Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/9cBTZ6HyFMEpHGbFB8UNZtDgp5s.roa
File: 9cBTZ6HyFMEpHGbFB8UNZtDgp5s.roa (raw, json)
Hash identifier: 7c32CImN4DHYtwMWQlexyptYtayGYAYE4gueM9dnYAM=
Subject key identifier: F5:C0:53:67:A1:F2:14:C1:29:1C:66:C5:07:C5:0D:66:D0:E0:A7:9B
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DE98E7FE473A744D5CD83D1E61A7E3
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/9cBTZ6HyFMEpHGbFB8UNZtDgp5s.roa
Signing time: Mon 02 Jan 2023 09:44:51 +0000
ROA not before: Mon 02 Jan 2023 09:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 85.237.194.0/24 maxlen: 24
85.237.212.0/24 maxlen: 24
194.169.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:98:e7:fe:47:3a:74:4d:5c:d8:3d:1e:61:a7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5c05367a1f214c1291c66c507c50d66d0e0a79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:96:11:dc:f2:e2:d9:a1:7f:43:08:3f:5c:52:
3f:11:6b:a7:05:3f:29:41:7a:b2:1e:50:30:a2:27:
fc:37:f6:1d:2d:06:8b:9b:b1:a4:af:a2:bc:bf:b1:
33:9f:4c:6f:6c:e1:c6:93:04:96:03:83:45:a0:5c:
8f:39:6c:50:11:24:6a:f2:3d:86:72:11:d2:75:53:
46:4a:a8:8a:a2:d9:5f:62:4b:04:6f:8e:ad:1c:cd:
be:e2:1c:63:7f:9f:84:43:19:52:fa:cb:92:bf:1a:
17:19:1b:c1:5f:47:83:86:ad:c6:e2:ca:ad:98:d5:
3a:0f:45:74:95:d2:d2:27:56:5e:ae:6a:62:23:b4:
7d:e8:ce:12:be:45:1e:6a:73:0b:04:c2:55:58:d2:
a9:19:56:cb:0b:56:24:66:4e:36:aa:f1:92:5f:63:
93:37:3f:32:50:79:1a:36:00:95:38:68:5d:35:9b:
87:02:75:52:cd:3a:0c:09:36:51:fc:4a:3d:e5:61:
35:dc:cb:65:9d:4b:9a:ff:48:bb:5d:c7:de:44:1e:
59:21:0d:8e:f2:06:8d:d8:30:2b:b5:6a:bf:4b:15:
2b:8a:9b:97:15:0f:1d:c9:15:04:d3:67:47:12:e4:
94:f1:a4:a2:e3:24:a4:9e:47:33:29:7c:24:ff:05:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C0:53:67:A1:F2:14:C1:29:1C:66:C5:07:C5:0D:66:D0:E0:A7:9B
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/9cBTZ6HyFMEpHGbFB8UNZtDgp5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.194.0/24
85.237.212.0/24
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d5:cb:22:20:19:bd:4c:9d:cc:c2:91:25:68:81:5c:0d:81:
d6:23:d2:98:21:69:6c:88:73:6c:ca:bb:96:ce:7e:81:9c:78:
36:c6:aa:19:cd:4b:ab:98:29:a3:4c:cb:ac:9b:fa:82:25:a3:
9f:9c:b8:78:d9:df:61:4b:68:05:0e:87:52:1e:e2:cb:bc:61:
93:f6:bb:fb:fd:80:27:be:62:ff:4c:2f:6d:3e:34:11:17:4c:
d3:fe:43:bd:2a:2e:6f:08:e5:e9:ea:3f:2d:7e:c2:0a:8e:52:
30:cc:f5:de:dc:01:38:6d:e1:6d:53:fa:8e:de:59:12:c1:49:
02:ae:86:1b:ad:93:f0:b8:0d:92:2e:2a:9a:3b:47:dd:76:39:
af:0f:37:91:79:ad:69:23:ec:35:d5:0b:5f:2a:da:4a:1a:78:
6e:e3:e2:1d:f6:56:f2:05:61:5f:7e:2b:bb:d7:28:bb:0f:f8:
b4:bd:cc:f7:5b:3a:7f:8a:54:98:2c:c2:1f:cc:0d:ed:5e:ce:
63:92:13:69:e3:45:64:3e:3a:9c:b5:66:e4:fd:5c:1a:32:a1:
12:61:ca:8d:71:02:02:ee:2f:16:fa:11:88:39:93:cb:44:38:
88:a8:cd:3f:1b:33:59:ff:43:92:00:98:77:8d:be:31:e0:c4:
c1:2a:ef:aa
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVx3pjn/kc6dE1c2D0eYafjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MGI2NzM2OGM5MWI4NWU4NDg4OGM1ZWQyZTgyNGQxMzkw
ODEwYmIwHhcNMjMwMTAyMDk0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWMwNTM2N2ExZjIxNGMxMjkxYzY2YzUwN2M1MGQ2NmQwZTBhNzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpYR3PLi2aF/Qwg/XFI/EWunBT8p
QXqyHlAwoif8N/YdLQaLm7Gkr6K8v7Ezn0xvbOHGkwSWA4NFoFyPOWxQESRq8j2G
chHSdVNGSqiKotlfYksEb46tHM2+4hxjf5+EQxlS+suSvxoXGRvBX0eDhq3G4sqt
mNU6D0V0ldLSJ1ZermpiI7R96M4SvkUeanMLBMJVWNKpGVbLC1YkZk42qvGSX2OT
Nz8yUHkaNgCVOGhdNZuHAnVSzToMCTZR/Eo95WE13MtlnUua/0i7XcfeRB5ZIQ2O
8gaN2DArtWq/SxUripuXFQ8dyRUE02dHEuSU8aSi4ySknkczKXwk/wW4uwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPXAU2eh8hTBKRxmxQfFDWbQ4KebMB8GA1UdIwQY
MBaAFDkLZzaMkbhehIiMXtLoJNE5CBC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYt
NWM5ZDYyNjI5Yzg2LzEvOWNCVFo2SHlGTUVwSEdiRkI4VU5adERncDVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYtNWM5ZDYyNjI5Yzg2
LzEvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVe3CAwQA
Ve3UAwQAwqnZMA0GCSqGSIb3DQEBCwUAA4IBAQAp1csiIBm9TJ3MwpElaIFcDYHW
I9KYIWlsiHNsyruWzn6BnHg2xqoZzUurmCmjTMusm/qCJaOfnLh42d9hS2gFDodS
HuLLvGGT9rv7/YAnvmL/TC9tPjQRF0zT/kO9Ki5vCOXp6j8tfsIKjlIwzPXe3AE4
beFtU/qO3lkSwUkCroYbrZPwuA2SLiqaO0fddjmvDzeRea1pI+w11QtfKtpKGnhu
4+Id9lbyBWFffiu71yi7D/i0vcz3Wzp/ilSYLMIfzA3tXs5jkhNp40VkPjqctWbk
/VwaMqESYcqNcQIC7i8W+hGIOZPLRDiIqM0/GzNZ/0OSAJh3jb4x4MTBKu+q
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org