Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/wA5DnsKNm43_iJFOVU58l0V0jsA.roa
File: wA5DnsKNm43_iJFOVU58l0V0jsA.roa (raw, json)
Hash identifier: R0dtd2Ot9Pz9rqFQhcbjKQ9GKRfuMSRJiutzr9Efv9k=
Subject key identifier: C0:0E:43:9E:C2:8D:9B:8D:FF:88:91:4E:55:4E:7C:97:45:74:8E:C0
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 018571DE8FA02B201CC3F78E4B00AE2A0388
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/wA5DnsKNm43_iJFOVU58l0V0jsA.roa
Signing time: Mon 02 Jan 2023 09:44:49 +0000
ROA not before: Mon 02 Jan 2023 09:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35375
IP address blocks: 85.237.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:8f:a0:2b:20:1c:c3:f7:8e:4b:00:ae:2a:03:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 2 09:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c00e439ec28d9b8dff88914e554e7c9745748ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9a:20:78:7e:45:e2:ce:04:73:f3:92:18:9f:
5e:e1:94:73:3c:4e:83:fd:17:ba:e7:bb:6f:2f:d5:
8c:bd:2c:32:67:f4:11:a4:24:48:17:e9:78:1f:3e:
d3:59:33:d7:8c:36:65:a2:11:10:8e:8c:08:04:8e:
dd:e6:f6:38:94:43:e7:ec:46:36:82:e5:10:47:d8:
4d:2b:f5:5c:1a:4a:75:71:c4:0a:cf:7c:27:6b:6d:
7b:d2:9d:5a:a5:ae:0d:68:33:c4:a6:70:36:c0:38:
cb:20:6e:79:9c:39:dd:8c:68:17:0c:cd:1c:c7:b8:
e0:94:39:89:ef:d6:e9:48:0a:2d:15:0f:9e:ce:f4:
b1:ca:cc:90:90:bf:7f:0f:3e:cf:5c:11:83:d8:f7:
1b:92:e8:ee:aa:1e:00:94:6f:7b:03:af:62:77:53:
6c:12:86:83:39:78:ac:03:49:ee:d0:90:78:ae:82:
53:e9:00:ab:6c:c3:44:ae:76:8e:76:cd:ba:5e:40:
db:e0:8d:65:14:17:c1:3b:69:fb:1f:2c:cc:0a:b6:
e6:4b:23:01:61:5e:26:6b:ce:b4:4f:90:a8:47:78:
6d:55:44:1f:b5:a0:00:ea:61:3f:b2:56:37:69:bf:
8d:da:4d:49:4f:73:d0:83:f7:d6:06:d2:ec:a1:4b:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0E:43:9E:C2:8D:9B:8D:FF:88:91:4E:55:4E:7C:97:45:74:8E:C0
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/wA5DnsKNm43_iJFOVU58l0V0jsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.192.0/24
Signature Algorithm: sha256WithRSAEncryption
92:1d:18:eb:6d:70:95:31:9f:67:e7:c4:5e:36:34:f4:6d:06:
d3:81:46:79:eb:55:fc:2a:71:68:d3:a0:29:18:12:7b:54:44:
c2:17:c7:44:83:49:73:29:d6:90:6f:ff:b9:bc:d1:3a:37:cd:
6d:5e:6c:06:50:35:44:15:6b:c3:fe:c7:82:5b:ac:fd:a6:c4:
1f:47:fc:85:36:58:43:48:81:70:2a:9e:04:19:42:15:0f:10:
68:f1:4c:08:21:06:68:2c:00:ad:be:dc:fe:75:0b:7c:bc:a7:
73:0f:a9:78:c3:26:f3:96:5f:ac:ac:ab:08:77:94:9d:af:97:
55:ff:26:92:58:9c:31:b5:0f:d3:35:d3:df:88:53:20:74:b7:
b1:44:fd:e2:b1:a7:e7:e6:41:ea:fd:16:9c:d5:73:dd:d9:8c:
98:a7:0a:6f:43:50:ee:5c:be:64:9f:cb:a7:29:bd:48:65:fb:
f3:7d:80:3e:ab:46:08:8a:00:0d:07:e6:82:06:f9:e3:23:53:
b9:1b:56:02:eb:df:d7:90:18:12:78:f6:b0:88:ea:96:bc:b9:
83:66:92:84:e4:f4:d3:e6:e9:7b:87:26:a2:43:59:6f:ec:e1:
ad:ad:a2:28:da:f0:15:4e:d7:f8:0f:73:ec:27:ed:bf:e5:4f:
7e:44:c0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:44 2024 by rpki-client on console-ams.rpki-client.org