Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/32JTJQzTsBFiJ54zVAm74pgT4rE.roa
File: 32JTJQzTsBFiJ54zVAm74pgT4rE.roa (raw, json)
Hash identifier: 8z3sHY/yO6nqtjFQbylfSicTAFVmZrQ+zsXRzUDlrNQ=
Subject key identifier: DF:62:53:25:0C:D3:B0:11:62:27:9E:33:54:09:BB:E2:98:13:E2:B1
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DEA1E66A318EF1AC783E498B37EA05
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/32JTJQzTsBFiJ54zVAm74pgT4rE.roa
Signing time: Mon 02 Jan 2023 09:44:53 +0000
ROA not before: Mon 02 Jan 2023 09:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397423
IP address blocks: 85.237.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:a1:e6:6a:31:8e:f1:ac:78:3e:49:8b:37:ea:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df6253250cd3b01162279e335409bbe29813e2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:68:d5:29:26:aa:7c:43:52:f8:47:31:91:96:
2e:fb:c3:ac:46:71:19:56:e4:b6:ff:2e:4f:cc:a5:
b1:82:5f:4b:2c:38:1b:ed:3c:5b:a6:2c:c6:4b:ce:
77:3e:4c:32:66:1b:4b:7c:ee:eb:bc:f2:aa:aa:78:
1f:6d:cd:88:03:ed:f7:52:4b:de:d1:25:7c:e6:e9:
8f:16:49:0c:9c:97:c9:fd:3c:42:8e:f8:b5:f1:fa:
7b:25:36:4f:20:af:63:f9:29:a6:12:16:b6:87:2b:
ab:71:6f:d4:62:ec:c7:93:70:43:1c:26:fc:d3:5b:
07:c7:42:73:bd:03:ac:94:0c:cd:7c:04:8c:f7:4e:
e6:20:f4:1a:29:2b:03:af:3b:6a:bc:07:27:52:c8:
17:d8:97:88:c0:be:f1:45:47:b0:59:fb:9f:d4:8e:
95:01:b9:fa:aa:e4:18:1b:d0:0e:53:ca:4d:c0:d4:
d2:8f:ef:46:df:1a:99:8b:76:c2:ff:6c:ec:e0:03:
8d:ba:a0:2e:6e:26:15:c9:d3:d4:93:69:64:b2:56:
27:60:b0:0e:ca:63:51:5b:06:b9:30:c2:96:8c:64:
cf:39:53:bf:22:f6:80:a6:1b:53:73:ff:4b:8d:05:
d2:3a:8c:1c:60:cc:c7:fa:52:5c:22:ef:0b:a1:5b:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:62:53:25:0C:D3:B0:11:62:27:9E:33:54:09:BB:E2:98:13:E2:B1
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/32JTJQzTsBFiJ54zVAm74pgT4rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.203.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d1:f5:f6:8a:c2:6e:91:99:17:4a:49:9a:21:60:6b:99:d8:
41:72:f1:c9:02:36:e1:2d:14:3a:91:fd:8b:11:f2:1b:70:74:
b9:6f:7b:da:ed:08:c0:0b:96:51:01:67:8f:e8:76:b6:af:c1:
61:33:71:23:3d:fb:7c:4e:20:4a:d9:ea:53:0e:a7:ef:fc:af:
68:2f:72:0b:52:b6:c0:1b:b0:f9:f6:cb:ca:22:b3:e6:ab:63:
99:0b:80:da:0e:87:69:44:aa:42:f5:b7:9a:00:29:ff:35:84:
09:28:1d:46:12:3b:43:aa:26:f3:c6:66:c9:b1:a4:b9:37:dc:
e8:1a:b5:00:61:5c:fe:96:c4:4d:16:36:a1:b6:47:88:98:ae:
51:9e:84:41:ae:e1:39:a2:cc:f5:c2:a3:39:96:45:cd:ec:fa:
fa:f6:74:2d:b8:e2:0d:6f:40:fa:c7:6c:e1:ac:be:08:69:ae:
bd:2b:1d:fa:26:55:bf:5c:98:d4:6c:8e:b9:b1:8b:97:d5:aa:
5a:c9:2c:d2:9c:05:a1:89:6a:68:6c:d7:71:f0:25:af:8e:fe:
21:23:20:85:3b:ef:b1:47:b5:3f:b4:15:f4:a0:a8:c2:61:84:
ea:55:fa:54:d8:ad:d2:24:f0:0c:82:a1:a2:6b:f0:f5:46:a9:
14:8c:0e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org