Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/z6uiR37eSZHeJ3AqxSaoCoKI3Mc.roa
File: z6uiR37eSZHeJ3AqxSaoCoKI3Mc.roa (raw, json)
Hash identifier: lZVogoJzvfl4tRWsIbPQ87qNlGrotOI3T3G6RAfCtv0=
Subject key identifier: CF:AB:A2:47:7E:DE:49:91:DE:27:70:2A:C5:26:A8:0A:82:88:DC:C7
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0186246A92924405DC573D07467B07985D43
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/z6uiR37eSZHeJ3AqxSaoCoKI3Mc.roa
Signing time: Mon 06 Feb 2023 01:50:09 +0000
ROA not before: Mon 06 Feb 2023 01:50:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.109.192.0/21 maxlen: 24
85.237.196.0/24 maxlen: 24
85.237.198.0/24 maxlen: 24
85.237.205.0/24 maxlen: 24
85.237.203.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.237.208.0/20 maxlen: 24
185.93.32.0/24 maxlen: 24
185.93.34.0/23 maxlen: 24
194.169.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:24:6a:92:92:44:05:dc:57:3d:07:46:7b:07:98:5d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Feb 6 01:50:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfaba2477ede4991de27702ac526a80a8288dcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:95:3a:3c:3f:c6:1c:5e:83:fa:5a:d2:fb:d1:
96:fc:57:9e:fd:ab:88:70:41:47:12:1f:16:5d:a1:
12:7e:79:a1:4d:b0:8b:da:3b:b4:16:43:be:e9:65:
79:a2:04:36:38:b6:b2:11:b0:fe:4f:bc:91:a4:30:
1b:08:4f:38:fe:af:bf:5b:8d:96:3b:c7:ca:85:0f:
f2:14:85:3b:a6:57:97:7f:b7:14:ba:4e:38:77:60:
06:ef:3b:a3:61:b2:2e:8b:e2:11:a3:c5:bd:3f:48:
4d:fd:92:32:58:cb:18:ac:b7:d0:3f:ea:b6:06:d6:
5e:cd:e9:5a:71:4e:17:45:81:98:40:7b:68:81:83:
51:04:21:30:5e:04:72:ef:fe:ac:9f:09:6c:77:fb:
ff:13:f2:af:df:4b:24:5e:4e:a2:7f:0e:d8:1b:39:
aa:a9:eb:7f:54:40:d4:5c:cf:bd:70:e1:25:19:4a:
76:d8:01:95:0e:96:2c:43:8c:56:d8:21:53:76:fd:
72:b4:18:8a:52:3b:38:22:da:38:08:f9:dc:83:c8:
ae:00:4f:3e:ae:41:f3:7e:bb:50:ce:a8:30:ba:cf:
16:cb:7c:43:a9:76:e6:1e:79:f2:ca:c4:25:3a:cd:
95:70:97:af:ab:71:25:80:0d:ae:1f:c9:ee:ca:73:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AB:A2:47:7E:DE:49:91:DE:27:70:2A:C5:26:A8:0A:82:88:DC:C7
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/z6uiR37eSZHeJ3AqxSaoCoKI3Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
85.237.196.0/24
85.237.198.0/24
85.237.203.0/24
85.237.205.0/24
85.237.208.0/20
185.93.32.0/24
185.93.34.0/23
193.109.192.0/21
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
78:bc:0b:30:ab:14:6d:e9:ce:88:39:04:46:20:99:05:5d:1b:
f6:4b:af:20:6f:67:ad:05:94:ca:c5:18:73:56:a0:46:1d:af:
00:b3:10:a8:d5:bf:2e:a4:e4:11:20:ce:a5:97:7b:87:ed:1c:
6d:43:77:48:4d:aa:bc:9a:4d:dc:aa:c8:7c:b4:44:34:c7:67:
38:72:2d:b6:df:21:86:d2:70:a1:06:be:43:fb:bf:66:16:e5:
a6:b8:d8:3f:7b:a8:12:d2:5f:95:0c:1f:87:6f:84:8f:59:2e:
c0:06:aa:a9:62:61:d3:fa:40:58:6e:56:ea:9f:7a:15:cc:68:
b3:3b:7b:dc:b7:52:88:35:4e:7c:86:a3:06:f8:d6:28:a9:0c:
cc:4b:bb:cd:47:4a:9d:7a:ef:67:d8:36:7a:3d:4b:f8:cc:9e:
3c:82:51:67:58:33:26:5b:d9:4f:e4:fe:03:06:91:8a:1b:8c:
fa:57:69:2d:e4:cd:80:9b:3d:79:5e:b6:1b:d0:b8:0d:1c:db:
11:1d:d7:64:80:71:b0:e3:f9:ce:8a:37:65:ed:9f:a4:ef:d7:
d9:aa:44:69:78:81:76:08:92:9d:76:6e:3b:55:8c:83:f8:e7:
b2:b7:5c:81:f9:bf:0c:a2:8c:0d:64:14:fb:71:ac:ab:70:73:
10:f4:ab:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:47 2024 by rpki-client on console-fra.rpki-client.org