Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/XLDNjeWhqQl1K58OSc5KF0T9AU4.roa
File: XLDNjeWhqQl1K58OSc5KF0T9AU4.roa (raw, json)
Hash identifier: HGJR7yliYZeOTm1dhD29pmJWyrRnefMtZIzUqkP/jgc=
Subject key identifier: 5C:B0:CD:8D:E5:A1:A9:09:75:2B:9F:0E:49:CE:4A:17:44:FD:01:4E
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0185770DF586CF09291D7DE06284A548573F
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/XLDNjeWhqQl1K58OSc5KF0T9AU4.roa
Signing time: Tue 03 Jan 2023 09:54:41 +0000
ROA not before: Tue 03 Jan 2023 09:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 85.237.195.0/24 maxlen: 24
185.93.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:0d:f5:86:cf:09:29:1d:7d:e0:62:84:a5:48:57:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 3 09:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cb0cd8de5a1a909752b9f0e49ce4a1744fd014e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:73:3f:94:8e:2a:9b:3b:91:48:ff:b9:7f:1b:
c5:99:bd:0e:db:20:24:bd:6d:cd:f4:44:2a:6e:57:
d1:b6:d8:08:66:8e:fb:5d:db:d7:52:f0:40:49:a8:
1c:ee:53:ee:5a:b4:10:66:1c:f9:fc:0d:41:44:9b:
ea:b4:e4:b8:06:c8:e1:5c:3e:e7:5b:db:53:2b:ab:
9e:f2:16:54:c8:87:b9:76:5a:5a:bb:f7:52:5b:b2:
53:67:25:a9:bf:bb:95:60:89:8d:76:ce:f9:8a:d8:
18:85:96:45:14:46:69:ab:a6:60:ae:81:88:af:5c:
2f:b0:de:93:5e:2a:fb:8e:f5:f7:ca:4b:d7:56:09:
a9:14:f2:da:1f:05:20:f8:0a:24:ed:2a:d2:69:91:
dc:bc:cd:2d:39:42:a0:3c:9e:91:d3:5b:9c:68:ca:
92:75:24:8b:38:7d:94:b0:a0:9c:6b:bd:30:e6:48:
c0:39:eb:5a:29:c3:55:dc:cc:f2:f1:63:ed:c6:4b:
79:d7:af:64:f7:e6:45:a6:34:8f:a2:6f:3f:09:9f:
38:04:a2:a6:fe:e8:bd:0a:ac:66:71:b3:eb:e0:a1:
7d:ec:a7:8f:56:a6:53:ac:dc:36:5c:4e:57:eb:17:
40:4a:58:7b:1a:ff:34:70:59:2b:71:92:a9:eb:7b:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B0:CD:8D:E5:A1:A9:09:75:2B:9F:0E:49:CE:4A:17:44:FD:01:4E
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/XLDNjeWhqQl1K58OSc5KF0T9AU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.195.0/24
185.93.34.0/23
Signature Algorithm: sha256WithRSAEncryption
31:36:95:81:20:f3:67:2c:2b:76:1e:40:a3:33:17:59:ef:d4:
5d:d4:90:ff:fa:cb:42:49:8a:5a:61:3c:59:54:cd:d8:f4:f0:
59:d8:35:57:68:6f:44:9a:8e:40:10:90:60:01:cb:c5:82:4d:
a4:db:b4:1f:8e:df:4d:64:05:89:6d:99:38:82:75:69:6c:56:
ef:f8:d3:dc:3c:70:80:00:47:e7:15:62:d5:7e:d4:69:27:54:
52:e4:de:6d:67:af:27:18:73:32:00:f0:1e:95:af:ab:1d:fe:
6f:f8:10:fe:56:36:9e:1b:5a:33:a7:88:c6:0d:29:ae:ea:7f:
b2:74:aa:36:33:24:48:7a:c7:a7:a6:e2:37:6d:e3:de:3c:59:
26:4d:af:bd:73:15:fc:77:82:0a:79:50:a4:67:48:fa:7a:15:
03:67:fb:c1:13:a8:49:62:e4:b6:f4:49:e5:58:55:99:cb:17:
39:3d:ec:f2:20:be:eb:92:3e:99:0d:0e:46:3b:18:9d:34:25:
94:c0:6f:cb:f9:03:99:5c:71:7e:c8:73:8c:b4:39:22:97:53:
c3:52:0a:0f:f5:aa:51:77:e0:ff:7a:b2:62:df:98:ee:fd:d8:
38:49:2f:f3:9a:fe:fb:93:2b:73:68:ac:db:ad:70:23:15:5e:
4e:9f:38:4d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYV3DfWGzwkpHX3gYoSlSFc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MGI2NzM2OGM5MWI4NWU4NDg4OGM1ZWQyZTgyNGQxMzkw
ODEwYmIwHhcNMjMwMTAzMDk1NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2IwY2Q4ZGU1YTFhOTA5NzUyYjlmMGU0OWNlNGExNzQ0ZmQwMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnM/lI4qmzuRSP+5fxvFmb0O2yAk
vW3N9EQqblfRttgIZo77XdvXUvBASagc7lPuWrQQZhz5/A1BRJvqtOS4BsjhXD7n
W9tTK6ue8hZUyIe5dlpau/dSW7JTZyWpv7uVYImNds75itgYhZZFFEZpq6ZgroGI
r1wvsN6TXir7jvX3ykvXVgmpFPLaHwUg+Aok7SrSaZHcvM0tOUKgPJ6R01ucaMqS
dSSLOH2UsKCca70w5kjAOetaKcNV3Mzy8WPtxkt5169k9+ZFpjSPom8/CZ84BKKm
/ui9CqxmcbPr4KF97KePVqZTrNw2XE5X6xdASlh7Gv80cFkrcZKp63sf0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFywzY3loakJdSufDknOShdE/QFOMB8GA1UdIwQY
MBaAFDkLZzaMkbhehIiMXtLoJNE5CBC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYt
NWM5ZDYyNjI5Yzg2LzEvWExETmplV2hxUWwxSzU4T1NjNUtGMFQ5QVU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYtNWM5ZDYyNjI5Yzg2
LzEvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVe3DAwQB
uV0iMA0GCSqGSIb3DQEBCwUAA4IBAQAxNpWBIPNnLCt2HkCjMxdZ79Rd1JD/+stC
SYpaYTxZVM3Y9PBZ2DVXaG9Emo5AEJBgAcvFgk2k27Qfjt9NZAWJbZk4gnVpbFbv
+NPcPHCAAEfnFWLVftRpJ1RS5N5tZ68nGHMyAPAela+rHf5v+BD+VjaeG1ozp4jG
DSmu6n+ydKo2MyRIesenpuI3bePePFkmTa+9cxX8d4IKeVCkZ0j6ehUDZ/vBE6hJ
YuS29EnlWFWZyxc5PezyIL7rkj6ZDQ5GOxidNCWUwG/L+QOZXHF+yHOMtDkil1PD
UgoP9apRd+D/erJi35ju/dg4SS/zmv77kytzaKzbrXAjFV5OnzhN
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org