Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/PMJD8CgWr3Y8WIVVvjPQltLhrn4.roa
File: PMJD8CgWr3Y8WIVVvjPQltLhrn4.roa (raw, json)
Hash identifier: 5uoJjyo48lyA/THjdQmbHt6Eyx/ZwApvU57B1vCmAUA=
Subject key identifier: 3C:C2:43:F0:28:16:AF:76:3C:58:85:55:BE:33:D0:96:D2:E1:AE:7E
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01856223F59D2D1A2359E8A11EE6A2875E64
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/PMJD8CgWr3Y8WIVVvjPQltLhrn4.roa
Signing time: Fri 30 Dec 2022 08:26:41 +0000
ROA not before: Fri 30 Dec 2022 08:26:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49999
IP address blocks: 85.237.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:23:f5:9d:2d:1a:23:59:e8:a1:1e:e6:a2:87:5e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Dec 30 08:26:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cc243f02816af763c588555be33d096d2e1ae7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:40:ae:65:98:a7:05:aa:8f:2e:58:67:c9:75:
13:e5:49:80:9d:31:60:1f:fe:43:65:0d:a6:03:d9:
39:86:40:02:f1:a4:aa:cb:7e:d8:b9:6c:e0:4c:e9:
18:f8:df:93:24:56:d8:f1:96:d8:b3:59:d5:b7:88:
d8:3e:c9:e4:c1:f1:2f:5d:be:34:30:54:9e:e2:1c:
67:48:dc:86:95:40:e5:c1:4b:f2:6e:87:c2:88:54:
a0:1f:db:a2:a3:3f:74:9a:c9:b4:4a:1b:59:09:62:
c3:b6:c4:67:aa:75:1d:d0:93:a3:b1:a4:ba:1d:f8:
ba:45:d5:24:07:54:e2:2a:a1:7d:d7:d7:f2:81:ca:
c2:b5:1c:38:17:7e:61:cb:d6:f6:a5:e8:c1:ae:4f:
93:ff:97:21:72:e1:48:c4:df:34:1b:9d:9b:18:46:
d7:c3:e3:0a:cd:bd:22:7c:24:74:be:ff:23:bb:6e:
8e:a2:d0:c3:34:fb:d6:62:0a:b0:1e:1d:4f:0a:dc:
b3:46:f4:e9:08:99:a2:4b:52:59:69:4a:87:c3:0a:
c8:55:9d:94:d3:ef:90:75:bc:bd:73:49:07:51:b5:
b0:b3:27:5e:9d:57:03:2c:21:1b:dc:9b:5c:1e:d2:
e5:7d:0c:ac:99:20:8f:16:88:76:38:3d:dc:e6:07:
be:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C2:43:F0:28:16:AF:76:3C:58:85:55:BE:33:D0:96:D2:E1:AE:7E
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/PMJD8CgWr3Y8WIVVvjPQltLhrn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.199.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:75:3b:d1:42:fc:2c:25:4e:bd:40:cb:91:39:b6:3b:6c:be:
9d:37:c4:98:6d:f4:8d:da:26:33:3b:dd:6e:f1:78:d6:cb:df:
98:9e:2f:fc:fe:ec:57:f3:c9:b6:04:eb:41:16:2f:7d:00:0f:
0a:3f:d3:28:30:8f:6e:2e:23:c6:06:48:48:7f:86:b4:5e:57:
03:7f:d0:c8:e2:26:ad:e4:bf:dc:80:6d:cf:10:e0:f8:ef:10:
ec:82:06:1f:f7:ed:5a:34:74:2c:be:71:8e:77:e6:05:a8:e5:
e1:c4:af:d1:f3:e2:63:fc:b4:8d:75:c0:69:c7:af:ab:1e:3f:
28:4b:66:52:00:df:68:d8:a0:38:b6:60:0d:a6:e2:f7:d5:bd:
6c:c7:70:b6:fa:14:8a:b6:fa:7f:9a:3e:3c:1e:d7:cf:cc:c6:
b4:1a:7b:d8:d3:80:19:d6:50:fc:f2:9a:c2:c0:7f:e4:38:19:
ee:94:fa:96:2b:e9:af:c3:7a:4d:63:33:0c:a8:bc:af:48:03:
69:59:8b:66:05:39:cb:48:2d:88:a3:d2:52:90:7f:55:d0:9f:
08:d2:64:e7:f9:32:0f:d7:ae:79:b5:ec:b7:78:a7:2b:19:0e:
6f:3e:52:9a:b9:7d:d7:ad:67:04:cd:c0:bd:c0:30:6b:cb:f2:
c5:20:ca:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:31 2025 by rpki-client