71:5f:
1c:48:0e:f1:b9:9b:3f:49:ed:5f:27:cf:8e:ee:40:2f:d1:5a:
86:9f:4c:5f:f3:b7:17:f4:b3:8e:ec:03:ed:08:4c:14:55:07:
b6:1d:87:fd:cb:ad:84:8c:35:78:d9:ea:a2:c2:ad:88:68:de:
dc:03:0b:52:ab:05:a3:c7:25:6e:f3:f5:5a:5c:02:94:32:95:
ce:f0:8b:bf:bd:a8:b0:15:be:76:13:d5:30:21:6d:73:f9:c6:
82:d4:ae:04:eb:3b:47:59:c1:ce:b9:b0:23:1c:76:ca:63:4e:
13:23:f7:83:a7:10:1b:51:33:e1:0d:50:b2:57:18:10:f9:ee:
c1:26:17:66:1a:b6:35:bc:cd:37:22:e4:2b:4a:45:f4:7a:f2:
93:f5:21:9a:20:57:c0:76:f9:6c:c9:53:ae:54:77:ed:3c:93:
a3:d4:a9:f1:d5:35:0f:82:28:f0:0a:06:fc:b0:fc:4e:71:6a:
01:77:ec:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:08 2023 by rpki-client on console-ams.rpki-client.org