Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/nHjsWH7YHmHe83p39S6_v9q-1KQ.roa
File: nHjsWH7YHmHe83p39S6_v9q-1KQ.roa (raw, json)
Hash identifier: ClNGPzzXOcscykYrUENksGatpilB89tYDMVOxTo7c4I=
Subject key identifier: 9C:78:EC:58:7E:D8:1E:61:DE:F3:7A:77:F5:2E:BF:BF:DA:BE:D4:A4
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 04406D8B
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/nHjsWH7YHmHe83p39S6_v9q-1KQ.roa
Signing time: Sat 01 Jan 2022 00:50:51 +0000
ROA not before: Sat 01 Jan 2022 00:50:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212077
IP address blocks: 85.237.206.0/24 maxlen: 24
85.237.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71331211 (0x4406d8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 1 00:50:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c78ec587ed81e61def37a77f52ebfbfdabed4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:4b:e4:96:67:34:65:97:83:e7:31:12:44:
b6:d9:1e:1e:39:91:7f:7f:48:f2:ff:2c:60:52:9b:
a5:2a:1a:7f:2a:3c:4a:85:83:65:cd:08:1c:fe:78:
28:62:09:6e:1f:60:1c:7a:3b:46:b4:44:c6:41:ad:
75:f5:c2:6c:d6:94:55:2e:44:e1:18:04:af:c3:c9:
f1:a0:10:22:d6:8a:40:16:62:11:1b:60:98:70:13:
31:7f:02:bc:fb:a4:4d:de:d1:24:ca:16:7d:f9:ef:
0b:e1:6f:35:67:f2:ba:2d:e4:ba:d3:8a:02:f5:9d:
31:c4:0c:c6:82:a7:9b:48:aa:cc:6c:75:18:63:69:
eb:ca:02:40:f8:bb:8f:88:04:cb:5c:b5:5c:a2:c9:
97:89:ee:86:2c:46:f3:17:48:bb:cb:f4:14:f7:13:
f0:93:19:6a:85:a1:fe:c6:19:0e:84:bf:a5:37:45:
12:c4:af:cd:2b:bc:69:9d:bd:ae:73:22:13:d6:93:
3c:f5:23:3d:7c:37:23:5f:3c:6f:d6:ad:8d:32:d9:
cf:2c:d6:c9:42:26:bf:74:9d:e2:96:3d:a4:cc:c5:
87:76:3c:36:eb:79:8e:31:1b:06:9d:85:36:cc:ed:
59:07:74:fb:eb:83:06:c5:5c:47:70:09:68:38:45:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:78:EC:58:7E:D8:1E:61:DE:F3:7A:77:F5:2E:BF:BF:DA:BE:D4:A4
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/nHjsWH7YHmHe83p39S6_v9q-1KQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.206.0/23
Signature Algorithm: sha256WithRSAEncryption
17:ca:df:c1:1c:c2:5a:f0:3d:cf:23:13:b9:0c:35:33:75:05:
bd:dd:a0:87:11:5d:df:ae:28:f5:d1:b8:cf:84:0b:4a:8c:0b:
97:db:92:bf:08:99:33:6f:62:24:51:9a:a3:2c:d2:58:27:2f:
e1:1d:af:6e:91:94:44:a7:3b:19:67:0c:cd:65:57:5e:13:22:
d4:da:5a:4e:77:b6:1e:03:2a:ae:13:25:d1:21:2f:93:2e:8c:
1c:9c:8a:fd:2d:f2:f6:64:23:d3:09:73:86:10:53:d5:d7:8e:
c6:7f:ea:e0:23:68:7f:c3:88:70:92:0a:4c:5a:7b:90:7a:8b:
68:69:3d:f3:16:ff:9f:d9:43:e3:14:f9:51:76:4e:c5:a1:5e:
7c:84:3f:cc:d7:55:22:6e:61:66:d4:c8:97:91:e5:22:23:85:
5a:08:d3:14:54:85:a5:8b:e5:ef:7c:36:38:7e:68:6a:c3:ac:
b6:f7:cb:3a:9d:e5:e8:56:6a:5f:b3:58:90:42:8f:de:7f:8c:
79:40:88:fd:62:45:e6:97:f9:f1:d6:38:df:b0:28:16:c5:f2:
4d:c3:d7:cd:fd:b6:dd:5b:07:02:77:7e:70:00:af:b5:49:69:
de:6a:0b:1d:3f:d4:f0:43:f4:91:2e:8a:c7:b5:a5:13:15:72:
38:77:e0:07
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBEBtizANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OTBiNjczNjhjOTFiODVlODQ4ODhjNWVkMmU4MjRkMTM5MDgxMGJiMB4XDTIyMDEw
MTAwNTA1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOWM3OGVjNTg3ZWQ4
MWU2MWRlZjM3YTc3ZjUyZWJmYmZkYWJlZDRhNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMQwS+SWZzRll4PnMRJEttkeHjmRf39I8v8sYFKbpSoafyo8
SoWDZc0IHP54KGIJbh9gHHo7RrRExkGtdfXCbNaUVS5E4RgEr8PJ8aAQItaKQBZi
ERtgmHATMX8CvPukTd7RJMoWffnvC+FvNWfyui3kutOKAvWdMcQMxoKnm0iqzGx1
GGNp68oCQPi7j4gEy1y1XKLJl4nuhixG8xdIu8v0FPcT8JMZaoWh/sYZDoS/pTdF
EsSvzSu8aZ29rnMiE9aTPPUjPXw3I188b9atjTLZzyzWyUImv3Sd4pY9pMzFh3Y8
Nut5jjEbBp2FNsztWQd0++uDBsVcR3AJaDhFr6cCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSceOxYftgeYd7zenf1Lr+/2r7UpDAfBgNVHSMEGDAWgBQ5C2c2jJG4XoSI
jF7S6CTROQgQuzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09RdG5Ob3lSdUY2RWlJeGUwdWdrMFRrSUVMcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvMTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8x
L25IanNXSDdZSG1IZTgzcDM5UzZfdjlxLTFLUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
MTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8xL09RdG5Ob3lSdUY2
RWlJeGUwdWdrMFRrSUVMcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVXtzjANBgkqhkiG9w0BAQsFAAOC
AQEAF8rfwRzCWvA9zyMTuQw1M3UFvd2ghxFd364o9dG4z4QLSowLl9uSvwiZM29i
JFGaoyzSWCcv4R2vbpGURKc7GWcMzWVXXhMi1NpaTne2HgMqrhMl0SEvky6MHJyK
/S3y9mQj0wlzhhBT1deOxn/q4CNof8OIcJIKTFp7kHqLaGk98xb/n9lD4xT5UXZO
xaFefIQ/zNdVIm5hZtTIl5HlIiOFWgjTFFSFpYvl73w2OH5oasOstvfLOp3l6FZq
X7NYkEKP3n+MeUCI/WJF5pf58dY437AoFsXyTcPXzf223VsHAnd+cACvtUlp3moL
HT/U8EP0kS6Kx7WlExVyOHfgBw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:08 2023 by rpki-client on console-ams.rpki-client.org