Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/iBC2hwuYbd--nDNEAtDCoCH7g80.roa
File: iBC2hwuYbd--nDNEAtDCoCH7g80.roa (raw, json)
Hash identifier: nJF7VgaGPrSJHcgx2pwCzhNqz1xJtVBZoWgE7e2C9zA=
Subject key identifier: 88:10:B6:87:0B:98:6D:DF:BE:9C:33:44:02:D0:C2:A0:21:FB:83:CD
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 043D35C9
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/iBC2hwuYbd--nDNEAtDCoCH7g80.roa
Signing time: Sat 01 Jan 2022 00:50:47 +0000
ROA not before: Sat 01 Jan 2022 00:50:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 85.237.194.0/24 maxlen: 24
85.237.212.0/24 maxlen: 24
194.169.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71120329 (0x43d35c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 1 00:50:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8810b6870b986ddfbe9c334402d0c2a021fb83cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:db:ac:32:87:c0:33:3d:fb:be:50:6a:85:c4:
c5:67:b6:6c:90:b0:af:e2:de:f1:2c:db:9b:11:56:
3a:7f:0d:58:84:ee:f0:36:62:6e:83:da:10:35:1f:
42:bf:01:ca:c1:92:22:3a:4b:ad:71:e6:ed:78:f4:
b1:8d:ce:ba:97:b5:30:70:b2:16:1b:74:46:0d:0c:
6a:ba:d9:43:d4:84:dc:c3:fb:15:71:a7:65:18:72:
a3:9b:2d:e5:24:19:9a:f8:77:13:a6:85:d8:ac:16:
e6:09:99:a3:bb:b7:8d:b7:6a:cc:4c:95:99:00:d4:
9d:cb:6c:94:43:f7:57:d9:93:98:93:ff:37:b8:f2:
87:60:45:e1:96:e3:54:a4:60:fd:72:fd:d1:d4:86:
64:29:dc:4b:e3:34:8d:90:51:7c:7f:9f:6a:f7:f5:
03:57:85:97:c0:4d:68:6f:6e:88:f1:c8:fd:9a:d2:
68:1c:aa:bd:c5:43:bd:ef:5c:e2:31:42:8b:d2:72:
b5:f2:17:f6:18:f4:b0:f1:f5:dd:71:50:4d:a4:0f:
d0:3c:4f:b1:f8:3b:18:96:69:6a:11:a3:62:f3:72:
97:42:ce:cb:2a:91:4c:ea:45:01:6e:ca:26:6e:fc:
09:f5:f0:eb:7b:7d:91:ac:1a:2a:18:c0:fd:6b:c1:
ce:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:10:B6:87:0B:98:6D:DF:BE:9C:33:44:02:D0:C2:A0:21:FB:83:CD
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/iBC2hwuYbd--nDNEAtDCoCH7g80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.194.0/24
85.237.212.0/24
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
25:4b:9f:fe:a7:c2:4d:ac:06:6c:4a:7d:8d:c4:80:33:50:7c:
c4:f8:6f:c4:db:34:03:3f:97:02:e7:47:3b:8d:3c:ff:d4:39:
69:15:ed:97:f5:60:ea:84:79:95:b6:2b:1e:e0:04:4a:01:c3:
37:df:c3:10:5a:fd:80:f2:2a:0b:cb:4a:74:70:52:a6:bb:3c:
82:16:cb:14:07:a6:2f:34:78:d4:9e:20:ba:2d:88:46:37:ba:
99:34:b2:ee:b2:95:f5:c1:9f:9f:b1:bb:76:8b:b4:bb:f3:cc:
70:6d:d9:41:73:aa:5e:89:df:b6:58:9e:46:0b:9a:ef:7e:f9:
41:90:2f:5a:c8:a6:ec:a5:2e:41:97:76:7c:87:36:f6:af:9a:
04:93:2d:ca:4b:43:c2:73:f4:46:bf:12:69:5c:24:f9:48:a5:
b1:d8:32:2b:55:e0:0e:56:f6:3c:cf:af:e8:e4:a0:3f:0d:1f:
c0:6a:a9:87:21:6f:19:68:24:23:90:5f:97:b4:24:03:fd:2f:
ad:80:ba:4b:4d:6f:8e:a5:67:24:4e:53:c3:8c:17:e7:e2:eb:
30:65:1c:77:e9:57:66:cb:0d:83:fd:62:c5:c2:0c:e2:e9:6d:
99:44:a9:3b:61:aa:3f:2b:bb:ec:8f:e0:7a:7c:43:46:6c:5b:
02:2f:b4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:07 2023 by rpki-client on console-ams.rpki-client.org