Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/bKiLCYYPOqjz7J0fhNaGBj593NE.roa
File: bKiLCYYPOqjz7J0fhNaGBj593NE.roa (raw, json)
Hash identifier: 9rjgrRG5GZoAn2pLJN0BNhPGOzqx6xUd08cQphwdaQo=
Subject key identifier: 6C:A8:8B:09:86:0F:3A:A8:F3:EC:9D:1F:84:D6:86:06:3E:7D:DC:D1
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 04D90BAC
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/bKiLCYYPOqjz7J0fhNaGBj593NE.roa
Signing time: Wed 16 Feb 2022 12:20:01 +0000
ROA not before: Wed 16 Feb 2022 12:20:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 85.237.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81333164 (0x4d90bac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Feb 16 12:20:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ca88b09860f3aa8f3ec9d1f84d686063e7ddcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:5c:5e:89:05:e0:10:e7:a8:d6:3d:cc:67:
68:4d:37:73:b1:2e:ee:d3:cd:49:65:b8:3b:5f:e5:
8e:c2:c6:ce:e9:8a:e3:53:70:f2:ea:ec:15:da:f7:
82:79:5c:62:d8:db:54:42:98:56:be:d1:05:79:85:
02:60:77:c4:4a:2b:57:eb:2d:2f:7e:b5:17:06:f3:
9b:38:08:08:3b:eb:97:22:ad:46:59:17:cb:f2:d7:
c2:43:01:4f:13:8e:dc:00:27:c6:55:ee:c1:f8:f3:
17:f2:18:8a:ee:97:28:b8:2d:a9:35:12:70:c4:96:
f1:1e:73:76:c3:87:5c:62:fc:4b:9f:26:16:a8:3a:
e5:3f:f2:87:f5:54:8f:45:b9:09:66:99:fe:4c:8e:
48:e2:43:34:df:e0:4d:31:43:f6:43:0c:91:6d:82:
8b:a7:15:bf:0c:a8:22:21:87:91:fd:2b:34:2a:36:
e6:ed:99:f4:78:7a:81:e3:c9:f2:3f:cd:09:36:fd:
28:ed:e6:d2:6b:f1:02:db:ad:42:5c:d1:a8:44:11:
63:eb:51:50:b4:87:65:95:e1:44:fc:e6:49:4b:46:
2e:4d:f1:69:df:ae:21:f1:72:a7:2d:64:d6:c0:d8:
9e:16:b1:f9:ca:78:71:80:ff:26:f2:21:3a:bc:fc:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A8:8B:09:86:0F:3A:A8:F3:EC:9D:1F:84:D6:86:06:3E:7D:DC:D1
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/bKiLCYYPOqjz7J0fhNaGBj593NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.223.0/24
Signature Algorithm: sha256WithRSAEncryption
61:50:f4:37:e1:a3:45:aa:68:0d:06:3a:42:c7:0c:4d:9d:f3:
9a:be:dc:28:29:9b:98:2d:ca:99:cc:8c:e0:ab:c4:ee:06:34:
b7:78:ad:0c:53:21:99:eb:ca:23:ca:22:a7:7c:bb:79:32:10:
5d:49:09:e9:85:4c:7e:f6:24:96:7a:aa:2d:74:4d:b9:62:c9:
9a:32:d0:12:97:dd:3d:0b:6c:10:db:6a:79:78:ee:9f:3d:71:
40:98:2c:cf:23:37:e1:2a:a8:55:8c:47:f1:8e:8b:6c:f4:43:
8f:67:c7:a4:01:3c:f4:c3:7d:51:ad:fa:f9:72:de:ac:96:dc:
1e:6d:af:7b:6e:6d:71:12:da:9a:b4:f0:ae:40:d4:f7:81:d0:
dc:ec:4f:0c:76:d2:bb:74:ab:7f:d0:65:b0:9d:cf:fb:df:d7:
50:34:75:7e:2d:67:3a:c4:9b:30:e0:20:e7:6e:c2:7c:16:93:
1b:38:ff:c3:80:34:a3:3f:09:00:5c:48:66:a8:0b:32:6e:77:
e8:14:6b:0e:54:10:42:4f:19:15:be:40:4f:af:80:79:c0:10:
e4:3e:c0:df:7d:b4:b7:49:be:28:55:6d:0d:eb:77:4b:b7:42:
df:1e:af:3c:47:bc:01:38:9c:05:48:f3:1c:8a:f8:eb:cc:1d:
c3:84:ea:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:33 2025 by rpki-client