Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/hFffq_zQuH6ykbBVNhdd_jsymjQ.roa
File: hFffq_zQuH6ykbBVNhdd_jsymjQ.roa (raw, json)
Hash identifier: jC7hQxeEXhXgZi/JspxabvyMoe5NwAqeXtmEP1YHKd4=
Subject key identifier: 84:57:DF:AB:FC:D0:B8:7E:B2:91:B0:55:36:17:5D:FE:3B:32:9A:34
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0184E4E33ECE00D2D35FA909ECF4A6FC9E69
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/hFffq_zQuH6ykbBVNhdd_jsymjQ.roa
Signing time: Tue 06 Dec 2022 00:43:28 +0000
ROA not before: Tue 06 Dec 2022 00:43:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211373
IP address blocks: 85.237.200.0/24 maxlen: 24
85.158.56.0/24 maxlen: 24
185.89.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e4:e3:3e:ce:00:d2:d3:5f:a9:09:ec:f4:a6:fc:9e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Dec 6 00:43:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8457dfabfcd0b87eb291b05536175dfe3b329a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:89:90:e4:6c:2b:d2:b1:24:99:7e:be:b0:7d:
09:f3:94:b8:de:67:a5:f1:7c:63:8b:b7:9e:b3:43:
c5:ca:39:5c:34:c8:dc:84:74:0e:f7:5f:4c:0a:42:
6f:ca:cb:c2:6e:7b:9e:ee:da:0a:17:38:0f:c0:96:
3d:5d:69:bf:4b:46:14:53:13:07:a8:10:3c:a0:1b:
2d:f2:25:9a:ac:b9:88:27:ee:f7:aa:34:71:47:92:
d8:29:d8:e9:63:98:ef:97:d5:0a:75:dc:24:76:87:
02:59:93:47:d4:47:b1:c3:b5:a7:20:fb:f0:52:7d:
c8:c8:1a:b2:03:38:88:d2:27:80:91:79:d1:62:44:
51:3e:54:39:97:52:8d:eb:f5:f6:3e:0f:38:99:26:
dc:01:4d:71:1b:7e:64:ff:cb:32:a1:4d:37:b3:7a:
b9:ea:30:5a:ae:45:30:f6:20:03:a1:11:48:c5:51:
27:1e:ef:6a:2a:d0:1f:99:34:c3:81:2a:2a:26:32:
6a:8c:9c:ad:19:52:4b:28:ee:9d:2f:e4:f0:53:07:
65:83:d4:0b:c2:1c:2e:7e:c3:f9:7b:bc:d5:dd:e7:
b1:70:12:f3:72:29:85:99:45:de:c0:01:07:c8:87:
3c:50:46:0e:6f:e4:06:6e:f3:e6:a3:43:0b:23:9c:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:57:DF:AB:FC:D0:B8:7E:B2:91:B0:55:36:17:5D:FE:3B:32:9A:34
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/hFffq_zQuH6ykbBVNhdd_jsymjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.56.0/24
85.237.200.0/24
185.89.77.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:45:52:ca:a3:38:e3:d5:ab:b7:7b:f4:6e:bf:40:01:cc:b0:
e9:8a:09:79:90:f3:e7:7c:35:1e:ac:db:8e:bc:c2:5d:dc:3a:
12:f3:75:c0:ca:10:06:d3:16:7d:56:9c:9e:5c:1e:46:80:6f:
86:66:80:08:9d:73:2b:7d:d7:92:32:03:58:da:30:84:47:13:
da:8e:a9:84:84:a0:b8:27:2b:ac:33:22:87:e3:6a:0f:66:1f:
93:d5:e8:0b:43:88:ad:36:3a:5d:16:60:8f:6b:a6:f4:28:c7:
90:dc:39:f9:b1:a7:1a:f1:77:68:2f:87:a7:b2:81:f6:53:08:
4b:cb:07:c0:2a:90:f7:75:31:29:0e:4e:b7:59:b5:9d:69:08:
69:37:5f:77:42:46:7a:01:18:82:e0:a1:35:79:28:3d:ab:45:
d8:7e:3f:c8:c1:d3:3e:77:e5:a2:50:9d:b4:bd:8f:f9:8c:c1:
5c:a4:28:ec:c9:f0:e9:ca:c0:63:02:58:f3:93:47:44:df:75:
51:f0:ca:45:c9:22:5d:87:3f:11:d3:3f:e3:7d:e0:88:01:c0:
2d:ed:e8:1a:0f:d3:a8:e0:7d:ae:7a:61:79:93:a4:0d:25:75:
cf:e8:d9:c1:76:83:4c:b0:9d:b1:ee:9e:81:b9:b0:b7:f2:28:
12:73:7d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:44 2024 by rpki-client on console-ams.rpki-client.org