Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/csDW8rvByyyy6dTGo_oKHBnJbvg.roa
File: csDW8rvByyyy6dTGo_oKHBnJbvg.roa (raw, json)
Hash identifier: FCbi7BQxvjIfHL9YjBOeJL3M+7J09XIQP5LomWzPZZA=
Subject key identifier: 72:C0:D6:F2:BB:C1:CB:2C:B2:E9:D4:C6:A3:FA:0A:1C:19:C9:6E:F8
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0188B0078F1FF1A85671097F6C50E7BE35F8
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/csDW8rvByyyy6dTGo_oKHBnJbvg.roa
Signing time: Mon 12 Jun 2023 14:34:25 +0000
ROA not before: Mon 12 Jun 2023 14:34:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.237.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:07:8f:1f:f1:a8:56:71:09:7f:6c:50:e7:be:35:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jun 12 14:34:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72c0d6f2bbc1cb2cb2e9d4c6a3fa0a1c19c96ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:69:96:02:46:27:ec:97:6b:73:1a:01:93:
47:ba:a3:fe:ff:d3:b5:90:9d:f8:18:ea:6c:47:3c:
13:b2:66:93:d6:10:d1:b0:a5:bd:6a:85:9b:99:36:
d8:a1:8b:f9:89:2e:23:46:d2:41:e5:4c:86:03:8c:
32:23:ee:da:3e:df:af:5c:9f:b4:34:fd:8b:89:d6:
03:f1:a1:84:3b:ba:0a:6a:e7:de:79:f1:f3:0f:08:
fe:27:5a:98:87:b1:fe:84:33:b5:e2:ec:64:d0:f2:
3f:a9:8b:75:4f:ac:00:f4:d8:c3:be:a6:9f:53:17:
1f:e9:a0:53:e4:6a:c6:e2:75:1b:3e:f2:ec:3b:7a:
8b:bb:56:36:28:2b:8a:28:a2:35:13:4b:6b:b4:dd:
9b:c3:74:eb:97:ec:5e:6c:ed:3f:d2:98:5c:b3:c2:
39:e1:10:06:67:4a:b3:2f:1f:b1:36:97:77:73:b2:
ef:7c:68:d7:74:05:10:8a:57:3a:f5:d0:82:88:58:
c6:33:62:b7:07:7a:9e:86:36:4e:76:d6:df:82:9c:
d0:a6:77:22:77:2c:ed:b1:d2:2b:9d:45:92:00:f3:
55:06:54:60:56:a3:09:0c:84:81:be:c6:c8:55:bc:
cc:01:f0:63:5b:cd:26:bc:2b:f0:55:95:a3:9a:54:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C0:D6:F2:BB:C1:CB:2C:B2:E9:D4:C6:A3:FA:0A:1C:19:C9:6E:F8
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/csDW8rvByyyy6dTGo_oKHBnJbvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:10:3e:50:e5:f4:a8:99:7f:03:ec:f0:fc:47:47:37:5b:75:
4c:0a:b0:cd:53:99:bb:36:67:8d:d0:56:74:af:22:87:0c:5f:
47:f0:2c:aa:5b:51:61:84:62:6e:87:5c:94:34:6b:3e:29:a6:
41:fe:9d:2a:ff:0a:2b:20:df:61:51:0c:0c:cf:55:64:01:f3:
fd:90:d9:ae:4a:a2:cb:06:12:ed:b9:fe:d5:e1:64:14:f0:5a:
ff:7b:cb:55:9e:63:f7:ad:24:f8:00:43:3a:ac:d3:04:ce:8a:
1a:5a:33:aa:9c:0d:fd:ea:f0:20:7c:5a:79:eb:0d:df:82:5e:
2d:1d:00:46:6c:75:3f:64:f4:46:b9:c1:1f:13:81:f5:1d:d2:
5a:02:47:e2:21:31:29:fd:d1:c2:7e:88:0f:fb:21:11:5e:da:
e3:fc:66:df:91:1e:35:c7:4e:28:9c:21:19:77:2e:2e:e5:2a:
57:d6:22:a5:5a:e2:1e:bf:d4:bd:20:1e:68:dc:ed:c3:59:dd:
96:cd:65:05:47:10:46:43:1e:2d:2a:89:32:21:5f:23:64:50:
b2:1d:85:a0:58:0d:44:f5:3a:f2:76:a6:20:82:2d:78:46:b6:
84:fa:4a:0b:ce:6f:f1:34:75:53:50:33:5c:a1:64:84:3e:20:
b8:45:34:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiwB48f8ahWcQl/bFDnvjX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MGI2NzM2OGM5MWI4NWU4NDg4OGM1ZWQyZTgyNGQxMzkw
ODEwYmIwHhcNMjMwNjEyMTQzNDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmMwZDZmMmJiYzFjYjJjYjJlOWQ0YzZhM2ZhMGExYzE5Yzk2ZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQdplgJGJ+yXa3MaAZNHuqP+/9O1
kJ34GOpsRzwTsmaT1hDRsKW9aoWbmTbYoYv5iS4jRtJB5UyGA4wyI+7aPt+vXJ+0
NP2LidYD8aGEO7oKaufeefHzDwj+J1qYh7H+hDO14uxk0PI/qYt1T6wA9NjDvqaf
Uxcf6aBT5GrG4nUbPvLsO3qLu1Y2KCuKKKI1E0trtN2bw3Trl+xebO0/0phcs8I5
4RAGZ0qzLx+xNpd3c7LvfGjXdAUQilc69dCCiFjGM2K3B3qehjZOdtbfgpzQpnci
dyztsdIrnUWSAPNVBlRgVqMJDISBvsbIVbzMAfBjW80mvCvwVZWjmlRNEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHLA1vK7wcsssunUxqP6ChwZyW74MB8GA1UdIwQY
MBaAFDkLZzaMkbhehIiMXtLoJNE5CBC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYt
NWM5ZDYyNjI5Yzg2LzEvY3NEVzhydkJ5eXl5NmRUR29fb0tIQm5KYnZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYtNWM5ZDYyNjI5Yzg2
LzEvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVe3OMA0G
CSqGSIb3DQEBCwUAA4IBAQCnED5Q5fSomX8D7PD8R0c3W3VMCrDNU5m7NmeN0FZ0
ryKHDF9H8CyqW1FhhGJuh1yUNGs+KaZB/p0q/worIN9hUQwMz1VkAfP9kNmuSqLL
BhLtuf7V4WQU8Fr/e8tVnmP3rST4AEM6rNMEzooaWjOqnA396vAgfFp56w3fgl4t
HQBGbHU/ZPRGucEfE4H1HdJaAkfiITEp/dHCfogP+yERXtrj/GbfkR41x04onCEZ
dy4u5SpX1iKlWuIev9S9IB5o3O3DWd2WzWUFRxBGQx4tKokyIV8jZFCyHYWgWA1E
9TrydqYggi14RraE+koLzm/xNHVTUDNcoWSEPiC4RTS9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:46 2024 by rpki-client on console-fra.rpki-client.org