Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/tnAcX_9g7j2blxzr-qOz-HpuECo.roa
File: tnAcX_9g7j2blxzr-qOz-HpuECo.roa (raw, json)
Hash identifier: S0gepPDjxu6+Zqfh2WyYt0GSPrRfPQO5FYwJhSA7lsE=
Subject key identifier: B6:70:1C:5F:FF:60:EE:3D:9B:97:1C:EB:FA:A3:B3:F8:7A:6E:10:2A
Certificate issuer: /CN=62c4300ec34d6c8df50b18196e6fca58b1393126
Certificate serial: 022B9CA5
Authority key identifier: 62:C4:30:0E:C3:4D:6C:8D:F5:0B:18:19:6E:6F:CA:58:B1:39:31:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsQwDsNNbI31CxgZbm_KWLE5MSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/tnAcX_9g7j2blxzr-qOz-HpuECo.roa
Signing time: Tue 28 Jun 2022 10:36:03 +0000
ROA not before: Tue 28 Jun 2022 10:36:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 85.208.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36412581 (0x22b9ca5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4300ec34d6c8df50b18196e6fca58b1393126
Validity
Not Before: Jun 28 10:36:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6701c5fff60ee3d9b971cebfaa3b3f87a6e102a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:77:07:32:86:8a:0d:cf:f7:f3:7c:8e:23:
02:52:1e:76:2e:49:48:14:e1:23:49:66:93:3b:7e:
71:f0:4c:cf:25:5e:a8:9e:80:bc:3f:88:fe:1e:08:
ce:d1:0c:8b:59:43:51:ed:b5:3d:a3:ba:25:ed:2f:
57:46:71:1f:79:ee:02:16:e9:de:b7:1b:63:48:4a:
03:ac:b5:9a:82:07:ae:d1:b6:a1:e4:7d:2b:19:f7:
9d:99:fd:15:02:db:92:22:af:13:1b:47:f2:91:8f:
25:12:ce:a9:2e:73:d9:22:89:74:ea:76:29:b1:a1:
8d:9c:a3:0d:f2:99:1a:da:fa:3b:e8:ef:ec:9e:09:
67:f1:da:9f:34:52:1f:3a:52:14:17:7c:54:e5:69:
4f:a4:65:2d:2b:cd:8c:58:48:f4:04:d5:d8:a1:12:
1b:58:2a:86:dc:41:9e:4d:34:3c:d5:a2:17:c6:27:
98:64:da:b6:0b:b2:25:22:b2:eb:ec:a5:f5:49:80:
4b:b6:e3:88:7f:1a:43:88:9f:24:3c:11:ac:7b:32:
27:54:fc:87:1c:ff:98:ad:9b:5a:b0:df:52:b7:4d:
de:84:7e:cc:38:17:0d:7f:4b:49:c8:34:df:8e:48:
5c:79:2b:b1:cf:a1:86:68:3b:dd:bd:c8:4d:8a:5a:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:70:1C:5F:FF:60:EE:3D:9B:97:1C:EB:FA:A3:B3:F8:7A:6E:10:2A
X509v3 Authority Key Identifier:
keyid:62:C4:30:0E:C3:4D:6C:8D:F5:0B:18:19:6E:6F:CA:58:B1:39:31:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsQwDsNNbI31CxgZbm_KWLE5MSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/tnAcX_9g7j2blxzr-qOz-HpuECo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/68a895-6021-4ffc-b13b-c673c5093567/1/YsQwDsNNbI31CxgZbm_KWLE5MSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.136.0/24
Signature Algorithm: sha256WithRSAEncryption
17:36:8f:bc:dd:dc:08:d0:69:82:ab:35:bf:fb:0a:b6:72:bc:
c2:15:71:6b:a1:ad:e5:c1:fa:6f:a6:33:0a:1a:ec:01:bc:0d:
6e:e9:e2:6e:ac:2d:0b:6b:f0:11:2f:04:90:4e:ee:89:44:86:
a9:9e:23:3a:b5:29:84:15:90:2f:de:af:56:38:33:f8:91:53:
27:ee:1a:1c:75:10:ab:c3:5e:b5:ed:c6:aa:bd:9a:3d:7d:93:
af:6d:ff:6a:59:17:28:d3:e2:99:e8:29:84:62:1b:9c:20:88:
ee:33:71:e0:c8:02:69:ce:25:a7:48:92:5c:57:fb:69:8c:b8:
2b:9a:33:3a:f6:24:85:96:d4:06:3b:34:fc:08:09:3a:4e:ce:
80:7b:a6:66:94:83:1b:89:bc:e7:e9:0d:3e:e3:98:09:12:67:
91:11:d6:8f:0e:18:5e:cf:44:ae:e9:2c:48:6d:27:52:cb:94:
74:ac:23:6e:84:b4:b3:a2:97:5e:94:06:a7:3b:15:ca:fe:11:
74:cb:8c:fc:dc:7d:d6:eb:e4:65:62:c1:72:e7:cf:60:33:47:
96:55:01:ef:84:16:99:58:c4:40:e3:cc:96:3b:35:9c:fd:bf:
c4:2b:8d:66:28:dd:dc:83:ca:48:1d:33:09:e4:21:4f:55:2d:
7e:96:7a:44
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAiucpTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MmM0MzAwZWMzNGQ2YzhkZjUwYjE4MTk2ZTZmY2E1OGIxMzkzMTI2MB4XDTIyMDYy
ODEwMzYwM1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYjY3MDFjNWZmZjYw
ZWUzZDliOTcxY2ViZmFhM2IzZjg3YTZlMTAyYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKT5dwcyhooNz/fzfI4jAlIedi5JSBThI0lmkzt+cfBMzyVe
qJ6AvD+I/h4IztEMi1lDUe21PaO6Je0vV0ZxH3nuAhbp3rcbY0hKA6y1moIHrtG2
oeR9Kxn3nZn9FQLbkiKvExtH8pGPJRLOqS5z2SKJdOp2KbGhjZyjDfKZGtr6O+jv
7J4JZ/HanzRSHzpSFBd8VOVpT6RlLSvNjFhI9ATV2KESG1gqhtxBnk00PNWiF8Yn
mGTatguyJSKy6+yl9UmAS7bjiH8aQ4ifJDwRrHsyJ1T8hxz/mK2bWrDfUrdN3oR+
zDgXDX9LScg0345IXHkrsc+hhmg73b3ITYpauXECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBS2cBxf/2DuPZuXHOv6o7P4em4QKjAfBgNVHSMEGDAWgBRixDAOw01sjfUL
GBlub8pYsTkxJjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lzUXdEc05OYkkzMUN4Z1pibV9LV0xFNU1TWS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDUvNjhhODk1LTYwMjEtNGZmYy1iMTNiLWM2NzNjNTA5MzU2Ny8x
L3RuQWNYXzlnN2oyYmx4enItcU96LUhwdUVDby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUv
NjhhODk1LTYwMjEtNGZmYy1iMTNiLWM2NzNjNTA5MzU2Ny8xL1lzUXdEc05OYkkz
MUN4Z1pibV9LV0xFNU1TWS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFXQiDANBgkqhkiG9w0BAQsFAAOC
AQEAFzaPvN3cCNBpgqs1v/sKtnK8whVxa6Gt5cH6b6YzChrsAbwNbunibqwtC2vw
ES8EkE7uiUSGqZ4jOrUphBWQL96vVjgz+JFTJ+4aHHUQq8Nete3Gqr2aPX2Tr23/
alkXKNPimegphGIbnCCI7jNx4MgCac4lp0iSXFf7aYy4K5ozOvYkhZbUBjs0/AgJ
Ok7OgHumZpSDG4m85+kNPuOYCRJnkRHWjw4YXs9EruksSG0nUsuUdKwjboS0s6KX
XpQGpzsVyv4RdMuM/Nx91uvkZWLBcufPYDNHllUB74QWmVjEQOPMljs1nP2/xCuN
Zijd3IPKSB0zCeQhT1UtfpZ6RA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:59 2023 by rpki-client on console-fra.rpki-client.org