Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/3t4znPFFXkn0J1nUf_cgvsa392c.roa
File: 3t4znPFFXkn0J1nUf_cgvsa392c.roa (raw, json)
Hash identifier: yB5HX71UVjTC2r7BdPPA5Wp8YwWbJqaD7JuwPSvF66U=
Subject key identifier: DE:DE:33:9C:F1:45:5E:49:F4:27:59:D4:7F:F7:20:BE:C6:B7:F7:67
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018873BAA608CDB0B36B4B395BB7160FF00C
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/3t4znPFFXkn0J1nUf_cgvsa392c.roa
Signing time: Wed 31 May 2023 21:33:11 +0000
ROA not before: Wed 31 May 2023 21:33:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 85.158.57.0/24 maxlen: 24
85.237.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:73:ba:a6:08:cd:b0:b3:6b:4b:39:5b:b7:16:0f:f0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: May 31 21:33:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dede339cf1455e49f42759d47ff720bec6b7f767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:a8:52:33:54:e2:96:25:ab:9b:13:b9:ef:
f6:53:a8:7c:19:29:5f:c8:d7:45:5d:f9:51:46:0a:
12:42:24:65:69:af:8d:ad:7a:0c:44:28:d2:b9:ab:
3a:4c:cd:10:3c:0f:d3:74:b3:9b:43:c8:ba:00:9d:
ee:3f:d1:5f:8e:fa:d9:64:7f:12:49:b5:4e:cf:2f:
c2:26:85:f6:e1:a6:e4:46:fb:12:01:4f:b1:92:c9:
e4:18:4b:74:52:f0:d5:30:dd:86:c5:7a:7e:ee:7f:
0b:46:74:ff:71:bd:be:41:c7:56:a9:06:7b:f9:34:
2e:9d:19:28:32:c0:71:11:62:54:69:b2:1b:ad:fc:
ea:c5:07:e4:c8:0e:41:8d:14:d9:42:bb:ce:2f:76:
e9:d2:e3:5d:22:24:56:19:86:a1:97:9a:db:f3:2f:
a4:33:fd:83:30:4e:6e:0e:e0:5c:50:38:33:7a:65:
8b:9c:8d:9d:83:e1:2a:1b:a7:4c:cd:ca:3d:2a:09:
5d:be:4c:7f:10:fb:97:40:d2:4a:0e:c0:74:c0:65:
43:59:cb:32:9b:4e:3c:6a:78:65:99:1e:6d:84:af:
0d:72:26:86:3a:3b:47:18:e9:6e:21:e5:05:83:c4:
60:eb:6f:54:7b:a9:19:c1:1a:4e:6c:ea:5b:1c:29:
62:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DE:33:9C:F1:45:5E:49:F4:27:59:D4:7F:F7:20:BE:C6:B7:F7:67
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/3t4znPFFXkn0J1nUf_cgvsa392c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
85.237.222.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a8:ed:16:34:b8:e5:4a:8d:88:bf:aa:57:fa:9c:e6:fb:10:
35:e4:ef:b4:49:f4:26:1e:f9:5b:87:1b:18:17:53:78:7e:7f:
be:66:1a:c7:c9:03:dc:5e:a0:47:10:94:92:cf:08:c4:9d:3f:
d2:d7:c1:43:5e:75:df:61:c1:35:a9:ba:e5:1a:41:d1:87:b4:
19:88:27:23:de:03:4c:e4:82:6e:b9:34:e8:72:ef:e7:6c:54:
92:32:e4:2e:27:39:c9:39:c4:fc:ea:93:e5:95:a5:7a:ab:7d:
47:10:17:eb:df:fc:f5:19:09:a2:d9:cc:f9:3d:4f:16:bf:bd:
82:21:59:c5:43:ba:fd:d9:5c:a6:8e:c2:fd:ee:c2:81:40:75:
70:8e:35:cb:b6:d0:dd:7b:29:f3:ec:25:34:75:36:af:0f:31:
ae:e9:d2:e2:b2:e4:e9:f1:cd:3b:26:b1:14:e7:f7:11:79:09:
f9:23:5f:8d:4c:fe:43:50:74:1a:10:a8:83:88:dc:73:f7:a7:
3e:50:18:dc:5a:98:f1:ad:09:a3:dd:90:19:f2:eb:02:98:18:
56:25:25:80:3f:35:d4:9f:94:23:6a:ed:e5:94:de:59:3b:eb:
da:33:ed:94:8d:eb:f0:9a:c3:d8:0c:8e:ab:63:31:fb:3b:eb:
87:32:ae:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org