Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/hNPsLanjvrwA3QAff8MuQBnw5Kg.roa
File: hNPsLanjvrwA3QAff8MuQBnw5Kg.roa (raw, json)
Hash identifier: aWLMAQPqAIUxn6uGww8llz3wuozyyhKE75wRw5j0EPo=
Subject key identifier: 84:D3:EC:2D:A9:E3:BE:BC:00:DD:00:1F:7F:C3:2E:40:19:F0:E4:A8
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0481FBFB
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/hNPsLanjvrwA3QAff8MuQBnw5Kg.roa
Signing time: Thu 13 Jan 2022 06:03:55 +0000
ROA not before: Thu 13 Jan 2022 06:03:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 85.237.193.0/24 maxlen: 24
85.237.199.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.237.220.0/24 maxlen: 24
85.237.221.0/24 maxlen: 24
85.237.222.0/24 maxlen: 24
85.237.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75627515 (0x481fbfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 13 06:03:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=84d3ec2da9e3bebc00dd001f7fc32e4019f0e4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:49:dd:76:d2:77:4e:21:f3:23:70:8e:01:
4c:64:2a:da:ba:fc:96:f5:ff:15:0e:cf:0a:33:5d:
40:fc:c0:82:54:e4:e4:63:79:52:ff:9e:5c:d0:1c:
fe:d3:3b:71:e2:55:a8:86:bb:01:a4:91:53:7d:7d:
f3:a8:1e:4d:bf:00:d9:10:b0:80:88:76:be:5c:13:
7c:a2:fd:07:7a:9e:a6:04:d7:9a:07:15:08:90:94:
b0:cb:fc:d2:ab:44:77:53:d9:94:aa:ee:ce:6a:0c:
2e:8f:b1:15:65:86:45:1e:35:16:be:7d:6b:c9:d2:
c5:52:88:98:71:4a:01:b4:fb:88:cb:3d:d4:e0:3f:
53:f6:a2:8c:ed:4e:f1:05:cf:00:68:66:cc:23:47:
3a:c5:2f:3c:51:07:56:6a:80:66:9b:92:7f:bf:d7:
1c:a6:fe:c2:85:1f:aa:32:de:86:7e:df:c0:33:c2:
e8:c9:fd:dd:13:35:e1:06:00:65:54:75:4e:00:2a:
d5:ac:97:7d:19:cd:05:27:ba:0d:cd:6f:68:fe:96:
99:c3:67:49:a2:50:86:6e:11:a4:77:97:08:9d:bc:
e7:ee:71:0b:3e:bd:56:3b:73:cd:e3:7e:a1:a8:14:
41:e3:d9:d5:05:0f:be:57:63:87:f7:e7:91:78:31:
be:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D3:EC:2D:A9:E3:BE:BC:00:DD:00:1F:7F:C3:2E:40:19:F0:E4:A8
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/hNPsLanjvrwA3QAff8MuQBnw5Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
85.237.193.0/24
85.237.199.0/24
85.237.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:3b:c4:9c:30:11:fb:f6:c9:e9:83:80:23:64:be:b3:6e:b0:
ae:9f:47:6f:e2:e1:77:0c:e2:50:8f:d8:66:b0:f4:d7:d8:49:
bf:aa:88:d5:23:ec:70:ce:87:45:4e:d8:76:ad:ca:3d:ce:f1:
c2:bb:4e:96:a6:18:ca:9f:8f:5f:63:9e:46:2a:8c:fc:c6:91:
4c:f1:a7:02:c2:32:d2:96:c4:84:88:45:77:60:78:2d:4f:c8:
45:66:1a:d8:93:63:7f:3e:ce:a1:b3:bc:35:20:35:b2:26:82:
32:86:a2:80:a0:83:57:ee:f2:38:13:0a:ad:cd:e5:55:18:9f:
3f:e7:01:e2:b2:82:24:2d:41:62:de:ae:27:92:51:26:14:7c:
f2:4e:22:ae:d4:64:d4:14:dc:a2:44:7a:d3:b3:f4:ac:3b:f6:
df:f5:bb:57:7c:e5:16:0a:c4:de:54:fe:cd:84:5b:37:bb:c1:
c7:20:cd:48:ce:52:57:f2:10:28:f2:b8:40:88:82:48:06:f0:
9b:2f:bf:d0:13:a6:e9:3b:3e:d0:3d:32:c6:2a:2d:89:9f:bb:
20:9d:be:7a:2f:ed:aa:11:08:f1:b5:9e:54:90:f2:8d:31:b9:
86:ba:22:15:d7:aa:92:80:84:ce:22:a2:91:ae:de:d4:ce:61:
b1:28:da:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org