Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/34oXijUgpx31K5aixj4ijHH9TiI.roa
File: 34oXijUgpx31K5aixj4ijHH9TiI.roa (raw, json)
Hash identifier: Yl/BD6P220qRhAvrT+W8YJ3W9i/Vm346vZMTSBqD/lo=
Subject key identifier: DF:8A:17:8A:35:20:A7:1D:F5:2B:96:A2:C6:3E:22:8C:71:FD:4E:22
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018820A6E9026D506E7E47CBC8F84B73F408
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/34oXijUgpx31K5aixj4ijHH9TiI.roa
Signing time: Mon 15 May 2023 18:23:09 +0000
ROA not before: Mon 15 May 2023 18:23:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 85.237.209.0/24 maxlen: 24
85.158.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:a6:e9:02:6d:50:6e:7e:47:cb:c8:f8:4b:73:f4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: May 15 18:23:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df8a178a3520a71df52b96a2c63e228c71fd4e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:a7:49:48:75:16:60:c1:c4:39:dd:14:78:
81:bd:af:fd:00:25:40:74:56:98:a8:1f:0a:a8:4b:
6c:97:4b:f6:26:55:de:5f:83:0e:8d:cf:c3:ff:88:
5a:d9:42:5f:4c:6c:88:f1:b8:03:6f:d3:45:ea:6d:
29:d3:4c:35:b9:84:96:5d:82:e2:db:66:d8:d8:ab:
b7:ab:17:0a:e8:79:ab:36:86:f8:06:03:5d:19:2a:
cd:b2:6c:9d:3f:97:fd:ee:a2:50:e7:40:25:e3:12:
0d:aa:ab:a0:58:19:01:b4:33:e6:42:34:bb:d9:0a:
1d:94:03:97:9e:75:00:67:c9:4b:5b:e8:2c:6a:3c:
6a:e9:ca:32:d8:e4:35:24:8f:d3:f4:6d:3f:a3:91:
6c:d4:a4:fb:eb:46:ed:47:25:9a:b3:48:2c:e8:7d:
b2:ce:6a:c6:d0:37:e7:85:d7:18:dc:d4:59:a3:51:
e7:59:60:59:cf:78:bf:40:7f:f2:00:41:c4:eb:8c:
47:37:51:46:b3:81:e5:03:db:43:74:0d:cd:15:b2:
b8:56:da:b8:bc:53:4e:68:d3:7d:bf:46:d4:4d:4b:
85:3f:09:a0:91:8b:f0:e2:c8:fa:dd:69:a2:5e:04:
d2:b4:0d:7d:44:e0:4d:aa:54:bf:57:ef:fc:27:5d:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8A:17:8A:35:20:A7:1D:F5:2B:96:A2:C6:3E:22:8C:71:FD:4E:22
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/34oXijUgpx31K5aixj4ijHH9TiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.59.0/24
85.237.209.0/24
Signature Algorithm: sha256WithRSAEncryption
04:da:89:82:59:c4:a2:a7:a3:8f:56:1e:7b:e7:ce:e0:f9:e3:
26:ac:06:8d:b3:a9:19:ae:b2:3d:2e:05:d9:84:eb:1d:74:69:
66:db:54:33:f0:91:e2:34:48:04:57:45:b3:92:64:a1:8c:9f:
57:e6:c8:e1:7f:24:2a:be:91:f1:62:3c:bc:2e:86:34:24:24:
86:50:f9:e1:84:11:11:a1:9d:15:70:1b:ef:f0:eb:80:94:d5:
a1:70:fc:55:9c:63:b4:f4:33:fd:89:8c:3a:2c:12:68:25:a3:
16:cd:02:a7:2a:89:5d:db:30:ec:36:c7:4d:d1:7a:86:eb:cd:
65:b2:29:2c:ad:9f:e0:a8:c8:03:f8:1e:85:41:92:84:a0:44:
e5:c6:c8:74:4e:8c:65:bd:b6:6e:20:e8:98:a0:7e:5d:14:42:
26:2f:09:4f:46:ec:d2:06:79:15:ed:ec:1d:47:4f:ef:85:c4:
27:10:46:27:8c:d4:f5:59:df:d4:fa:99:ea:72:82:e3:51:e9:
7d:f2:d3:24:bb:8c:45:5e:37:31:4a:bb:d9:2a:60:5f:85:86:
5b:cf:4a:cc:b6:38:0c:82:85:63:94:20:1f:d8:dd:77:2a:8a:
26:09:26:27:ae:ed:18:6d:f4:51:89:73:44:2c:27:76:59:df:
f9:1e:66:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:32:49 2025 by rpki-client