Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/UbxBaOiMVixhi1kvTKsgPGJU7Y4.roa
File: UbxBaOiMVixhi1kvTKsgPGJU7Y4.roa (raw, json)
Hash identifier: KiXKIK5qpZz6z1q13QQl7aV1eJB2crDIbpvs4H9Xtp8=
Subject key identifier: 51:BC:41:68:E8:8C:56:2C:61:8B:59:2F:4C:AB:20:3C:62:54:ED:8E
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0185770C204E87A6D12E3CCB5FB445678C7A
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/UbxBaOiMVixhi1kvTKsgPGJU7Y4.roa
Signing time: Tue 03 Jan 2023 09:52:41 +0000
ROA not before: Tue 03 Jan 2023 09:52:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 85.237.192.0/21 maxlen: 24
193.109.192.0/21 maxlen: 24
85.237.198.0/24 maxlen: 24
85.237.205.0/24 maxlen: 24
85.237.203.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.237.208.0/20 maxlen: 24
85.237.213.0/24 maxlen: 24
85.237.215.0/24 maxlen: 24
185.93.32.0/24 maxlen: 24
185.93.34.0/23 maxlen: 24
194.169.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:0c:20:4e:87:a6:d1:2e:3c:cb:5f:b4:45:67:8c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 3 09:52:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51bc4168e88c562c618b592f4cab203c6254ed8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:ef:eb:19:8b:2a:db:0c:57:27:47:04:b6:
3c:8d:46:f5:e5:a3:97:f0:c1:89:09:69:78:82:2e:
71:a8:0d:88:2b:77:ef:2e:32:98:55:2f:e9:93:e4:
be:42:0e:3f:25:4d:06:96:f3:2a:db:55:0a:fc:bd:
68:77:76:3d:7f:20:36:3f:41:a7:7a:ff:8f:d0:cb:
5b:87:be:84:21:83:bc:f8:b1:86:e0:9d:08:11:b5:
57:4d:08:c8:ca:c4:a0:49:90:a0:6a:ed:a7:35:39:
20:59:89:60:ce:b5:cd:ee:6d:c9:3d:9c:10:70:a3:
a7:2f:10:14:b4:aa:16:ed:21:9e:81:09:94:a6:ed:
0b:9b:9b:e9:9f:fe:ff:00:b3:89:bb:e7:5c:49:15:
e3:86:4d:d8:62:c6:29:f8:fb:fb:c3:bf:e7:42:ee:
c2:b0:c5:31:5c:91:91:b5:da:ab:48:b2:c6:9e:bc:
93:e3:c0:9e:05:fd:50:cc:76:65:c2:93:96:e5:60:
93:ec:f5:cf:10:f6:d8:a6:3a:f0:25:20:a1:6c:44:
04:09:7f:32:0b:e4:61:57:25:1f:a6:bc:02:14:ef:
db:0e:3b:95:92:93:ce:dc:35:9f:d9:86:15:2d:d6:
d2:dc:48:a9:66:3d:05:1f:32:f5:63:f4:1d:fa:7f:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BC:41:68:E8:8C:56:2C:61:8B:59:2F:4C:AB:20:3C:62:54:ED:8E
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/UbxBaOiMVixhi1kvTKsgPGJU7Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
85.237.192.0/21
85.237.203.0/24
85.237.205.0/24
85.237.208.0/20
185.93.32.0/24
185.93.34.0/23
193.109.192.0/21
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ec:a2:ba:2a:96:d8:30:c0:a9:89:50:6e:d3:9f:a1:35:5d:
e0:17:1d:1c:8e:98:c4:fb:00:68:57:49:99:8f:5a:e5:56:82:
cc:f2:a0:75:29:01:15:62:68:a2:60:ce:87:90:08:c7:35:98:
df:52:cf:0f:16:6c:05:a1:cc:a1:66:c5:86:14:a8:ad:01:c3:
eb:b2:c6:d0:1f:7a:d6:93:45:a5:55:9d:02:5b:b0:d3:93:e6:
6e:25:61:f9:7f:48:44:76:88:64:d5:31:85:75:6a:db:d0:9f:
99:a9:9e:7e:09:01:e3:c9:d3:17:80:6e:6d:00:db:ab:f5:db:
c4:1a:c0:b3:64:dc:c0:fa:2d:8b:09:cc:3d:68:f3:4e:d3:99:
3e:80:82:af:73:ab:f1:4a:b3:5c:18:d7:5a:38:78:d1:1b:e2:
4f:3c:cd:3f:e2:95:b2:79:00:a9:1a:48:3c:e7:4e:92:e6:3e:
f7:a6:76:73:50:12:4d:69:ce:30:e4:92:68:32:d6:c7:c0:04:
18:65:70:89:5e:db:af:08:2a:60:bb:b0:8b:be:9c:8d:79:a3:
eb:22:66:23:c5:97:72:fe:4a:b4:ce:f2:a7:42:59:17:10:19:
49:02:dc:fb:b0:b9:81:2f:0a:18:e5:41:a8:7e:61:ff:b3:a8:
da:f3:e3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:43 2024 by rpki-client on console-ams.rpki-client.org