Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/rDMw79AuQtRAh5nJHWn2bjrn0go.roa
File: rDMw79AuQtRAh5nJHWn2bjrn0go.roa (raw, json)
Hash identifier: yr5oyLLAhB1thm3aAumVXPi13ULjNn0rsYxPU2TMBTo=
Subject key identifier: AC:33:30:EF:D0:2E:42:D4:40:87:99:C9:1D:69:F6:6E:3A:E7:D2:0A
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0439C625
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/rDMw79AuQtRAh5nJHWn2bjrn0go.roa
Signing time: Sat 01 Jan 2022 00:50:46 +0000
ROA not before: Sat 01 Jan 2022 00:50:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51659
IP address blocks: 85.237.206.0/24 maxlen: 24
85.237.206.0/23 maxlen: 23
85.237.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70895141 (0x439c625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 1 00:50:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac3330efd02e42d4408799c91d69f66e3ae7d20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:43:c1:2a:4a:6c:97:fd:06:48:6f:02:50:
9b:9e:85:72:e2:c5:a6:c6:ee:b4:84:5a:dc:a3:2e:
10:9b:94:d6:ea:77:22:26:59:f0:c7:69:ac:48:62:
58:da:7d:f8:10:84:9d:81:ab:ac:bc:88:8c:aa:ce:
57:c3:a7:eb:2b:91:96:d9:7f:9d:13:a5:ee:35:cb:
b4:a7:2a:dc:b0:b7:59:da:f0:a1:49:62:3e:4b:3d:
8d:89:99:56:2d:15:6d:26:a6:e6:72:f5:48:bb:ca:
8b:d4:67:81:f1:68:7c:84:00:aa:0c:5a:3a:6f:44:
7c:c5:e4:13:52:af:59:e1:a9:32:69:5b:d8:aa:40:
3f:f0:0e:fa:76:34:ab:fb:af:45:d6:53:97:14:78:
6e:33:22:3f:5b:61:e7:b9:0a:65:13:37:ce:7a:bf:
a5:40:e2:c9:b7:a4:6d:7d:e7:e9:b2:f3:3c:43:a3:
80:07:b9:ff:9c:56:e8:3f:d5:38:77:4e:38:e9:53:
c0:b5:fe:fa:d2:d1:03:19:e2:bd:08:ab:9f:8d:3a:
41:3e:69:56:c8:30:1d:9c:b5:41:f9:b0:10:c9:3d:
4e:50:72:0f:81:79:38:4f:15:ea:d5:6c:f3:f8:7b:
d7:0f:43:0a:9c:a2:68:b3:55:fe:d7:97:a7:94:a0:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:33:30:EF:D0:2E:42:D4:40:87:99:C9:1D:69:F6:6E:3A:E7:D2:0A
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/rDMw79AuQtRAh5nJHWn2bjrn0go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.206.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:78:fd:19:03:f9:a2:34:dc:ef:0c:31:68:b2:74:54:da:0a:
55:62:08:c5:b0:c4:6a:34:3c:99:9d:ab:e5:98:15:b7:55:0a:
ef:70:54:84:11:5e:80:19:9c:95:4a:33:a8:7a:14:cd:72:a8:
0b:02:ef:13:32:0c:11:83:47:d3:19:be:82:a4:85:0b:e3:7c:
34:d3:7c:72:97:63:e6:8e:4c:5a:b1:54:61:2c:4b:ee:4e:02:
ee:f5:dc:26:37:5f:14:64:7c:c4:5a:5b:27:0c:f1:74:2f:cf:
05:29:e2:70:bd:9a:94:bb:c6:4c:5f:27:5f:51:6f:5d:24:23:
e0:7b:fc:8d:8c:e4:a3:bb:f4:21:6c:45:a1:27:e5:cd:8d:4b:
b3:6c:17:e4:39:6a:08:aa:b8:95:f9:cf:d2:08:15:4a:fd:f7:
51:f9:d2:92:c6:5d:12:44:2a:26:51:a6:19:b7:b6:c4:96:45:
08:fd:30:ac:10:6e:f6:8d:f6:1d:a5:03:74:22:81:d0:4a:67:
c1:5b:29:52:7c:29:af:b2:ea:b9:1e:29:a1:fd:9f:99:4d:e8:
15:56:fe:b4:0a:c0:71:0b:00:12:28:d0:34:1a:75:ba:af:03:
d9:16:cb:b2:f2:ed:39:c1:6e:93:05:f9:8f:95:1c:5b:76:8c:
ec:e6:37:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org