Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/RGFTNDRtz3_Pur3Bgf_PusOhcts.roa
File: RGFTNDRtz3_Pur3Bgf_PusOhcts.roa (raw, json)
Hash identifier: M7g73ZzXqapckenvKcfkMA6UcIvXsKsXAXuDTly30UY=
Subject key identifier: 44:61:53:34:34:6D:CF:7F:CF:BA:BD:C1:81:FF:CF:BA:C3:A1:72:DB
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 060CB5F2
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/RGFTNDRtz3_Pur3Bgf_PusOhcts.roa
Signing time: Fri 01 Jul 2022 00:13:02 +0000
ROA not before: Fri 01 Jul 2022 00:13:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204729
IP address blocks: 85.237.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101496306 (0x60cb5f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jul 1 00:13:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44615334346dcf7fcfbabdc181ffcfbac3a172db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2e:12:80:e8:79:f7:52:2b:03:a9:85:98:6d:
2f:1d:03:d3:af:14:d2:a7:7c:67:3d:19:f5:0d:23:
05:80:9d:ad:de:26:76:bf:11:7f:8f:7c:31:de:5a:
b4:be:75:ae:e3:36:cc:97:93:7d:9b:fd:b4:b0:3e:
06:24:c2:a0:25:9b:89:f4:b2:02:14:ad:21:2f:84:
bf:be:e5:c4:d7:bc:b5:3b:46:bd:5e:d2:d3:ed:d9:
a4:58:e9:15:69:5c:a6:5e:31:14:54:95:87:13:1e:
bc:6f:d5:3b:37:f8:9d:b2:89:d8:11:fa:8b:02:29:
eb:56:43:77:17:a7:ae:00:3b:81:3a:66:d7:19:56:
f1:f2:37:cc:92:63:a4:37:d6:bb:51:55:17:d1:c0:
39:c6:7e:ab:dd:5a:69:b0:38:b8:2d:21:8f:da:af:
a3:44:9d:b7:1c:4a:6f:9c:d0:90:78:34:9d:4d:98:
f3:09:f4:88:83:b0:b0:39:2c:7c:a0:7a:9c:79:d3:
11:5f:c3:ae:d2:b9:aa:07:e2:0d:69:27:3f:5d:12:
ee:d2:e7:46:9a:63:90:0c:00:2c:e6:31:74:4a:22:
16:f6:0e:13:d2:4c:42:02:61:ee:e5:64:18:ab:a9:
e0:ab:4a:28:7c:f9:85:32:0b:54:fa:ff:eb:ef:31:
91:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:61:53:34:34:6D:CF:7F:CF:BA:BD:C1:81:FF:CF:BA:C3:A1:72:DB
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/RGFTNDRtz3_Pur3Bgf_PusOhcts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f1:86:1e:12:1b:0c:2b:df:bd:16:32:e9:bc:92:40:1c:28:
8e:0d:00:0d:f8:89:44:0f:8a:ae:e2:22:dd:3f:6c:47:53:af:
85:c8:05:2b:61:2c:ba:38:93:ac:5b:fd:ba:0c:d4:63:9a:56:
52:49:b2:14:25:1f:84:3c:ab:d9:8a:2d:a3:05:b4:04:88:44:
70:05:12:74:d9:f1:4f:de:24:81:46:d2:63:5d:87:28:11:e5:
f1:86:bd:33:ea:9c:ce:c3:3b:62:0c:be:c6:da:3b:45:3b:7f:
9f:65:e2:75:81:34:a9:20:bd:b3:97:73:16:83:b6:7c:87:32:
27:b6:b0:43:f7:ae:7d:88:cc:64:80:5b:72:41:d1:a2:c3:0c:
86:a1:1f:6a:ed:60:cd:a8:c5:ff:3a:11:c6:ad:e6:4e:b4:1d:
d8:a4:1c:14:2c:86:d0:bc:5c:22:9d:01:c9:ee:85:f2:9a:11:
9f:eb:06:3e:7c:05:71:4f:1a:ad:f5:47:17:b3:c5:34:ef:bd:
ed:93:29:ac:7a:5b:01:d3:b9:77:a1:05:d8:34:ae:93:d4:c5:
11:6f:11:69:66:8a:52:43:06:34:ea:bc:34:30:43:0d:6a:2d:
5e:d8:52:b8:3e:33:98:60:a7:c2:fb:9e:d5:ff:01:28:03:bc:
91:04:78:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org