Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Hzj6nDsK3pt3Z1aigi3dYHuP-kM.roa
File: Hzj6nDsK3pt3Z1aigi3dYHuP-kM.roa (raw, json)
Hash identifier: 04QmB+43Sxt/AKx3s2/LbBb9eApU+w4IW7mqCdHmrIA=
Subject key identifier: 1F:38:FA:9C:3B:0A:DE:9B:77:67:56:A2:82:2D:DD:60:7B:8F:FA:43
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0184A93A3FDA491D436089A39132D8AABABB
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Hzj6nDsK3pt3Z1aigi3dYHuP-kM.roa
Signing time: Thu 24 Nov 2022 10:41:17 +0000
ROA not before: Thu 24 Nov 2022 10:41:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 85.237.192.0/21 maxlen: 24
193.109.192.0/21 maxlen: 24
85.237.206.0/23 maxlen: 24
85.237.205.0/24 maxlen: 24
85.237.203.0/24 maxlen: 24
85.158.56.0/21 maxlen: 24
85.237.208.0/20 maxlen: 24
185.93.32.0/24 maxlen: 24
185.93.34.0/23 maxlen: 24
194.169.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:3a:3f:da:49:1d:43:60:89:a3:91:32:d8:aa:ba:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Nov 24 10:41:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1f38fa9c3b0ade9b776756a2822ddd607b8ffa43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:27:a0:61:b4:62:b0:3e:82:4a:51:2b:ed:30:
3a:27:31:02:f1:c0:43:eb:15:e3:1f:60:fd:14:f8:
57:25:e3:e9:85:3a:7e:92:b3:7c:c9:f2:c2:9b:10:
a9:62:f7:48:4c:90:17:74:0d:b7:3b:9c:c9:33:2c:
dc:d7:de:66:ac:f6:a4:be:7e:35:04:aa:75:6c:ed:
5a:29:a0:19:15:b9:ec:e0:53:5b:c6:ed:2c:7f:5b:
51:02:5e:0f:32:15:04:c0:ea:c6:dc:4b:8d:b2:9e:
0a:ce:16:00:7e:63:c8:c6:52:4b:8a:3d:5a:56:98:
83:bb:4c:82:0c:d4:da:f1:26:67:f8:1f:28:62:0a:
0a:2f:d7:26:39:15:48:b5:c3:14:04:a6:0c:a5:e8:
44:e7:f6:00:32:5e:a9:87:2a:77:91:7c:0d:bc:41:
0a:79:54:19:db:48:2a:5a:31:5a:23:8f:bd:a2:f8:
59:30:03:2c:fe:b8:f4:9e:7f:c6:9a:ca:74:2a:0a:
42:da:fc:2e:e8:a1:92:fe:3a:dd:49:e4:e7:89:8d:
d8:b8:86:0e:3d:a0:ee:c6:c6:1e:52:16:fa:ac:f7:
bc:eb:ee:e7:fb:46:57:57:ba:29:cd:21:d1:9c:c9:
c3:c9:e9:ee:e0:31:c7:08:cb:91:e2:fe:63:dd:9e:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:38:FA:9C:3B:0A:DE:9B:77:67:56:A2:82:2D:DD:60:7B:8F:FA:43
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Hzj6nDsK3pt3Z1aigi3dYHuP-kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.56.0/21
85.237.192.0/21
85.237.203.0/24
85.237.205.0-85.237.223.255
185.93.32.0/24
185.93.34.0/23
193.109.192.0/21
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:7b:47:85:45:c7:f3:a6:cc:19:83:28:7d:a9:df:fb:11:88:
6e:b2:c7:e1:f2:b0:e3:11:2c:9d:76:42:80:98:c7:61:c7:36:
c7:57:0d:8e:d5:6b:bc:c1:e2:13:39:cf:bc:03:6b:7c:89:d7:
2d:41:9d:e8:16:79:6b:8e:f7:64:81:cb:4d:0b:52:53:7e:8e:
e7:b7:3a:55:82:2e:0e:1e:61:43:66:29:49:da:0e:d9:ae:4d:
71:09:01:ff:a0:c5:47:38:98:6d:e3:65:6c:77:ae:2b:bd:40:
ff:65:d2:5c:cc:f0:1b:08:96:b8:5e:82:67:eb:76:2b:61:4d:
78:2a:83:d0:6c:6b:f7:13:15:60:9d:d9:08:19:75:cf:d4:e5:
3c:40:54:a6:de:10:c8:22:68:35:ae:83:cf:bc:ca:e9:db:93:
55:48:09:ed:8c:37:f5:08:84:ad:b5:16:b2:4a:b4:8c:e3:bd:
e2:8a:2b:37:ab:48:ab:d2:33:46:39:39:1a:5c:16:9a:ea:ec:
ae:b5:92:86:a0:d7:9e:93:30:9b:6e:5e:a5:e3:ac:54:d2:2d:
01:7d:6a:5b:20:93:f2:20:4d:b4:27:ca:77:f3:46:0f:14:05:
83:d7:57:6a:d6:37:2c:d7:a8:7b:3d:7e:f5:e1:fe:fd:53:ec:
ed:c5:70:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:30 2025 by rpki-client