Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/MzSqFhSGSU7J4z87Jqk5ggHYZCo.roa
File: MzSqFhSGSU7J4z87Jqk5ggHYZCo.roa (raw, json)
Hash identifier: MmqpjvT+xqQeSm9ZujbwkfOQDLeOZIgWdswKowDvOfY=
Subject key identifier: 33:34:AA:16:14:86:49:4E:C9:E3:3F:3B:26:A9:39:82:01:D8:64:2A
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01849F2F6F7791F3EA6583C5F3196AAD6944
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/MzSqFhSGSU7J4z87Jqk5ggHYZCo.roa
Signing time: Tue 22 Nov 2022 11:53:16 +0000
ROA not before: Tue 22 Nov 2022 11:53:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207429
IP address blocks: 85.237.209.0/24 maxlen: 24
85.237.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:2f:6f:77:91:f3:ea:65:83:c5:f3:19:6a:ad:69:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Nov 22 11:53:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3334aa161486494ec9e33f3b26a9398201d8642a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:81:5c:6a:66:0d:5f:43:79:04:7f:59:0a:
ee:02:74:08:2b:93:79:69:aa:18:a8:a9:97:cd:07:
c5:33:cb:89:71:71:cd:3c:9d:94:92:fd:01:93:b2:
b8:36:9b:73:8a:6c:69:f2:6c:dc:0b:c1:b3:70:bb:
4a:c3:cd:df:4c:d3:37:c3:11:88:72:4a:c8:4e:19:
37:58:0d:74:32:79:c4:3b:0e:6f:0d:74:97:72:c9:
58:7c:f8:32:5c:cf:58:81:df:e7:a5:ac:c9:1e:42:
ee:98:05:37:38:c1:4c:ac:46:ab:ce:83:8f:60:dc:
5b:9d:b6:e4:52:6f:7e:c9:de:87:fa:56:80:1f:ef:
03:f8:36:70:d9:06:56:bb:d2:eb:c4:da:0c:e1:d1:
f7:9a:7a:9c:b6:bd:a5:16:92:fc:82:34:9b:23:d0:
b1:10:50:1c:2f:b9:c6:4b:1b:85:e6:15:29:5c:a0:
eb:e8:41:ac:45:bc:87:f5:e8:7b:2c:b4:32:1e:12:
22:7a:ce:3f:a5:63:05:f8:1e:5f:bd:37:f9:37:7a:
ea:ac:ef:98:4f:28:3f:d8:24:a5:63:30:02:76:4e:
c2:a3:2b:50:32:72:13:71:23:cb:34:9e:79:f5:3d:
fd:43:a6:7f:d4:ad:a2:82:e7:60:26:b2:ef:5f:51:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:34:AA:16:14:86:49:4E:C9:E3:3F:3B:26:A9:39:82:01:D8:64:2A
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/MzSqFhSGSU7J4z87Jqk5ggHYZCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.209.0/24
85.237.217.0/24
Signature Algorithm: sha256WithRSAEncryption
96:fe:7a:68:b4:9d:78:22:39:ab:01:90:10:d8:49:60:76:5d:
8e:7b:c6:f1:e8:76:15:3c:6d:59:17:19:d1:c3:8c:7f:1b:5b:
48:c2:70:26:87:99:8f:4b:e5:14:0f:e7:48:8b:81:e9:0c:cc:
df:a6:59:5e:e9:11:34:26:b5:b5:ec:71:2a:cd:3a:97:6e:5c:
33:16:da:1a:c9:e1:a6:51:dc:f6:8f:e1:6c:73:48:44:3d:96:
30:f4:58:eb:17:c9:46:e4:50:c7:cb:d2:6f:5a:6e:3e:20:51:
3e:37:28:bf:21:51:8d:7f:1f:cb:98:c8:04:c7:00:02:52:d7:
a2:f0:ad:9b:3b:3c:91:72:03:a3:43:7d:1f:25:75:66:b8:17:
44:0b:dd:a0:8a:e3:a4:93:a6:c7:6a:7f:72:a7:bb:cf:1d:8f:
94:4a:15:ef:8a:ee:c3:e7:20:e3:0c:6a:f1:c8:0a:d0:b4:e3:
c6:85:f0:95:89:3f:2d:10:71:1d:e9:76:94:95:51:0e:86:9e:
d5:6d:b6:c9:42:01:0f:e1:2d:a7:65:11:36:41:6f:83:32:f0:
87:0f:62:27:bb:03:97:8a:49:92:f4:33:b6:22:fd:bb:55:cc:
af:57:63:eb:b5:c0:53:77:65:65:0e:06:b9:e1:03:4d:d9:b1:
01:f1:85:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:43 2024 by rpki-client on console-ams.rpki-client.org