Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/XlwfqmD7e3MSl0SpunNg6cMFuKM.roa
File: XlwfqmD7e3MSl0SpunNg6cMFuKM.roa (raw, json)
Hash identifier: nGfZjgugCOx+Xv4R/s17QLCJ2pPHvcErUVMjYU5ksW4=
Subject key identifier: 5E:5C:1F:AA:60:FB:7B:73:12:97:44:A9:BA:73:60:E9:C3:05:B8:A3
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01880FC1F53CAA27C7DB04EF91C70B04301D
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/XlwfqmD7e3MSl0SpunNg6cMFuKM.roa
Signing time: Fri 12 May 2023 11:39:09 +0000
ROA not before: Fri 12 May 2023 11:39:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.237.206.0/24 maxlen: 24
85.237.207.0/24 maxlen: 24
85.237.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:c1:f5:3c:aa:27:c7:db:04:ef:91:c7:0b:04:30:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: May 12 11:39:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e5c1faa60fb7b73129744a9ba7360e9c305b8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:01:f5:41:5d:cc:78:94:cc:6f:bf:2a:b8:
7d:20:d8:e7:7c:22:9a:89:b4:da:eb:63:69:5c:14:
28:e8:3d:20:1d:08:76:be:a0:3b:f2:38:bd:e5:45:
2a:17:18:22:61:28:2d:54:b6:78:c2:e2:45:e4:9e:
9e:c5:cc:c6:90:18:62:66:3c:90:ed:ba:70:ec:3d:
f2:79:6a:2a:b7:b7:28:fa:e7:30:22:0d:3a:f0:7b:
1f:e4:4e:4f:bd:06:63:cb:b6:15:ac:94:f3:d5:d9:
de:5d:87:e6:62:fd:cb:6d:59:dd:36:ec:1b:da:2f:
55:aa:80:e4:ca:29:0e:a9:1d:d5:c3:6e:ed:67:9e:
44:93:ae:6a:64:d6:c2:56:67:ac:7e:9f:23:8a:91:
c6:19:c4:d2:e8:e9:be:d0:ec:f7:1a:3d:35:a5:09:
1c:67:c4:9b:cb:b8:45:38:15:90:bf:53:2c:1a:f8:
7f:96:88:86:f1:a8:5f:e9:62:db:f0:d2:0d:f4:11:
39:c0:8a:47:d3:37:b2:d2:0d:c5:d6:a1:b4:eb:22:
6e:3d:f1:03:89:53:ac:67:12:3c:b2:24:32:28:1c:
6f:ef:a7:15:7f:00:7d:37:27:75:02:b8:f7:b2:47:
a5:b3:3c:53:c5:be:64:3c:c4:50:5b:54:bb:c9:6e:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5C:1F:AA:60:FB:7B:73:12:97:44:A9:BA:73:60:E9:C3:05:B8:A3
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/XlwfqmD7e3MSl0SpunNg6cMFuKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.206.0/23
85.237.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6e:b1:65:d4:5a:bb:e8:6e:d5:2f:4a:33:75:a2:50:21:76:
17:86:88:8c:c4:3d:9a:37:15:a6:29:15:4b:6a:b9:29:56:8d:
9d:83:72:5f:a9:f3:a0:43:d6:2b:7f:35:92:49:02:6d:2a:a9:
4b:90:2e:80:66:b3:c4:e6:a9:20:b9:4e:8e:43:a2:68:fc:df:
95:c5:11:31:68:d6:4e:66:55:8f:49:d0:7d:c5:f2:57:da:a1:
e1:19:9f:6c:03:82:20:3b:7e:3d:5c:25:ad:73:81:57:95:59:
8c:51:5b:f3:5c:e2:1e:d2:36:e3:e9:94:54:2b:18:ae:05:43:
22:52:13:e3:d0:1d:9a:ed:16:2f:4f:78:bf:90:ac:12:12:69:
ab:52:b7:c0:bb:49:5d:7d:90:21:8a:fe:0f:cd:4d:1f:f5:1b:
74:0a:3f:27:9e:af:4a:f6:5f:bd:5d:13:cd:09:b7:a1:76:ec:
a1:fc:01:cd:11:92:e0:90:33:79:69:74:5b:81:46:9c:a6:5b:
bb:6a:68:1f:dc:db:77:c5:96:47:c4:d7:f7:c4:30:48:a1:ea:
b3:be:18:c7:d6:23:1e:76:5b:37:46:d8:bf:eb:c6:86:bd:34:
84:1c:9b:9a:ed:b3:4b:d9:c5:6e:cd:96:ab:d4:37:54:49:8e:
7c:c6:b0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:43 2024 by rpki-client on console-ams.rpki-client.org