Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/1pG6Njk2zckcUBDPVcl9jkaPA-U.roa
File: 1pG6Njk2zckcUBDPVcl9jkaPA-U.roa (raw, json)
Hash identifier: L0BECKUD1AJwsocNNhTZ1XC5hKWcytqdmTY3k5dVzWQ=
Subject key identifier: D6:91:BA:36:39:36:CD:C9:1C:50:10:CF:55:C9:7D:8E:46:8F:03:E5
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0185CC6AB6C587A60F04C1B48658F1AEF109
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/1pG6Njk2zckcUBDPVcl9jkaPA-U.roa
Signing time: Thu 19 Jan 2023 23:43:43 +0000
ROA not before: Thu 19 Jan 2023 23:43:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207326
IP address blocks: 85.237.211.0/24 maxlen: 24
85.237.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cc:6a:b6:c5:87:a6:0f:04:c1:b4:86:58:f1:ae:f1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 19 23:43:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d691ba363936cdc91c5010cf55c97d8e468f03e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c2:2a:3f:1e:1a:2c:90:30:3e:71:0e:63:3a:
0d:9d:a9:c5:04:e4:69:06:5d:a6:22:c7:70:03:9f:
7c:f1:b3:65:26:88:97:97:33:ce:8d:47:6c:57:d3:
50:21:bb:ae:86:a1:14:60:de:97:45:81:7c:29:8f:
7e:04:1d:9f:2a:0d:c7:b7:c1:22:5d:07:0d:95:5e:
72:11:b4:76:3e:b4:6d:b0:c2:64:87:c4:3b:e9:be:
fb:82:02:f3:94:a2:28:be:ea:f8:75:cf:3b:0c:32:
f5:c0:18:93:10:e4:5e:75:22:2c:e2:97:0a:14:af:
ee:cc:1d:4d:de:c4:5b:cb:d5:12:12:36:c8:c5:6f:
50:9f:54:1b:08:30:d1:f5:2e:67:f6:75:10:50:c3:
db:6f:2f:b4:2e:94:d6:c7:a6:64:d5:dc:50:83:bb:
d5:7a:8b:68:1e:08:1c:2a:32:0e:9b:30:6d:58:fc:
0f:ee:00:c6:47:3e:cb:a0:f7:42:77:b9:1b:6c:65:
1b:fe:40:26:2f:ac:a6:6a:d8:3d:da:26:52:64:8d:
c3:4c:b0:db:10:21:52:c2:d2:c2:9d:36:28:eb:be:
ba:ef:40:df:ed:a2:cf:ae:1e:cb:be:49:a0:7d:5d:
61:2a:42:4d:d4:15:aa:65:c0:f7:75:c1:c0:76:d1:
62:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:91:BA:36:39:36:CD:C9:1C:50:10:CF:55:C9:7D:8E:46:8F:03:E5
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/1pG6Njk2zckcUBDPVcl9jkaPA-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
85.237.216.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:07:a1:fc:78:b8:22:7c:53:64:da:16:80:44:ec:9e:9b:a5:
f7:da:2a:70:c6:0d:01:cf:4c:8a:50:88:2a:db:4f:f9:47:d0:
90:a0:5e:52:2a:83:9f:f7:8b:79:28:87:65:b6:54:c2:f6:34:
93:4c:c5:62:5f:01:a8:32:5e:0b:d4:51:ef:e2:e5:a6:fb:61:
5c:dc:08:75:5b:d1:28:13:6a:60:87:92:03:e6:5c:7c:c9:6e:
90:a5:2d:a8:0e:88:32:eb:75:83:7d:c2:26:9a:e6:a2:fa:a7:
84:65:fe:4f:45:ef:85:99:5d:7d:79:23:05:5b:90:47:17:53:
a6:cf:5d:28:e4:c9:69:aa:bd:5c:fb:dd:43:fc:63:4e:00:d5:
7f:0c:4c:a8:13:fe:91:9d:8c:fe:16:5f:21:4b:d6:98:4f:63:
90:5e:38:d5:44:d7:41:db:ae:1c:b5:24:46:02:e8:18:5c:33:
0b:08:f8:9e:66:fe:ee:65:01:fc:0e:ec:f0:e7:ab:40:78:db:
f3:6e:69:a6:29:1e:5d:5a:69:3f:96:ae:56:d8:b8:40:c8:c5:
40:c5:7f:34:f8:73:0b:9e:a3:c9:67:8f:a0:89:d3:86:da:27:
de:42:dc:64:b9:06:d5:b8:1f:ae:37:5f:66:48:bc:8b:cd:28:
6e:78:eb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org