Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/pSCCNUpPSiK2IryheMp6neujgrI.roa
File: pSCCNUpPSiK2IryheMp6neujgrI.roa (raw, json)
Hash identifier: CqyVbjfDYKi67LkMwjeiDSabZuC6A3U4vlY8JtiG3Aw=
Subject key identifier: A5:20:82:35:4A:4F:4A:22:B6:22:BC:A1:78:CA:7A:9D:EB:A3:82:B2
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 044F1FD5
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/pSCCNUpPSiK2IryheMp6neujgrI.roa
Signing time: Tue 04 Jan 2022 15:19:35 +0000
ROA not before: Tue 04 Jan 2022 15:19:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211405
IP address blocks: 85.237.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72294357 (0x44f1fd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 4 15:19:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a52082354a4f4a22b622bca178ca7a9deba382b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fd:a5:bb:85:bc:54:f9:7e:a3:8a:97:9b:05:
9f:72:f9:2e:bb:14:b1:8a:da:4b:2a:43:07:c2:f9:
fd:57:93:ff:e6:18:ce:65:cd:64:ed:2f:62:35:79:
64:f4:2d:c6:58:20:bf:f5:5e:c8:29:47:d5:61:92:
37:3e:46:40:cd:01:38:f2:3a:fe:57:9d:56:5e:d2:
f7:1f:ec:64:b5:73:6f:d4:f5:a7:9c:90:91:c0:bf:
31:c3:dd:4c:0b:03:f8:ee:b8:64:1d:81:e3:de:70:
fe:4c:a8:4a:aa:d3:8d:7a:d0:89:41:b3:13:ee:42:
3a:82:03:82:06:14:58:d5:c9:3b:c2:bb:ce:b4:48:
f4:c4:aa:e7:a5:b4:72:55:84:14:68:f0:2d:37:d5:
fe:44:e5:1c:a3:06:d2:0c:05:f8:7c:2a:8a:44:86:
2d:0e:b5:13:a8:5d:23:fe:45:e9:5f:69:9d:d6:90:
43:ac:d2:92:e4:44:26:0f:ae:90:38:18:b9:81:dc:
68:1e:66:b2:ea:b7:35:cd:07:63:b4:ed:be:5d:e5:
3f:a0:8b:7d:7c:8c:a6:b6:79:ca:5d:ce:b4:9d:e6:
2c:34:a0:40:ae:f2:00:28:22:dd:49:f3:3f:24:5a:
70:b9:14:a6:2c:f5:f8:bb:96:4a:ba:48:20:b8:4d:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:20:82:35:4A:4F:4A:22:B6:22:BC:A1:78:CA:7A:9D:EB:A3:82:B2
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/pSCCNUpPSiK2IryheMp6neujgrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e9:4b:c7:f9:d3:21:60:d0:99:3d:31:d1:d8:90:0e:3a:df:
cc:f1:81:42:31:b3:f7:5b:fe:e4:36:c6:a7:ce:e6:5a:f1:bc:
0d:43:79:fb:43:95:c1:8c:58:22:8c:22:55:77:b0:9b:b6:4d:
f4:4e:1f:73:02:5f:d6:c0:c4:d9:a8:b4:c6:56:ab:97:90:de:
93:32:20:2b:30:b4:2e:1c:7a:97:a5:38:6c:5d:90:fe:b9:5f:
86:2e:9a:12:bc:e8:bc:92:ad:2c:8f:b4:37:5d:70:b4:b7:e0:
70:91:7b:8e:7c:e2:58:1a:fe:ff:4a:c5:83:88:db:b9:3e:92:
10:1b:1a:1a:75:48:21:28:05:a0:77:8a:45:05:76:ef:64:7d:
1f:71:f8:2f:63:4c:d6:50:75:de:45:8e:2c:67:11:d9:29:ce:
1b:24:1e:35:46:ff:0c:25:a4:c1:42:0c:5e:71:1c:f2:9f:06:
ef:5c:4b:fc:4f:cf:45:b5:6b:a1:56:bf:d8:da:3b:55:00:89:
2c:e3:d3:09:d4:a2:e2:86:4e:06:1d:b0:73:0e:1c:28:d3:74:
49:54:df:98:0c:09:77:68:29:5c:2a:01:17:4b:4f:a7:43:66:
ad:0c:b1:c1:65:8c:62:8c:dd:8f:6f:2d:47:ea:43:03:49:ce:
01:dd:f7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:13 2025 by rpki-client