Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/j_p6CeM5piWlHf0ArT4yfys2Dfs.roa
File: j_p6CeM5piWlHf0ArT4yfys2Dfs.roa (raw, json)
Hash identifier: C7DzKDbY57ijBcWe2WEWzma+ieHXQ8ZMK3CYcnUQ0Sk=
Subject key identifier: 8F:FA:7A:09:E3:39:A6:25:A5:1D:FD:00:AD:3E:32:7F:2B:36:0D:FB
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018796AF44A3F9CDC5EB6D04419ABAF940BD
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/j_p6CeM5piWlHf0ArT4yfys2Dfs.roa
Signing time: Tue 18 Apr 2023 23:24:41 +0000
ROA not before: Tue 18 Apr 2023 23:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 85.158.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:96:af:44:a3:f9:cd:c5:eb:6d:04:41:9a:ba:f9:40:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Apr 18 23:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ffa7a09e339a625a51dfd00ad3e327f2b360dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:f9:3a:17:ab:a7:ca:cf:78:90:ec:d7:e5:
8b:12:f1:b1:0d:d8:3c:f4:6d:33:3f:8b:e2:36:fe:
b0:aa:21:97:23:3c:98:21:73:a2:a2:79:fb:5b:db:
bd:4c:9d:1f:1f:94:e9:7e:3a:41:b6:53:87:76:ab:
68:ae:0c:66:49:a2:cb:c6:74:52:f0:13:5f:a2:93:
23:c4:27:4a:c0:e6:4c:89:56:14:f5:46:41:8d:1b:
8e:b5:08:ce:22:c5:ab:d0:7b:c1:cd:0f:dd:8b:ac:
86:b3:1d:bd:61:5a:44:d0:51:f9:f3:f4:af:aa:f4:
da:2c:47:2f:30:9b:27:b5:6d:cf:fe:a9:42:dd:74:
96:53:53:c6:19:af:7f:eb:92:05:52:a8:0a:47:8c:
dc:ff:5f:17:65:85:78:08:d9:18:b0:bd:65:91:76:
a3:13:06:9c:69:4d:74:8d:3c:42:13:43:72:16:f1:
46:ea:3e:bd:d1:29:9e:be:49:6a:81:18:13:d9:f7:
f6:bb:99:c0:f7:22:84:78:48:61:30:f5:b2:22:88:
87:d1:4a:38:d3:94:11:44:4f:b5:5e:8c:48:d7:74:
d7:69:8e:df:55:d9:c0:5e:61:6f:e0:31:a0:ad:05:
dc:fc:38:94:e1:ea:6a:0c:57:61:01:e7:75:ec:dc:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FA:7A:09:E3:39:A6:25:A5:1D:FD:00:AD:3E:32:7F:2B:36:0D:FB
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/j_p6CeM5piWlHf0ArT4yfys2Dfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.61.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c3:d4:b3:e4:0c:90:c7:dd:d6:ee:fb:12:92:13:d1:b4:a7:
7c:5b:96:3a:12:a1:a2:08:ff:61:74:aa:5c:7b:f2:37:3b:48:
c9:ab:97:66:71:21:73:ac:10:17:6e:82:6b:3e:42:3c:0d:22:
66:df:7b:70:dd:3d:e7:d4:dc:95:ca:2a:b2:09:2f:71:42:5e:
bb:cd:34:cc:21:43:15:2b:d2:85:41:b2:f9:2e:8b:70:ab:b7:
1b:09:fc:bc:c6:26:98:56:0b:67:b5:a7:8c:0d:43:09:ae:05:
4e:e1:ca:3d:94:58:1a:cf:49:72:10:37:50:ae:51:da:ba:0b:
54:f8:1f:03:ab:ae:93:cc:cd:37:d8:16:14:7c:1b:c8:b3:f3:
73:a2:55:4c:69:8b:a3:76:61:e9:fe:b9:76:51:43:0c:cc:05:
9b:1c:0b:fb:24:ce:4a:9b:bc:8c:83:ee:21:ab:83:be:92:57:
99:b1:30:a5:3a:64:6f:65:5c:b7:09:12:03:c7:34:5a:53:d4:
4f:fc:5b:69:77:85:ba:00:68:dd:f4:14:28:c8:ff:99:6a:bf:
56:6d:3f:21:49:d6:98:df:84:89:e7:23:f7:a8:1a:74:11:f4:
72:f4:0d:65:a8:6b:34:c7:27:de:a3:4f:bd:02:e5:c1:fe:c8:
ac:3a:dc:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeWr0Sj+c3F620EQZq6+UC9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MGI2NzM2OGM5MWI4NWU4NDg4OGM1ZWQyZTgyNGQxMzkw
ODEwYmIwHhcNMjMwNDE4MjMyNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmZhN2EwOWUzMzlhNjI1YTUxZGZkMDBhZDNlMzI3ZjJiMzYwZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT/5Oherp8rPeJDs1+WLEvGxDdg8
9G0zP4viNv6wqiGXIzyYIXOionn7W9u9TJ0fH5TpfjpBtlOHdqtorgxmSaLLxnRS
8BNfopMjxCdKwOZMiVYU9UZBjRuOtQjOIsWr0HvBzQ/di6yGsx29YVpE0FH58/Sv
qvTaLEcvMJsntW3P/qlC3XSWU1PGGa9/65IFUqgKR4zc/18XZYV4CNkYsL1lkXaj
EwacaU10jTxCE0NyFvFG6j690SmevklqgRgT2ff2u5nA9yKEeEhhMPWyIoiH0Uo4
05QRRE+1XoxI13TXaY7fVdnAXmFv4DGgrQXc/DiU4epqDFdhAed17NyPnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI/6egnjOaYlpR39AK0+Mn8rNg37MB8GA1UdIwQY
MBaAFDkLZzaMkbhehIiMXtLoJNE5CBC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYt
NWM5ZDYyNjI5Yzg2LzEval9wNkNlTTVwaVdsSGYwQXJUNHlmeXMyRGZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xNmNjZTQtZTk4MS00YmU1LWI5ZjYtNWM5ZDYyNjI5Yzg2
LzEvT1F0bk5veVJ1RjZFaUl4ZTB1Z2swVGtJRUxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVZ49MA0G
CSqGSIb3DQEBCwUAA4IBAQBYw9Sz5AyQx93W7vsSkhPRtKd8W5Y6EqGiCP9hdKpc
e/I3O0jJq5dmcSFzrBAXboJrPkI8DSJm33tw3T3n1NyVyiqyCS9xQl67zTTMIUMV
K9KFQbL5Lotwq7cbCfy8xiaYVgtntaeMDUMJrgVO4co9lFgaz0lyEDdQrlHaugtU
+B8Dq66TzM032BYUfBvIs/NzolVMaYujdmHp/rl2UUMMzAWbHAv7JM5Km7yMg+4h
q4O+kleZsTClOmRvZVy3CRIDxzRaU9RP/Ftpd4W6AGjd9BQoyP+Zar9WbT8hSdaY
34SJ5yP3qBp0EfRy9A1lqGs0xyfeo0+9AuXB/sisOtwz
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:19 2025 by rpki-client