Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/i0wmOH3ymKVvAm-vryAKbEClomk.roa
File: i0wmOH3ymKVvAm-vryAKbEClomk.roa (raw, json)
Hash identifier: hmCx0/1THvw8wmGyuiOfucQoaRWlFTKWVZM2V+pRauk=
Subject key identifier: 8B:4C:26:38:7D:F2:98:A5:6F:02:6F:AF:AF:20:0A:6C:40:A5:A2:69
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 04518D18
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/i0wmOH3ymKVvAm-vryAKbEClomk.roa
Signing time: Tue 04 Jan 2022 15:22:56 +0000
ROA not before: Tue 04 Jan 2022 15:22:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207429
IP address blocks: 85.237.201.0/24 maxlen: 24
85.237.209.0/24 maxlen: 24
85.237.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72453400 (0x4518d18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 4 15:22:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b4c26387df298a56f026fafaf200a6c40a5a269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:01:6d:63:05:b0:60:b7:2c:1b:18:16:81:3c:
53:80:6a:f1:6b:e5:a8:7a:e2:af:5f:87:af:a8:eb:
0c:91:3c:2f:a6:3c:7e:37:ab:a4:1a:01:09:92:18:
47:a2:95:cc:83:5d:4f:2c:12:c2:c8:77:38:e9:f3:
6d:ef:27:0a:75:f6:ed:dc:2d:77:6b:8c:64:a5:c8:
44:3a:99:25:f4:02:82:4e:1f:74:48:36:6d:ee:a3:
30:5b:39:55:0b:c8:4a:92:78:42:6a:67:bd:df:0f:
eb:da:20:da:fb:3a:da:09:34:90:9e:33:97:ee:1a:
88:b0:4c:08:a4:da:04:7c:bd:75:f2:13:88:45:95:
8f:62:b2:df:10:91:72:8e:93:49:e1:6c:1f:72:67:
a5:41:3b:b7:b7:91:56:ee:ca:1d:6c:e7:b2:65:9b:
1f:28:7f:67:2d:e7:dc:12:3e:b2:ff:ce:0a:ba:7d:
c1:c1:8e:5f:d9:5b:90:48:13:1e:4c:14:26:60:e4:
59:d0:7d:45:64:42:e1:1e:e6:4c:66:77:32:30:dc:
43:14:d0:e7:70:3d:16:ae:a1:09:39:60:fd:a4:9c:
be:db:47:26:c0:99:69:3c:90:23:6c:ca:8c:b8:80:
34:4c:27:d9:6f:4e:66:7b:fc:09:04:37:ac:59:ce:
f5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4C:26:38:7D:F2:98:A5:6F:02:6F:AF:AF:20:0A:6C:40:A5:A2:69
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/i0wmOH3ymKVvAm-vryAKbEClomk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.201.0/24
85.237.209.0/24
85.237.217.0/24
Signature Algorithm: sha256WithRSAEncryption
79:b8:9b:68:eb:4d:c0:98:01:80:79:4d:87:30:94:54:dc:a6:
79:09:03:c0:36:80:3c:cf:99:72:d3:b6:c4:b9:ee:ed:68:d0:
a1:d1:03:d3:2c:12:ee:17:db:0d:c0:f2:eb:e0:b4:aa:4c:91:
0f:cb:bb:3b:cf:07:2b:09:2c:51:1e:44:5d:9b:e4:71:33:d8:
08:c1:7e:be:5f:f5:bd:6f:e2:05:8d:23:b3:9e:60:7d:09:a2:
bf:f2:14:67:4e:73:fe:9b:4c:bd:89:7d:e1:2b:21:62:f6:8d:
33:7d:a8:e2:41:bd:db:aa:3d:d1:3c:43:ca:3e:5d:99:01:9f:
c4:b1:6a:72:bc:c2:c8:9c:b2:29:90:e4:6d:d8:c1:31:fa:aa:
a5:c1:08:77:72:2b:83:5e:33:19:f9:bc:e3:44:d0:ae:ae:6e:
06:85:09:5c:9e:45:ae:7f:5d:04:f6:70:66:1b:8e:ff:1a:04:
25:cd:bc:09:2d:3a:ff:ac:4a:41:ca:25:85:7e:ba:11:6d:61:
b1:59:a3:18:95:ea:47:4d:6b:96:6a:e3:5a:bb:78:d8:9f:3a:
96:34:80:99:99:c3:0e:34:11:fe:f6:c7:31:95:e6:b3:5e:a9:
b9:30:a1:6b:04:fa:17:a6:ef:f8:67:26:ca:5b:66:08:d6:31:
64:b4:3d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org