Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/0ko1hmLTeIDmhRvPG-kMPMZYiSw.roa
File: 0ko1hmLTeIDmhRvPG-kMPMZYiSw.roa (raw, json)
Hash identifier: HoFH+qmM3ziFH9OLJOG8SrT4PnppHiQCMhbZBrKSRBc=
Subject key identifier: D2:4A:35:86:62:D3:78:80:E6:85:1B:CF:1B:E9:0C:3C:C6:58:89:2C
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B30E4B10A8BCBFEC756C292FF78BF971C
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/0ko1hmLTeIDmhRvPG-kMPMZYiSw.roa
Signing time: Sun 15 Oct 2023 01:12:55 +0000
ROA not before: Sun 15 Oct 2023 01:12:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198510
IP address blocks: 85.237.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:30:e4:b1:0a:8b:cb:fe:c7:56:c2:92:ff:78:bf:97:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Oct 15 01:12:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d24a358662d37880e6851bcf1be90c3cc658892c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:70:70:02:f0:97:53:fe:08:6a:85:b2:24:
dd:2a:cc:e8:c4:7f:b5:ac:16:ae:4d:89:81:27:37:
93:c8:5e:f5:2d:65:db:e8:c1:80:9b:d4:78:45:f3:
9a:87:e4:19:64:78:49:90:12:bb:bb:cd:9f:b1:fc:
53:fd:67:b1:d6:79:93:bd:10:87:db:f1:63:5d:04:
d6:38:bb:0f:fe:2b:30:47:95:1c:21:44:0e:7a:bb:
dc:76:14:ea:8a:cc:40:f2:12:35:a1:77:6b:b1:a8:
2f:17:3a:bb:46:fb:5e:a9:c0:95:62:99:61:41:73:
1b:d4:3a:23:b3:9b:c7:ba:7d:1e:d5:16:8e:d7:eb:
e2:af:b8:70:42:0e:f9:e6:64:f1:2a:4c:dc:e7:b1:
4f:7e:3f:18:28:ad:ef:ff:50:2a:64:99:02:27:3b:
5b:62:b5:ea:5c:1a:10:8b:f5:36:8e:da:64:ce:06:
98:4c:d1:0c:9a:a3:c4:12:5e:37:74:35:69:5c:6f:
2b:11:31:d3:e9:46:e5:82:dd:1e:20:e4:cf:de:2d:
0a:0b:cf:38:2e:c8:81:8a:51:66:15:7f:7a:1b:17:
83:c0:84:b5:47:b4:d0:ee:1b:ea:0a:0e:67:ae:7b:
66:eb:a0:48:c6:a3:a3:a5:92:cd:85:f8:bd:84:0f:
74:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4A:35:86:62:D3:78:80:E6:85:1B:CF:1B:E9:0C:3C:C6:58:89:2C
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/0ko1hmLTeIDmhRvPG-kMPMZYiSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:13:09:1e:da:d4:40:38:da:3d:2b:89:f6:8f:61:0d:e1:9a:
d6:20:69:d8:2c:2a:0f:e6:1d:44:cf:b8:4c:15:c6:11:68:03:
0b:21:a6:e5:a1:a7:90:2e:bd:69:f4:5a:45:c5:60:7d:b9:a8:
ad:3f:0b:51:21:53:0f:e8:fc:4b:59:9c:97:30:bc:55:99:48:
d5:19:41:13:e4:7a:7b:26:bb:22:16:4d:b2:e4:56:97:6b:dc:
2d:24:c0:4a:63:1e:54:ae:7e:1b:8c:a4:15:db:09:ad:9a:f7:
52:6e:f8:25:97:1a:f4:9a:c5:e3:d1:ce:9e:a3:35:84:22:c8:
b2:fa:36:e6:9c:a8:93:65:90:a8:ee:16:7a:57:ec:1a:27:b9:
eb:fa:3c:a2:20:71:6a:d5:b5:e1:34:05:c8:0a:3d:93:8c:34:
62:84:ef:da:30:2b:91:25:8e:46:58:7c:96:e8:32:c4:d1:c6:
fb:89:c1:f1:41:0e:60:66:56:09:f0:50:ce:36:bf:e5:05:c4:
4b:bb:4d:17:c0:98:9e:54:56:58:03:7e:d4:56:36:02:5f:9d:
37:9c:7e:cb:0c:83:a7:bc:57:b9:98:1f:2b:27:39:2d:15:05:
cc:26:40:71:29:b1:9c:02:ae:82:89:24:52:06:8a:73:ec:60:
27:6d:8a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:57 2025 by rpki-client