Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/ebI2cbX6ROJ9U07DqKPFu6OcjYw.roa
File: ebI2cbX6ROJ9U07DqKPFu6OcjYw.roa (raw, json)
Hash identifier: T3RGm/kOQtjw39vdGYZyLqD0CcapsXJCO7KOQmr5Vlw=
Subject key identifier: 79:B2:36:71:B5:FA:44:E2:7D:53:4E:C3:A8:A3:C5:BB:A3:9C:8D:8C
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 04B52F75
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/ebI2cbX6ROJ9U07DqKPFu6OcjYw.roa
Signing time: Mon 31 Jan 2022 14:36:06 +0000
ROA not before: Mon 31 Jan 2022 14:36:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 85.237.202.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.158.62.0/24 maxlen: 24
85.158.63.0/24 maxlen: 24
85.158.60.0/24 maxlen: 24
85.158.61.0/24 maxlen: 24
185.89.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78983029 (0x4b52f75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 31 14:36:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79b23671b5fa44e27d534ec3a8a3c5bba39c8d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:39:9d:05:32:8d:9a:c4:69:a9:75:91:3a:
de:c5:a8:3a:f8:50:60:3b:1c:88:db:89:62:fe:37:
ca:57:86:fc:8f:fe:3e:18:f2:3f:8e:34:0c:6c:0a:
a7:25:2c:02:05:3e:d7:c4:ab:18:84:ca:2c:43:e7:
cd:9e:b2:cf:31:43:0b:88:2c:07:2c:6c:ca:3a:1f:
e2:ac:2f:78:a1:79:40:53:a6:bc:e3:6a:6c:8c:c9:
82:59:8f:1d:ce:c7:01:08:9a:18:b0:f0:36:a8:37:
af:49:be:f5:75:b1:eb:91:8e:98:26:76:ad:67:82:
e5:1f:d4:0b:ab:ad:03:a4:91:2a:55:30:b8:65:4e:
fc:1a:4c:c8:a7:bc:dd:dd:7a:49:a3:c1:e8:3f:08:
ce:04:41:51:c6:fe:8f:b9:46:09:07:75:f0:0e:a6:
ee:12:6c:a7:b8:c7:97:fc:8c:bb:4c:4b:32:c5:cc:
87:fc:2e:2c:dc:e1:77:59:56:ca:5c:15:18:cf:42:
2f:38:bc:d1:36:bc:f9:cc:c8:fd:c8:e4:78:03:37:
4f:ee:c5:6c:12:11:e5:e1:cb:07:0e:63:cd:00:8e:
23:04:90:f2:71:e2:da:64:57:bf:39:13:d1:34:3c:
88:14:17:6d:72:3a:97:36:a7:0a:1f:4b:29:20:48:
1c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B2:36:71:B5:FA:44:E2:7D:53:4E:C3:A8:A3:C5:BB:A3:9C:8D:8C
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/ebI2cbX6ROJ9U07DqKPFu6OcjYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
85.158.60.0/22
85.237.202.0/24
185.89.77.0/24
Signature Algorithm: sha256WithRSAEncryption
79:45:fc:af:80:91:d7:61:b9:38:72:19:d0:98:6c:9f:18:d3:
6c:20:c9:b6:96:d4:b5:74:60:c4:37:93:c8:fb:bc:5d:46:ff:
42:6b:2f:cd:79:51:95:26:68:d8:8f:cc:f7:53:1a:63:8d:d2:
c7:5b:cb:e3:07:f8:4d:30:b3:a4:da:ec:64:83:87:82:d2:fc:
33:15:67:e7:48:b8:d4:4e:22:78:ea:26:8c:0b:c8:7c:66:10:
4d:87:6d:cc:91:d7:2f:5f:55:4c:a6:3a:75:0f:9e:67:1e:21:
f7:61:8c:4a:cf:60:9d:fc:ea:d9:48:04:0a:bb:4d:d0:64:cc:
d2:c7:66:03:db:a0:7a:1f:22:8d:8e:88:d5:bf:43:75:64:9e:
03:f8:de:ca:dc:09:b7:59:2e:82:7c:78:58:73:74:58:de:6e:
31:6a:25:84:d2:78:80:94:e9:f3:4d:8b:8c:19:75:82:76:96:
6a:ed:ce:7e:fc:2d:c4:d0:5f:9a:06:1a:8d:53:d2:9c:b8:10:
77:7d:b0:25:eb:d6:7b:ed:cb:44:7b:12:a4:0e:6e:f3:eb:17:
a1:c2:ee:ce:df:ef:9f:b9:ba:a2:23:43:83:0c:f0:50:81:cb:
bd:46:98:8b:a8:f8:67:d6:30:b8:6e:b8:75:d1:be:7d:a1:60:
48:20:39:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org