Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Zm_oLUD4lybrO5lo0RTE5hF5_0M.roa
File: Zm_oLUD4lybrO5lo0RTE5hF5_0M.roa (raw, json)
Hash identifier: fD9P5JQYF7a/Jm5/w6iunTgtOgfW2zsKcU1ZBTkcC2o=
Subject key identifier: 66:6F:E8:2D:40:F8:97:26:EB:3B:99:68:D1:14:C4:E6:11:79:FF:43
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01851855346888FD7F415654371DA11B2002
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Zm_oLUD4lybrO5lo0RTE5hF5_0M.roa
Signing time: Fri 16 Dec 2022 00:28:35 +0000
ROA not before: Fri 16 Dec 2022 00:28:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 85.237.217.0/24 maxlen: 24
85.237.221.0/24 maxlen: 24
85.237.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:18:55:34:68:88:fd:7f:41:56:54:37:1d:a1:1b:20:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Dec 16 00:28:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=666fe82d40f89726eb3b9968d114c4e61179ff43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:e4:47:3e:42:01:ce:8e:a0:7e:44:40:93:
f5:69:d0:82:8b:63:23:78:3b:f5:e9:0d:b6:8f:91:
8d:c4:1d:d6:2f:24:32:fd:18:c5:df:15:bb:4c:8b:
3e:79:70:b4:b8:1a:2c:01:ed:62:49:68:72:a0:79:
3a:9d:65:16:7b:60:64:a9:5a:7a:be:7f:c3:19:f9:
bc:c1:98:3c:32:09:2c:57:66:99:10:92:da:89:3a:
53:3e:6e:91:d5:a7:cd:c9:03:51:1e:ee:b3:1a:da:
5c:05:44:54:74:5f:e3:30:31:37:79:b3:23:9f:c6:
49:a2:25:0c:a0:93:03:2a:cc:98:2b:48:e5:5b:9a:
1f:99:ae:d6:74:6d:92:b5:7e:cb:12:c3:f6:38:72:
7a:cd:c1:86:27:4f:93:df:e8:34:83:08:c1:46:a3:
04:24:d2:96:61:da:c3:14:13:67:68:cf:f0:57:1a:
05:d2:49:b9:0b:a3:ad:dd:92:0c:b3:6d:91:77:e4:
ae:ef:9b:22:99:4d:b5:b1:6d:41:8a:03:66:1c:73:
02:89:b5:15:98:a7:bc:d2:41:e2:1e:a5:38:16:ab:
8f:87:55:05:13:ce:0d:d0:02:22:35:80:c9:ed:9e:
7a:4a:76:52:cf:db:47:d2:c1:c1:07:11:6d:0c:93:
56:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6F:E8:2D:40:F8:97:26:EB:3B:99:68:D1:14:C4:E6:11:79:FF:43
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/Zm_oLUD4lybrO5lo0RTE5hF5_0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.217.0/24
85.237.220.0/23
Signature Algorithm: sha256WithRSAEncryption
73:54:9a:fe:14:54:df:14:ce:b8:7d:26:ff:97:92:7a:82:c0:
fc:dd:17:ab:71:63:85:2b:ef:c9:1f:ae:69:16:f7:6c:a0:bf:
ca:63:26:56:72:c2:55:d2:f3:16:86:26:e4:de:08:dd:e1:75:
ac:32:ba:ad:a3:cd:b6:e3:eb:08:1d:b4:ff:9a:56:de:32:5b:
b4:66:8a:a5:51:19:55:d5:41:f9:58:e7:c9:48:18:6f:cd:e0:
71:45:37:9b:d7:e7:0f:e1:c0:e8:6d:00:b9:ce:5c:88:19:b8:
bf:ab:cf:ed:47:1b:c6:44:e6:57:c5:68:f2:4d:7e:93:36:65:
fd:d9:9f:d6:2d:75:0b:d1:c6:35:7f:19:ba:c0:b9:65:56:60:
25:a0:0c:86:43:80:b1:fe:e7:cb:94:21:d5:50:8d:63:34:5c:
07:27:44:ca:f0:18:31:42:da:75:d5:06:05:76:10:6e:c7:a6:
e0:9b:d8:68:a2:8c:a9:a1:e3:ba:1f:87:7a:5e:74:db:8d:65:
d9:bf:c6:54:35:4f:a1:a1:12:ae:92:76:93:eb:5a:10:c2:00:
63:89:dc:58:1d:ad:2f:99:25:d7:c4:46:d5:e8:08:8f:63:c8:
c3:65:6e:58:90:a4:ce:b5:e7:70:fb:78:dc:f4:3d:43:6d:64:
a6:0b:af:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:08 2025 by rpki-client