Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/zGB-5stv9jRDwWv48XmGWTBrDbQ.roa
File: zGB-5stv9jRDwWv48XmGWTBrDbQ.roa (raw, json)
Hash identifier: Up0KYOy2xaRtC089Mgrws5kpjeFkRogn/ARIyW/Gny8=
Subject key identifier: CC:60:7E:E6:CB:6F:F6:34:43:C1:6B:F8:F1:79:86:59:30:6B:0D:B4
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0572C6BE
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/zGB-5stv9jRDwWv48XmGWTBrDbQ.roa
Signing time: Sun 24 Apr 2022 21:59:27 +0000
ROA not before: Sun 24 Apr 2022 21:59:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 85.158.59.0/24 maxlen: 24
85.237.214.0/24 maxlen: 24
185.89.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91408062 (0x572c6be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Apr 24 21:59:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc607ee6cb6ff63443c16bf8f1798659306b0db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:bb:3b:e8:dd:7e:93:7f:f2:6f:8f:f6:74:
01:9a:5f:a5:c1:8b:c3:eb:e6:82:62:a5:89:cc:59:
08:1f:72:38:42:19:8a:28:b8:44:e7:70:41:cb:13:
a2:2a:65:2c:7d:e9:8a:d9:b7:f0:3a:04:a6:e7:0e:
bf:fa:b4:5a:46:75:5a:36:6f:9d:9c:f8:89:c2:9b:
95:10:7e:da:e9:c1:37:25:74:6d:30:b8:1b:8a:9e:
5f:37:b3:39:ff:c8:16:46:2f:bd:24:6c:f3:f8:d1:
ab:b4:3d:d8:5c:53:f3:6a:c7:8c:4f:36:c6:e0:89:
2c:38:00:78:cf:6c:63:61:15:bb:03:af:6b:71:e6:
f5:7a:f0:7b:fe:42:6e:4e:ea:6e:93:0b:4d:04:f1:
30:19:47:a7:cd:c3:6f:f2:a4:92:66:99:48:6a:11:
31:66:e9:d4:36:e5:4a:c7:d5:73:d2:fc:e0:fb:65:
86:c5:67:ff:94:0d:1e:ca:06:1b:3d:bc:b1:39:5d:
5f:84:cf:66:f6:eb:cb:43:6f:49:fa:9a:61:03:a6:
ea:fd:e7:40:b9:eb:87:0d:41:c8:8a:d0:9a:5f:28:
78:84:e8:12:09:5b:1d:23:ef:7d:7a:64:ef:5d:a4:
17:d0:fe:25:a7:07:7a:f9:94:4a:e2:df:17:96:61:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:60:7E:E6:CB:6F:F6:34:43:C1:6B:F8:F1:79:86:59:30:6B:0D:B4
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/zGB-5stv9jRDwWv48XmGWTBrDbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.59.0/24
85.237.214.0/24
185.89.76.0/24
Signature Algorithm: sha256WithRSAEncryption
94:04:ae:3d:b8:d9:bf:b6:ff:04:74:cf:e7:95:83:82:35:11:
21:c8:64:b0:8a:86:c8:03:18:5a:4c:26:59:fc:a1:57:2d:b5:
c4:c2:cb:36:9a:4d:7a:fb:5a:a1:26:ff:37:33:d5:9f:38:25:
f1:2e:9b:9d:d9:aa:d8:d6:6d:3c:aa:91:3e:f7:5a:d9:ea:0a:
8e:9b:f5:d3:25:62:12:f3:67:01:d6:7d:22:7f:46:82:c5:e6:
14:75:67:c2:9b:5d:6f:cd:ac:73:33:e5:dd:77:d4:b4:67:af:
eb:bc:86:d8:28:11:6b:42:f0:18:d9:46:0d:cf:41:29:2d:ed:
a1:eb:d5:d4:8c:55:f0:55:4e:cd:ed:0e:71:44:7e:7a:a4:54:
63:73:9f:58:b6:05:6b:8e:87:0f:46:03:8a:6b:35:a1:95:86:
d6:a5:c5:3a:a3:f9:f3:ca:d3:8d:1f:fc:f3:b3:78:23:d3:46:
fb:88:36:f1:d2:36:ac:1e:b0:c0:93:11:98:d1:d6:3c:22:9c:
c1:5d:70:53:08:9d:68:65:a6:73:0d:ee:8b:59:17:ba:70:53:
7c:a8:f7:b0:e8:ad:d7:e4:6d:5e:2a:e5:5f:dc:87:4d:40:28:
bc:18:45:fb:59:f6:a2:37:00:37:ca:34:65:e8:a9:77:7c:08:
86:2d:8b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:08 2023 by rpki-client on console-ams.rpki-client.org