Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/1ShltDYAQ0-5B5bISCRSNFldHDI.roa
File: 1ShltDYAQ0-5B5bISCRSNFldHDI.roa (raw, json)
Hash identifier: yGgbmn4CZ4rNrLFSl980rN0Xifdw+RI1SK62j7hG0XQ=
Subject key identifier: D5:28:65:B4:36:00:43:4F:B9:07:96:C8:48:24:52:34:59:5D:1C:32
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B192C002C41C73309274557D61FDF8F6A
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/1ShltDYAQ0-5B5bISCRSNFldHDI.roa
Signing time: Tue 10 Oct 2023 10:39:55 +0000
ROA not before: Tue 10 Oct 2023 10:39:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198100
IP address blocks: 85.237.206.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:2c:00:2c:41:c7:33:09:27:45:57:d6:1f:df:8f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Oct 10 10:39:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d52865b43600434fb90796c848245234595d1c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9d:10:e7:ad:82:aa:fd:7e:fe:a4:1a:fd:56:
93:4c:fa:7c:7f:23:1c:07:b6:9a:46:b2:c2:73:37:
21:e4:a4:84:e6:e3:1a:9d:be:0c:83:23:55:59:e3:
0c:e0:34:f5:d5:9e:7c:0c:48:ab:c8:1a:b4:c6:81:
99:fd:83:79:1c:fe:d0:25:04:89:d3:de:ab:6a:f6:
c5:3a:63:f0:3b:e0:e0:ec:83:d0:ef:ef:ec:81:f0:
79:08:4b:ba:24:cb:e0:7d:17:4e:41:af:87:99:17:
ef:08:cc:2d:57:9c:01:3d:8e:94:58:53:30:9f:8b:
b8:8f:ab:3b:25:92:f5:cf:4a:c8:e3:f6:a2:da:b9:
b7:03:2e:dc:33:3c:c6:bb:12:21:b3:7e:de:0a:58:
09:13:78:1d:97:99:c7:5f:0e:d5:73:43:4d:f0:91:
ee:6c:1a:a5:75:f2:c9:d4:9e:e9:43:45:90:86:87:
09:d3:e7:18:44:e9:c0:4e:f3:2d:0d:9f:7d:f8:26:
7a:28:06:c3:f6:92:c6:3f:66:8d:9a:9c:90:d0:8b:
94:43:17:85:49:75:38:e7:9c:93:b4:ea:de:c1:92:
f1:09:c8:65:a3:6b:8b:56:37:a5:b4:63:15:f0:72:
c9:bd:80:3e:c7:02:a2:f4:61:47:31:63:b9:a9:20:
c6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:28:65:B4:36:00:43:4F:B9:07:96:C8:48:24:52:34:59:5D:1C:32
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/1ShltDYAQ0-5B5bISCRSNFldHDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.206.0/23
Signature Algorithm: sha256WithRSAEncryption
23:74:73:2f:64:80:16:57:c8:38:ab:bf:fc:38:56:18:f9:c9:
b0:9a:0b:7e:67:51:44:4d:ca:76:e5:e2:67:cf:9c:0f:63:e3:
71:70:76:a1:e0:d3:52:b3:f5:95:e7:78:d0:85:67:0e:64:45:
63:a1:fb:e1:64:bd:ee:3d:f9:80:7c:8a:a7:f5:76:5c:23:87:
c8:69:3c:6f:c0:c5:1a:3f:93:63:ae:7f:50:06:b1:4b:bd:1f:
59:08:65:c3:c6:61:5c:09:36:07:00:ce:09:4c:2e:ea:22:bb:
1b:7e:e7:7b:ea:68:73:2e:f4:e3:68:5f:b4:56:56:25:8a:78:
64:d8:ea:16:fe:63:ba:ad:98:24:f9:0f:f0:50:68:e6:38:52:
c1:04:7b:ea:b7:d8:fc:cf:ae:63:7a:8c:e9:87:58:ed:82:ec:
68:2c:92:3f:38:3c:f1:f6:2d:15:f0:69:10:e9:18:d0:55:e7:
6c:f9:62:99:71:9e:d5:93:86:74:6b:d9:f1:94:5c:b7:79:f7:
86:fc:7b:7b:51:9c:ca:9e:b0:3c:c1:c7:d5:3e:84:e7:57:55:
ec:51:89:43:1c:28:4e:c6:a5:bd:c2:94:95:14:58:d4:e7:78:
eb:99:d3:aa:7b:d1:93:af:3c:85:e9:26:91:b9:c6:48:b0:56:
c0:50:d6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:33 2025 by rpki-client