Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/53saNNhaQowSeDowEVQ74HKyjyo.roa
File: 53saNNhaQowSeDowEVQ74HKyjyo.roa (raw, json)
Hash identifier: cDlfIJepo8Z53efUDiycrfwpvOJk4MGWjM9kjM9jk3U=
Subject key identifier: E7:7B:1A:34:D8:5A:42:8C:12:78:3A:30:11:54:3B:E0:72:B2:8F:2A
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DE9FE535993572280C84C9B760FA43
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/53saNNhaQowSeDowEVQ74HKyjyo.roa
Signing time: Mon 02 Jan 2023 09:44:53 +0000
ROA not before: Mon 02 Jan 2023 09:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 85.158.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:9f:e5:35:99:35:72:28:0c:84:c9:b7:60:fa:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e77b1a34d85a428c12783a3011543be072b28f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:70:29:4c:21:bf:bf:54:9e:5e:0e:3f:5a:
d4:88:1e:de:15:c6:5c:e6:e0:4c:59:aa:81:64:93:
49:0d:2c:b5:90:fd:4e:ae:12:3c:76:dd:a8:47:ab:
ce:be:4a:6d:26:5a:43:0c:74:31:86:02:81:51:65:
57:7c:9a:94:ac:be:30:b6:e3:5d:85:1f:c9:05:13:
c4:f2:83:71:47:3a:be:b3:82:29:74:16:73:fc:e3:
3b:9e:b9:11:a4:5a:70:59:53:0e:a6:a9:b2:eb:51:
24:5c:c6:4e:31:19:d8:bf:41:03:fd:d7:1f:fd:ef:
ad:63:97:99:59:f6:16:d0:99:9a:55:a0:da:81:02:
88:a0:c0:5f:b7:f8:52:79:c9:d8:41:b4:01:6a:7f:
44:53:6d:a0:fa:31:5e:a7:89:07:ab:06:85:17:12:
65:d0:d0:c0:e6:c3:5f:37:9f:06:96:b7:23:63:e2:
3a:8c:49:1a:03:30:0e:34:4e:80:3a:a9:43:3f:41:
9f:2f:10:a1:ef:63:8a:85:a0:56:7b:64:a7:20:01:
b0:18:ea:9d:ab:55:54:69:b5:22:72:83:97:53:a0:
30:92:2f:7e:cf:7e:b0:11:c9:e4:0d:70:74:be:c2:
1b:4f:c1:72:5b:91:5e:69:ca:3c:d2:54:63:6d:0c:
48:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7B:1A:34:D8:5A:42:8C:12:78:3A:30:11:54:3B:E0:72:B2:8F:2A
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/53saNNhaQowSeDowEVQ74HKyjyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
Signature Algorithm: sha256WithRSAEncryption
40:56:d7:d8:19:26:b3:c8:f8:54:8b:12:2b:87:7e:2a:e5:9e:
55:22:96:4d:7e:13:36:49:1b:30:7c:76:a2:cd:a0:c7:9b:39:
e5:de:ee:80:18:6f:2b:7f:ce:d3:77:0e:11:03:a5:4a:20:1d:
7d:64:be:37:ae:d6:80:e3:85:35:a5:32:51:ab:61:9b:ed:07:
3b:4e:8b:c5:19:15:b9:e9:fb:ce:c6:1a:0d:04:1a:10:b6:7a:
8e:7d:1f:42:62:83:9f:ef:7c:2a:0e:7f:2d:52:c9:98:9d:fa:
a7:1d:7b:ce:d7:ab:5b:6f:54:e6:4a:7d:d1:09:97:01:b2:fd:
70:48:87:ee:91:13:67:50:6b:ed:4f:3c:ce:b0:b6:e6:f1:3e:
57:37:81:54:9e:a0:58:f9:7a:ea:3e:ae:01:64:9c:96:f4:d0:
9a:ae:82:c4:8b:dc:5c:77:ea:9b:e1:bc:6c:44:fe:e2:91:86:
92:50:7a:b0:91:8c:37:5b:43:d4:16:53:26:2d:f6:bb:f7:2c:
29:dd:16:6f:b5:47:a3:76:31:ab:19:2b:a5:ac:55:27:b2:a3:
2b:ac:99:fb:e0:07:07:c8:1c:27:84:24:d2:4c:40:42:7b:53:
12:ba:36:b3:7d:04:2b:ce:83:d9:f1:cc:8f:8d:14:ea:97:df:
c3:ba:87:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:04 2025 by rpki-client