Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/CR-rvYMBRH_O8maf1m6kLmz34No.roa
File: CR-rvYMBRH_O8maf1m6kLmz34No.roa (raw, json)
Hash identifier: 3w94/sMY5tD9Y3nt9gi2zhhSkf7J5dQuFzMl8IfgrYQ=
Subject key identifier: 09:1F:AB:BD:83:01:44:7F:CE:F2:66:9F:D6:6E:A4:2E:6C:F7:E0:DA
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 043D6667
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/CR-rvYMBRH_O8maf1m6kLmz34No.roa
Signing time: Sat 01 Jan 2022 00:50:48 +0000
ROA not before: Sat 01 Jan 2022 00:50:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 85.237.211.0/24 maxlen: 24
185.89.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71132775 (0x43d6667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 1 00:50:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=091fabbd8301447fcef2669fd66ea42e6cf7e0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:f7:db:f8:9a:85:bd:a5:ab:96:4a:fa:b6:
77:0f:d1:e2:f9:eb:21:60:69:34:38:84:a7:c1:eb:
d2:ff:ff:12:cc:59:ff:85:58:f5:fe:35:13:e5:66:
d1:84:d3:f9:ff:48:7d:83:bd:70:82:ca:72:fc:c8:
ee:a1:9c:d4:0e:f7:46:ef:72:87:f0:7a:37:58:1b:
93:d2:40:c7:69:ee:42:ef:48:ad:8f:4b:7a:9f:3a:
ae:78:9b:3a:da:d6:32:56:9c:4a:36:d6:62:37:e0:
d4:ef:78:f5:a7:12:63:8f:39:2e:87:7e:0b:d0:3f:
4e:1c:14:3f:82:dc:ea:46:fd:54:5d:93:83:4f:b1:
35:b6:37:04:e6:f0:69:06:0f:bc:e4:8e:79:1b:c1:
bb:62:1b:16:ba:66:7b:79:e8:36:38:87:e3:2b:3b:
f1:2e:d0:93:3b:33:6d:83:4e:89:5c:15:ab:93:23:
eb:37:93:60:45:c3:60:1f:ca:ae:7c:2e:50:f2:a1:
db:3e:83:a1:10:ff:bd:c0:8d:3e:43:28:8f:b0:08:
a8:99:4b:51:ce:b8:2c:66:c4:1d:40:3f:d1:ec:8a:
67:10:53:6c:29:91:bd:02:c1:f7:34:2a:35:37:db:
60:f5:08:8f:bd:2a:db:68:37:5b:2a:ab:ab:74:53:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1F:AB:BD:83:01:44:7F:CE:F2:66:9F:D6:6E:A4:2E:6C:F7:E0:DA
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/CR-rvYMBRH_O8maf1m6kLmz34No.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
185.89.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:00:a7:7f:d7:60:e0:18:88:1d:82:c8:76:51:34:cb:06:5b:
79:51:6c:84:c4:31:9b:05:17:32:e4:52:12:02:00:e7:c1:13:
d5:f6:0f:91:eb:41:ba:15:1f:03:fc:ca:2d:60:bb:fa:c7:77:
e5:05:7d:0c:e0:65:c8:d7:c2:7d:70:f9:2b:79:71:93:1f:c3:
8c:ff:bf:eb:5b:a8:55:2b:eb:bb:d1:13:3d:02:35:37:a5:64:
3d:79:2e:83:dc:e9:c4:1b:b0:bc:98:27:a9:73:4d:d9:d9:dd:
37:87:fd:76:94:33:62:cd:a5:6b:87:a4:85:e1:a8:60:87:06:
31:53:81:71:ce:4d:cc:81:c8:81:7f:8c:dc:7a:be:e5:24:02:
29:ad:b7:ed:91:03:71:45:ad:85:a8:ea:16:07:ae:7c:4c:28:
cd:79:38:7b:ba:7b:93:ef:24:a9:0c:0e:f1:2a:b1:61:75:9c:
95:e4:9b:e9:02:92:57:c2:b9:ac:1e:d7:f7:a8:eb:60:11:fa:
78:59:76:f3:bf:bc:1f:20:e9:f0:ca:da:2d:9b:9f:f2:0f:c0:
f6:2e:57:3b:0b:e0:dd:2d:99:eb:6f:29:e7:39:3d:3b:fc:f1:
94:a2:ed:96:c4:ec:8e:d5:0c:e9:95:ba:05:2b:99:dd:b5:b3:
2b:c3:bc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org