Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/w1drViHxgXGjqhup5Q5VuuWSrQU.roa
File: w1drViHxgXGjqhup5Q5VuuWSrQU.roa (raw, json)
Hash identifier: 4/Olqi2+ihK7EKf1sTUZaMpI4W5+qIhoKheyD2BX/Po=
Subject key identifier: C3:57:6B:56:21:F1:81:71:A3:AA:1B:A9:E5:0E:55:BA:E5:92:AD:05
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 01882C47F8A348BDCE43A6354223B78DB4D9
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/w1drViHxgXGjqhup5Q5VuuWSrQU.roa
Signing time: Thu 18 May 2023 00:34:54 +0000
ROA not before: Thu 18 May 2023 00:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
85.237.201.0/24 maxlen: 24
85.237.202.0/24 maxlen: 24
85.237.211.0/24 maxlen: 24
85.237.216.0/24 maxlen: 24
185.93.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2c:47:f8:a3:48:bd:ce:43:a6:35:42:23:b7:8d:b4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: May 18 00:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3576b5621f18171a3aa1ba9e50e55bae592ad05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d5:ee:df:9a:20:b7:e3:c1:c2:88:b2:66:61:
f8:88:2f:14:82:30:b6:24:6e:de:29:ef:62:6c:a2:
77:ac:2f:6e:ba:58:e9:e4:00:01:b1:4b:c3:ed:f2:
cf:fa:59:ab:af:fc:6a:50:74:83:82:97:e5:7a:0d:
82:e0:34:38:db:0f:65:5c:1d:26:a0:a7:57:bb:cf:
8c:ec:73:8e:e3:a6:66:6a:c1:23:e5:97:c0:98:fb:
46:5a:96:7e:2b:54:f6:41:be:e0:2c:f2:1d:a2:97:
95:f6:1e:91:1f:9f:ec:56:03:c1:65:7d:f2:d8:80:
7f:20:54:5d:bd:d0:df:3f:38:11:1d:34:5a:8f:17:
98:f5:f4:91:d9:f9:38:a2:7f:0c:af:26:d2:28:75:
f1:6c:20:82:85:2b:7e:b5:a0:88:83:38:b8:1b:3c:
c1:fe:15:b3:44:fa:cf:ed:f9:ed:c0:93:58:43:da:
85:03:24:88:3f:08:3c:1e:34:e8:6f:68:cf:17:ea:
63:72:80:07:6f:b5:58:69:0a:57:11:09:6c:90:0c:
7e:f7:b7:df:4b:a6:01:fb:3f:49:5e:2a:74:72:7b:
62:1a:f5:fd:43:eb:46:3e:c8:79:d2:fd:aa:fc:a9:
cd:c0:19:97:69:7f:d5:ad:12:a4:e0:1a:96:d0:80:
3f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:57:6B:56:21:F1:81:71:A3:AA:1B:A9:E5:0E:55:BA:E5:92:AD:05
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/w1drViHxgXGjqhup5Q5VuuWSrQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.201.0-85.237.202.255
85.237.211.0/24
85.237.216.0/24
185.93.35.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:72:cd:e1:8e:e5:e7:65:91:20:d4:b1:a6:67:0a:11:08:45:
0f:f0:5e:de:f1:83:e2:bf:42:76:bd:49:d3:6a:e7:07:ed:cf:
53:a7:0b:1e:d3:85:8c:e2:9d:eb:fb:ea:e0:9a:4a:8e:93:59:
bf:58:fd:02:a9:14:5f:f3:5f:58:a2:9f:e6:ae:46:43:83:1a:
28:3c:41:03:b6:e1:b7:14:27:44:28:90:0a:4b:b0:72:bc:33:
1d:ae:76:0c:99:73:97:24:98:23:1d:e4:da:9f:84:59:e5:76:
1a:6a:b9:8a:9d:c2:14:e6:30:05:f1:e2:3a:82:95:75:2f:c5:
30:79:c4:2a:0d:55:58:e4:4f:8b:78:15:ca:dc:02:44:b1:c4:
df:2e:05:71:73:50:3c:75:f3:48:1b:e1:24:3d:87:4c:63:02:
73:fd:4d:ad:fd:e5:bb:c1:37:71:38:a5:84:da:37:ab:e7:82:
0d:d7:fd:f6:3b:c3:c0:96:ff:49:f1:57:01:43:b7:e5:ee:2f:
0b:7f:0f:34:49:8a:53:a3:bc:37:d4:ce:a1:60:ac:7b:90:f0:
0c:7c:c4:5e:40:d0:98:00:8b:c5:f3:51:6b:15:b7:de:25:3b:
ec:7e:e5:42:0a:9d:e1:3a:76:dd:7f:7e:47:8a:fe:cf:49:4e:
89:00:b5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:44 2024 by rpki-client on console-ams.rpki-client.org