Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/_hVxQa_4-snWzvXNuY6YzoUdZ20.roa
File: _hVxQa_4-snWzvXNuY6YzoUdZ20.roa (raw, json)
Hash identifier: 74/S0JpWhpgDUXb8+bv4oPcuafkRt92htvwlfUdbBYs=
Subject key identifier: FE:15:71:41:AF:F8:FA:C9:D6:CE:F5:CD:B9:8E:98:CE:85:1D:67:6D
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 043E9820
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/_hVxQa_4-snWzvXNuY6YzoUdZ20.roa
Signing time: Sat 01 Jan 2022 00:50:49 +0000
ROA not before: Sat 01 Jan 2022 00:50:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209181
IP address blocks: 85.237.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71211040 (0x43e9820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 1 00:50:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe157141aff8fac9d6cef5cdb98e98ce851d676d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:78:0c:f5:ff:be:7e:11:c3:8c:d5:08:df:
16:57:26:98:56:a3:94:14:85:72:f6:73:e9:56:63:
2c:2b:23:d7:78:ba:bc:d2:f9:fb:41:00:e1:12:b0:
13:1b:f9:b7:fa:50:68:16:49:4d:3d:e9:a2:84:b5:
03:6d:49:06:33:15:b8:43:f9:f2:38:3e:f8:fc:16:
1f:d3:8e:2c:7b:f5:8b:87:84:9e:05:e7:48:0d:6c:
09:29:9f:91:cf:9b:a0:46:80:ce:be:a4:f5:8e:de:
5f:24:6d:90:d0:36:3e:58:2c:bc:05:28:b7:cc:0a:
62:41:39:02:50:94:99:bd:94:5b:27:ec:53:28:38:
c8:d3:79:66:c6:b0:b3:7b:89:cc:35:9b:52:52:82:
c7:9f:7a:d3:fc:13:3f:40:40:1f:3d:90:45:0f:d8:
75:8f:2e:c5:9c:11:aa:dd:4c:11:0c:83:25:51:d6:
16:98:8d:68:ae:34:49:53:4c:e7:8c:84:4a:fc:47:
af:e1:72:28:49:00:98:09:44:c8:8b:2a:4e:65:fd:
77:10:e9:70:62:8d:90:21:d3:fb:52:c5:90:16:de:
f0:d5:6d:aa:47:cc:02:d4:fb:da:cf:eb:d8:18:ec:
25:05:1b:86:43:dd:5e:66:4e:fa:2b:1f:d8:b0:be:
24:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:15:71:41:AF:F8:FA:C9:D6:CE:F5:CD:B9:8E:98:CE:85:1D:67:6D
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/_hVxQa_4-snWzvXNuY6YzoUdZ20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2d:a8:9f:bb:8d:44:7c:df:89:85:7a:31:5a:72:d7:cb:86:
9b:f8:07:c3:99:b9:a5:d1:6a:cd:a5:fe:a0:a3:56:48:82:30:
d9:6b:3e:37:c9:04:6c:bb:d7:5a:7c:7e:85:d9:05:54:ac:c2:
ae:7f:29:03:08:ee:87:a6:15:b8:94:6f:83:c2:da:2a:59:d3:
a7:40:d7:20:49:e6:26:3f:c0:34:52:af:3d:b4:eb:d9:ff:3a:
8d:01:23:59:d1:88:15:85:a0:07:14:da:28:e0:d7:4c:9b:20:
77:2f:38:9a:31:44:26:1e:ef:90:cc:aa:fc:c3:8c:98:70:1e:
2f:f4:ea:93:33:40:b9:07:69:92:aa:55:55:50:2b:75:c7:82:
29:14:fd:90:d1:e3:ce:6f:db:d0:6e:b1:18:bf:e0:3b:9b:11:
b0:17:07:3b:71:eb:db:2b:ec:f2:a7:5c:bd:ec:66:c3:26:aa:
88:fc:a4:ea:fe:97:23:65:51:46:fa:9d:81:cb:7f:52:09:3b:
1a:60:9d:53:af:50:f1:10:9e:a5:1b:28:87:9f:45:fc:5e:87:
b4:43:6f:95:06:9f:ab:1e:42:bc:a8:75:f0:d6:35:96:61:9c:
b9:7b:c3:06:23:c2:45:09:0e:d5:b6:1d:2f:95:a1:9a:45:6e:
03:e1:7c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:02 2025 by rpki-client