Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/sVs0l2fGyxv0cBqWOUEPRqdAp-Y.roa
File: sVs0l2fGyxv0cBqWOUEPRqdAp-Y.roa (raw, json)
Hash identifier: q1xThgEguA7VRbRZuEYpC+AlzuVhc3bM9fkpUnJh2g8=
Subject key identifier: B1:5B:34:97:67:C6:CB:1B:F4:70:1A:96:39:41:0F:46:A7:40:A7:E6
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01850EEE9265644EB8E1A524B1A7FA36D8C3
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/sVs0l2fGyxv0cBqWOUEPRqdAp-Y.roa
Signing time: Wed 14 Dec 2022 04:39:54 +0000
ROA not before: Wed 14 Dec 2022 04:39:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209260
IP address blocks: 85.237.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0e:ee:92:65:64:4e:b8:e1:a5:24:b1:a7:fa:36:d8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Dec 14 04:39:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b15b349767c6cb1bf4701a9639410f46a740a7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c9:2a:29:26:1e:17:5f:6e:93:c5:4b:6a:8d:
89:be:87:e6:f9:c4:e6:3c:9b:ca:e1:3e:e4:9b:26:
79:13:2e:32:ad:c1:d8:b6:f0:d7:c0:be:c4:a7:a3:
39:59:61:d6:63:fd:23:78:b5:93:b5:26:a1:4a:77:
e6:cb:2a:43:45:cc:45:4a:cb:6c:0d:d8:68:00:d3:
4d:62:ef:87:19:8e:58:64:f4:95:67:55:5a:e7:a8:
df:46:f1:8c:1b:a9:c3:62:64:21:23:6f:91:8e:bf:
13:d1:86:47:66:e7:db:6b:7d:d7:19:48:53:59:91:
f8:0e:dc:ed:a0:42:33:80:26:d9:f4:dd:a3:1a:fd:
4c:69:62:e1:b6:34:1d:61:18:a5:06:fd:6f:89:ad:
ad:bc:05:eb:58:45:42:ec:cb:67:30:cc:48:8a:82:
47:1e:fb:71:8e:42:2e:27:d2:7e:0b:dd:c7:d6:cb:
c1:ac:e6:7c:ba:0b:ee:b8:ed:e0:0d:f1:60:de:65:
90:4b:06:d8:7d:a2:b7:b6:4f:25:0e:94:06:a5:50:
9b:93:20:eb:32:bd:fc:d0:e8:89:fa:b9:e3:24:c4:
7f:54:ba:86:50:33:62:ef:c6:0f:5f:85:01:aa:bf:
a5:de:00:cb:f3:67:a9:ec:a1:1c:1c:82:6c:d6:75:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5B:34:97:67:C6:CB:1B:F4:70:1A:96:39:41:0F:46:A7:40:A7:E6
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/sVs0l2fGyxv0cBqWOUEPRqdAp-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.201.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e2:07:a9:2e:9d:35:c6:85:a7:8a:3d:27:dd:9f:88:eb:43:
27:8c:ac:1c:57:4b:95:e1:13:e2:ea:86:bc:ed:60:07:12:d4:
02:a0:7e:67:ed:c2:7d:7c:5b:41:b9:d7:13:10:47:84:09:65:
00:83:33:e8:d6:83:a4:95:fa:44:f0:ce:4b:37:5b:63:6f:f9:
ad:2f:15:96:1a:b4:d6:d5:fb:c8:08:a8:21:bf:39:20:44:d4:
e8:1c:a1:25:6b:90:7d:29:da:bf:09:cd:a2:92:8f:94:ba:f6:
ab:59:05:7b:97:fd:98:88:9c:ce:c7:1b:93:cc:a8:07:94:4c:
d5:f7:37:08:fe:90:00:eb:15:10:c1:2b:c1:66:e0:82:90:e1:
06:42:ac:ea:fa:02:0b:77:cd:51:9d:26:93:e9:d5:d0:53:6d:
04:a2:78:d3:7d:f1:99:23:eb:89:7c:96:5b:e8:b5:47:31:66:
c8:7f:15:90:6a:c2:73:54:73:91:f1:47:0f:9c:00:51:ea:95:
20:92:9c:d8:74:f2:94:8f:ea:af:60:97:2a:bb:f5:19:5a:f5:
5a:3e:6f:e4:8f:26:0d:3a:ad:be:bd:7a:9d:e6:c8:fc:ca:18:
7f:f3:be:a3:13:d9:f4:7e:37:09:a6:c5:e7:57:60:2b:57:d5:
ee:32:c5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:44 2024 by rpki-client on console-ams.rpki-client.org