Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/y3Kn8DCksjRiC0037tuzTNdlKtw.roa
File: y3Kn8DCksjRiC0037tuzTNdlKtw.roa (raw, json)
Hash identifier: Mgpqxv84DSVoSxAWd4EQd6eEh11H64nt2yC2SY+TNO0=
Subject key identifier: CB:72:A7:F0:30:A4:B2:34:62:0B:4D:37:EE:DB:B3:4C:D7:65:2A:DC
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 04581B52
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/y3Kn8DCksjRiC0037tuzTNdlKtw.roa
Signing time: Tue 04 Jan 2022 15:34:45 +0000
ROA not before: Tue 04 Jan 2022 15:34:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 85.237.199.0/24 maxlen: 24
85.237.195.0/24 maxlen: 24
85.237.216.0/24 maxlen: 24
185.93.34.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72883026 (0x4581b52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 4 15:34:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cb72a7f030a4b234620b4d37eedbb34cd7652adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:0c:09:51:d4:e6:3c:ee:18:fa:e7:df:39:
b8:bd:13:16:c4:23:60:06:59:bc:99:45:35:5c:6a:
b9:7e:95:3d:82:53:7d:b5:a6:fe:3f:38:aa:36:bf:
19:cf:a4:fd:a7:a0:f0:7a:56:44:41:a9:5b:a2:48:
44:4d:ca:94:6f:47:3f:17:e6:6e:16:74:fc:d6:2a:
06:d8:b8:15:ad:6d:4a:08:78:a3:4b:49:70:d2:a8:
dd:a4:13:8a:31:6c:d6:8c:68:98:2b:d5:34:d9:da:
07:8b:3d:8f:ba:d4:e7:0b:b6:85:d1:8b:67:82:c2:
3c:c4:f3:9a:97:a1:ca:05:f0:5a:f4:c4:89:f5:7e:
70:ec:6f:45:af:2a:21:e6:04:b9:d7:83:36:09:35:
54:5a:6d:be:42:24:68:16:84:fb:a3:bd:cf:b3:46:
91:07:8f:37:9e:84:1f:92:d5:53:5f:6e:39:af:bd:
2c:22:e0:30:c7:0d:1e:af:dd:54:72:a6:51:fa:81:
15:27:f5:4f:23:ed:27:4b:f9:30:1e:81:87:1a:0e:
7d:53:3a:1c:77:ee:f2:c2:b8:ac:6e:86:f9:db:39:
51:e4:40:fb:16:d2:c7:38:be:dd:66:ff:92:2b:8c:
48:99:d3:c9:0e:cd:80:c3:ba:e6:6d:5f:2f:4c:3a:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:72:A7:F0:30:A4:B2:34:62:0B:4D:37:EE:DB:B3:4C:D7:65:2A:DC
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/y3Kn8DCksjRiC0037tuzTNdlKtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.195.0/24
85.237.199.0/24
85.237.216.0/24
185.93.34.0/23
Signature Algorithm: sha256WithRSAEncryption
79:ed:a7:fb:b2:4e:6a:ba:e2:1e:43:bb:9c:38:30:bd:6e:9d:
e3:f8:b9:0f:45:80:7b:d0:65:42:80:a4:41:3e:a6:17:b9:92:
92:0f:88:ea:24:7e:9a:f1:20:37:0c:d4:b8:d4:06:dc:33:e9:
3d:5f:42:de:70:50:41:2e:bc:eb:e2:31:5a:27:bd:75:69:4b:
8e:67:48:96:f8:48:6b:52:cf:e0:40:5b:8a:60:89:4f:ec:af:
5f:a5:af:69:a3:ab:90:3a:7f:45:38:93:93:04:5e:b8:54:a7:
27:de:80:4c:89:15:84:4c:e8:81:e0:0f:d1:35:c5:7d:cc:f5:
65:5b:23:9f:62:2b:0b:ad:5f:22:fd:ae:04:a1:59:24:bd:b7:
c4:e0:49:13:58:b1:58:9f:64:70:f2:eb:0d:26:e6:9f:92:39:
91:cb:e9:71:fa:c7:7d:21:d2:f6:40:ca:4a:50:71:16:03:1d:
7b:d7:21:a9:61:5b:0b:89:c6:d3:e9:86:50:b8:f3:4d:20:47:
a0:bb:9e:bf:5d:be:63:ac:f4:62:82:8a:20:5b:95:14:83:3c:
6b:4c:48:b3:28:86:06:81:d5:e6:09:d8:55:ff:9b:38:ca:8c:
e8:59:ee:bd:12:7a:a4:b5:12:3d:fd:70:91:01:a6:5c:80:70:
5a:bb:28:a4
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIEBFgbUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
OTBiNjczNjhjOTFiODVlODQ4ODhjNWVkMmU4MjRkMTM5MDgxMGJiMB4XDTIyMDEw
NDE1MzQ0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2I3MmE3ZjAzMGE0
YjIzNDYyMGI0ZDM3ZWVkYmIzNGNkNzY1MmFkYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKApDAlR1OY87hj65985uL0TFsQjYAZZvJlFNVxquX6VPYJT
fbWm/j84qja/Gc+k/aeg8HpWREGpW6JIRE3KlG9HPxfmbhZ0/NYqBti4Fa1tSgh4
o0tJcNKo3aQTijFs1oxomCvVNNnaB4s9j7rU5wu2hdGLZ4LCPMTzmpehygXwWvTE
ifV+cOxvRa8qIeYEudeDNgk1VFptvkIkaBaE+6O9z7NGkQePN56EH5LVU19uOa+9
LCLgMMcNHq/dVHKmUfqBFSf1TyPtJ0v5MB6BhxoOfVM6HHfu8sK4rG6G+ds5UeRA
+xbSxzi+3Wb/kiuMSJnTyQ7NgMO65m1fL0w66tMCAwEAAaOCAhswggIXMB0GA1Ud
DgQWBBTLcqfwMKSyNGILTTfu27NM12Uq3DAfBgNVHSMEGDAWgBQ5C2c2jJG4XoSI
jF7S6CTROQgQuzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L09RdG5Ob3lSdUY2RWlJeGUwdWdrMFRrSUVMcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTIvMTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8x
L3kzS244RENrc2pSaUMwMDM3dHV6VE5kbEt0dy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIv
MTZjY2U0LWU5ODEtNGJlNS1iOWY2LTVjOWQ2MjYyOWM4Ni8xL09RdG5Ob3lSdUY2
RWlJeGUwdWdrMFRrSUVMcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx
BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAFXtwwMEAFXtxwMEAFXt2AMEAbld
IjANBgkqhkiG9w0BAQsFAAOCAQEAee2n+7JOarriHkO7nDgwvW6d4/i5D0WAe9Bl
QoCkQT6mF7mSkg+I6iR+mvEgNwzUuNQG3DPpPV9C3nBQQS686+IxWie9dWlLjmdI
lvhIa1LP4EBbimCJT+yvX6WvaaOrkDp/RTiTkwReuFSnJ96ATIkVhEzogeAP0TXF
fcz1ZVsjn2IrC61fIv2uBKFZJL23xOBJE1ixWJ9kcPLrDSbmn5I5kcvpcfrHfSHS
9kDKSlBxFgMde9chqWFbC4nG0+mGULjzTSBHoLuev12+Y6z0YoKKIFuVFIM8a0xI
syiGBoHV5gnYVf+bOMqM6FnuvRJ6pLUSPf1wkQGmXIBwWrsopA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:08 2023 by rpki-client on console-ams.rpki-client.org