Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/J3vFUJBwAdbYPiomo_nUgjMRqKg.roa
File: J3vFUJBwAdbYPiomo_nUgjMRqKg.roa (raw, json)
Hash identifier: 68YPzsSMsexpuWPv2fLO0+YmgH0NvRu1hdAHLBfYUlU=
Subject key identifier: 27:7B:C5:50:90:70:01:D6:D8:3E:2A:26:A3:F9:D4:82:33:11:A8:A8
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0184E4E5FD79A4663C1C1A89B74058F55B41
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/J3vFUJBwAdbYPiomo_nUgjMRqKg.roa
Signing time: Tue 06 Dec 2022 00:46:28 +0000
ROA not before: Tue 06 Dec 2022 00:46:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 85.237.198.0/24 maxlen: 24
85.158.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e4:e5:fd:79:a4:66:3c:1c:1a:89:b7:40:58:f5:5b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Dec 6 00:46:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=277bc550907001d6d83e2a26a3f9d4823311a8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:88:55:11:cb:08:0b:ac:09:ee:bf:d3:0e:4c:
c0:15:18:0a:af:97:82:ed:a8:93:95:b8:00:00:09:
22:e1:1b:a8:63:a8:03:25:6e:86:58:5d:09:2a:c9:
d6:09:08:14:66:d3:88:e6:39:1b:a3:72:e2:55:a3:
c5:0d:94:fd:47:f0:61:cf:69:f2:3c:4b:9d:06:d1:
20:7a:c0:f3:81:d1:b6:8d:e1:53:4c:3b:03:d3:ae:
26:ef:b3:0e:5a:e1:15:03:8b:88:78:d2:c0:2e:9b:
bb:f3:9f:70:23:4c:54:8c:ac:89:c6:13:d1:f4:eb:
11:2c:28:88:04:16:ab:e8:0e:eb:ae:ee:5c:90:07:
04:e4:25:39:3c:41:f1:f4:50:5b:14:20:84:15:6d:
1c:53:ab:a4:ce:5c:e0:3e:b1:8e:9a:54:82:b9:9a:
cb:2a:5c:a4:c9:0a:20:c3:10:70:78:3c:37:af:5b:
c3:d9:3b:eb:dd:fd:a5:03:45:df:76:7f:30:72:fa:
cb:df:3c:6c:1c:d8:f1:37:43:0c:4a:8e:2a:18:70:
66:ab:f8:b2:6b:bb:09:b1:2e:04:90:82:1b:10:9c:
80:72:56:6c:a5:54:58:6e:4a:8b:89:cd:3e:ca:15:
76:cd:54:50:a1:72:bd:4c:bb:4a:bc:c5:e3:94:e0:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7B:C5:50:90:70:01:D6:D8:3E:2A:26:A3:F9:D4:82:33:11:A8:A8
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/J3vFUJBwAdbYPiomo_nUgjMRqKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.60.0/24
85.237.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:03:11:57:6e:d4:de:ca:53:04:33:b4:42:4a:99:12:f2:4c:
43:d5:bd:3d:eb:e9:a4:af:76:e9:a2:a2:e1:e1:32:75:47:bc:
88:ca:cd:70:2d:57:6e:3d:83:7d:b9:51:40:b4:e0:7d:43:84:
87:28:5b:7a:49:d4:f8:93:80:5b:38:6a:cc:14:a4:ab:bd:2d:
7b:ed:3b:2b:69:41:49:4e:9d:93:d4:8d:46:d4:a6:79:0b:12:
d7:20:67:c0:4c:50:99:4f:5c:85:6d:09:56:50:df:45:1d:e8:
e9:c5:38:4b:b0:dd:72:b2:22:24:d1:c6:b5:a2:9b:ca:82:07:
78:fb:09:0a:69:a4:2d:92:3a:f2:92:28:79:d6:1f:fe:1f:74:
3c:e0:20:40:f7:0e:78:69:31:7c:e5:7d:34:5f:7c:ff:06:aa:
5e:8e:d8:84:7a:a2:5b:d8:74:d4:ad:2d:5c:6e:65:2a:03:9f:
4a:3d:43:c7:e5:6d:3e:30:b4:63:1f:58:95:6b:e3:01:a5:10:
f9:d2:ed:bc:2b:1a:70:90:3b:d2:0a:db:d8:b7:9b:7d:ca:ea:
c6:61:53:13:87:68:b9:95:b2:ca:8e:07:53:fd:62:62:03:11:
d8:35:5f:5a:f5:9c:a0:d8:63:e0:66:78:1f:58:c1:ad:8f:d3:
f3:fe:d5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:46 2024 by rpki-client on console-fra.rpki-client.org