Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/uNPJkkfILBDiNJp39hAxFiXD-kE.roa
File: uNPJkkfILBDiNJp39hAxFiXD-kE.roa (raw, json)
Hash identifier: XV8GAuoDZbEo6eIAUOGHguxvG2s9gFdCf17NNkvqu60=
Subject key identifier: B8:D3:C9:92:47:C8:2C:10:E2:34:9A:77:F6:10:31:16:25:C3:FA:41
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01849F2F6FE591A65DE31C65D404B177E5A9
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/uNPJkkfILBDiNJp39hAxFiXD-kE.roa
Signing time: Tue 22 Nov 2022 11:53:16 +0000
ROA not before: Tue 22 Nov 2022 11:53:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 85.158.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:2f:6f:e5:91:a6:5d:e3:1c:65:d4:04:b1:77:e5:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Nov 22 11:53:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b8d3c99247c82c10e2349a77f610311625c3fa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9c:6c:18:80:b4:84:16:61:88:ce:73:70:82:
37:36:2d:6f:f4:65:c4:c5:b7:ff:ad:96:df:1a:7e:
b8:db:52:1f:dd:83:cd:1c:d8:cc:68:65:20:a7:80:
77:b9:bd:ef:b8:9b:32:e4:4b:21:ff:19:42:9c:41:
92:5c:71:ca:b3:d3:44:56:ee:a2:70:18:0a:55:48:
7e:85:54:be:a2:e7:d5:02:26:10:c4:c8:ae:59:1a:
5b:a3:7d:73:0d:07:6d:24:02:28:7b:aa:10:bb:73:
79:f4:0c:9c:7f:2d:e4:ea:70:a8:db:c0:ea:21:fd:
cb:a8:cc:db:d8:74:e1:3c:a3:50:54:42:2c:11:93:
5b:9e:4b:36:c5:79:28:c2:98:04:02:79:8b:ea:e4:
3d:26:b4:66:76:44:b5:04:48:6f:ad:0d:d9:a9:26:
71:6a:1e:67:d7:ec:4a:90:04:bf:97:2d:44:16:ff:
b8:2b:f3:d5:a3:b2:e8:18:86:b1:e1:4c:62:8e:69:
3f:d8:93:e1:0f:30:99:fe:40:ee:c3:2e:4d:d2:66:
54:85:e0:a1:b2:9e:34:9a:29:f3:57:45:53:1f:42:
a9:d4:b2:e8:27:7c:93:a8:5d:3b:d4:f6:20:d5:41:
fb:39:e6:3d:58:ed:45:0a:a2:b4:b4:3e:43:f4:34:
8f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D3:C9:92:47:C8:2C:10:E2:34:9A:77:F6:10:31:16:25:C3:FA:41
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/uNPJkkfILBDiNJp39hAxFiXD-kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f1:04:7f:f8:6d:3c:08:c9:fe:e2:4e:20:51:67:6f:83:33:
c5:88:60:33:ef:55:87:34:64:de:bb:25:30:e6:5e:44:8b:a2:
64:f9:ce:ea:38:41:1a:1d:3c:88:87:50:a6:25:74:b0:b0:75:
59:b5:fa:5c:ba:74:9e:a7:9b:8e:59:b1:58:e1:d5:35:9a:87:
c4:41:a2:4a:1d:0c:16:96:66:c8:11:1c:15:ac:bb:d6:a5:6e:
34:d4:c2:fe:21:c8:33:04:2a:45:4f:93:ed:72:bf:17:11:00:
91:58:79:08:76:99:68:5f:7c:74:0e:8f:13:37:23:ad:d7:d1:
48:ee:e0:d9:55:5d:b6:5c:83:de:3a:46:35:f0:3d:f2:37:aa:
80:1a:0a:ef:28:7b:d5:66:fd:bd:ad:1b:b8:80:a6:f6:88:03:
3e:16:86:9b:16:09:bb:52:00:a6:a3:ab:a6:18:3a:2a:8a:5f:
0f:e8:2c:11:93:cd:b7:37:84:5f:58:a9:50:bd:a9:3f:71:ad:
23:09:4f:db:e5:c9:b8:8d:cb:91:b5:28:39:8b:5f:e4:be:16:
f0:38:d5:74:65:68:ca:4a:d4:de:01:5e:ac:76:6d:bb:ed:13:
ff:95:28:f3:29:d7:c2:3b:29:57:d1:99:a8:39:7d:3d:5e:66:
30:ed:71:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:25 2025 by rpki-client