Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/zOtXWJHH2iY8uarvYWhBhjEE_SE.roa
File: zOtXWJHH2iY8uarvYWhBhjEE_SE.roa (raw, json)
Hash identifier: yKswoJ8I4zx6h72qhgTn3g9ROe/UOv4+yrAIoo5NKF8=
Subject key identifier: CC:EB:57:58:91:C7:DA:26:3C:B9:AA:EF:61:68:41:86:31:04:FD:21
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01849F5F0B4347EE26EF93C0CC393C5B935B
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/zOtXWJHH2iY8uarvYWhBhjEE_SE.roa
Signing time: Tue 22 Nov 2022 12:45:16 +0000
ROA not before: Tue 22 Nov 2022 12:45:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 85.237.199.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:5f:0b:43:47:ee:26:ef:93:c0:cc:39:3c:5b:93:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Nov 22 12:45:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cceb575891c7da263cb9aaef616841863104fd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ee:30:2d:fc:ff:da:f8:54:c2:28:49:dc:fa:
e8:ac:31:5c:bb:21:10:20:1c:1d:23:c0:9e:d5:22:
db:6e:dc:de:09:31:f1:63:c5:30:08:1a:bf:e0:cc:
92:3f:a3:a5:18:b3:69:72:dc:a1:18:d9:e7:e3:38:
ae:25:b6:79:c2:15:86:ff:f1:24:ee:b7:25:7a:3d:
bd:39:84:00:83:d5:ab:c5:55:70:ef:44:cb:a9:a3:
08:73:cc:0e:60:39:22:cc:0b:2b:4a:09:e8:a6:a8:
1b:e7:26:71:08:9a:58:54:ff:16:cc:5d:af:0c:d5:
96:c6:dc:a3:13:b7:69:e9:a1:bf:52:6a:a8:d2:0d:
f4:f5:89:c7:f7:94:89:ee:7e:2e:06:48:5b:b4:e7:
76:55:1f:e8:22:cd:bf:b4:64:1f:42:be:a5:2c:8a:
1f:95:8b:dd:cd:49:24:79:e0:91:8f:e3:92:ba:20:
39:4f:0a:cd:25:f2:5c:0b:90:99:01:74:bc:b2:75:
d6:c8:5c:34:74:7c:a9:88:95:5d:8d:c2:7d:ee:c5:
d3:f7:47:82:b2:e3:6e:84:5f:9b:b9:9b:cd:4a:67:
ba:b3:f9:ed:ca:d1:7c:3c:04:36:7b:76:ca:f9:79:
d2:35:b2:21:4b:d7:e2:68:bc:03:ae:63:87:87:be:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EB:57:58:91:C7:DA:26:3C:B9:AA:EF:61:68:41:86:31:04:FD:21
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/zOtXWJHH2iY8uarvYWhBhjEE_SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
85.237.199.0/24
Signature Algorithm: sha256WithRSAEncryption
29:56:04:0f:b9:17:9f:bf:b0:32:42:4a:65:f2:bd:fc:5c:68:
c4:a9:c0:77:ea:2b:9d:7f:4e:55:fa:c2:60:30:77:d1:9f:f9:
92:fe:91:91:f4:8d:6d:cd:a5:11:1f:2f:a9:af:5b:37:d0:06:
9f:1e:9d:e8:02:f0:38:dc:e6:66:76:2c:f6:db:0f:17:6a:59:
ab:2e:b0:ad:7b:5b:7b:9a:a6:01:7d:30:21:c5:7e:27:45:78:
38:8c:d5:d4:51:8e:3a:ee:b5:24:42:b7:7d:bb:7a:a3:42:b8:
96:4c:17:03:9b:bb:96:00:fc:55:5f:c3:6f:16:1e:61:bf:63:
de:e5:84:7e:23:77:f3:6a:06:bb:04:b5:5b:6a:4b:71:b8:d8:
5d:7a:27:5b:c3:37:37:02:8f:fa:3b:f9:d0:a7:ab:fd:8c:5d:
6a:8a:0c:e1:ac:27:b4:c3:a5:e8:61:2b:cb:63:53:35:9c:c4:
33:a9:4f:10:de:15:5b:7e:99:4f:36:07:02:d4:a2:71:a1:ca:
66:6c:f2:7c:8a:f1:1d:a5:be:e6:ba:1f:de:24:ac:e0:5b:40:
14:5e:f8:65:3a:88:ba:ae:0d:6e:77:2d:da:84:c2:5e:3c:a3:
ba:20:4a:e9:cf:a4:13:51:31:d1:da:a7:bb:ad:16:85:c5:b9:
a1:47:d8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:08 2023 by rpki-client on console-ams.rpki-client.org