Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/PW2oSyQv6hPq9N5-CzfoaL0MlGY.roa
File: PW2oSyQv6hPq9N5-CzfoaL0MlGY.roa (raw, json)
Hash identifier: NNz34Iqgj5KWwkiqLXU7QEMnhq8Ndk9moUKezKwTfdM=
Subject key identifier: 3D:6D:A8:4B:24:2F:EA:13:EA:F4:DE:7E:0B:37:E8:68:BD:0C:94:66
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0185BC3E66AE86CAA481F5E8EE4D5E0989A2
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/PW2oSyQv6hPq9N5-CzfoaL0MlGY.roa
Signing time: Mon 16 Jan 2023 20:21:24 +0000
ROA not before: Mon 16 Jan 2023 20:21:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 85.237.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bc:3e:66:ae:86:ca:a4:81:f5:e8:ee:4d:5e:09:89:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 16 20:21:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d6da84b242fea13eaf4de7e0b37e868bd0c9466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c5:8d:9a:98:f4:3b:06:08:1a:2e:f3:89:db:
7c:5b:ae:20:2b:e6:7d:84:a8:7c:d3:cb:b1:16:5b:
62:be:9f:ae:e6:a8:83:31:e0:1d:b4:5b:0b:40:93:
98:e2:db:8d:11:da:ab:f1:e7:71:2f:f7:f6:0f:87:
bb:ec:e3:09:70:dc:b4:9a:0b:fb:92:c6:f5:c7:0b:
10:1d:bd:c2:33:92:62:0b:b6:0b:69:ee:fd:a2:48:
99:74:1d:3b:2d:3d:23:07:d3:c5:ca:03:c6:81:68:
4c:0d:4c:bc:80:f3:7e:6a:84:cc:7b:dc:f9:23:3a:
fe:05:8c:65:1d:c9:54:55:fb:28:4d:0e:c3:82:eb:
22:6b:06:ea:f2:49:a5:ac:14:0b:9a:c0:a0:83:80:
57:0f:70:c2:43:ef:bd:97:f5:94:f5:b3:7a:6b:ab:
34:76:30:e7:80:20:94:82:04:f6:3f:a2:07:ed:46:
cd:40:10:42:cf:8e:1c:1c:bd:de:83:6a:01:0f:86:
4f:10:c4:5b:8f:ea:dc:e1:e3:cc:bd:dd:1f:52:75:
cf:82:69:99:e5:e4:03:af:b2:80:44:7e:88:50:39:
80:73:2b:fd:27:95:28:9e:aa:98:64:66:31:52:40:
e3:23:35:c3:ec:f7:ed:7c:7a:bf:6d:2e:38:74:c4:
d0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6D:A8:4B:24:2F:EA:13:EA:F4:DE:7E:0B:37:E8:68:BD:0C:94:66
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/PW2oSyQv6hPq9N5-CzfoaL0MlGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.202.0/24
Signature Algorithm: sha256WithRSAEncryption
03:27:1e:17:e6:79:ce:c2:26:2d:d5:3f:12:2c:f6:09:f7:32:
fd:16:06:86:45:74:95:c9:0d:e2:d3:d6:88:aa:12:08:79:99:
f0:47:7d:7d:a3:0a:d6:e4:46:9a:20:45:61:3f:b5:b8:2e:04:
9a:07:6a:5d:59:fc:49:97:f3:90:9c:a9:17:55:0d:c7:18:2c:
1a:d5:95:85:ab:1c:0f:ac:06:10:52:54:86:34:ff:2a:82:16:
68:97:39:77:0b:27:aa:20:a1:b5:65:b1:86:98:f3:bb:73:5f:
3e:fa:aa:b3:ab:5e:69:07:53:86:d8:fc:2b:14:8b:19:48:67:
5c:c1:93:32:5c:23:7f:0d:04:9c:86:43:94:fc:45:8f:19:26:
81:9e:0b:1c:2a:7c:95:3f:c6:4d:d8:df:1e:2a:8d:90:69:27:
13:e7:f5:c5:71:99:7b:43:92:66:69:5b:e6:7b:36:29:cb:58:
50:11:a2:9d:bc:f2:40:2d:7c:8b:51:1b:cd:b0:d9:97:23:9a:
6e:af:6f:2d:36:56:e9:db:c0:ad:41:75:2a:4a:4e:32:60:43:
c7:5c:b7:e7:cb:73:01:3f:fc:62:6a:0f:76:8f:1a:6e:00:5a:
98:17:bc:17:f0:83:e8:73:6e:12:86:79:7b:fc:d7:e8:54:ce:
d1:74:e0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:46 2024 by rpki-client on console-fra.rpki-client.org