Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/2NiYfTGmWbBEn9zBP3du3nqEQLc.roa
File: 2NiYfTGmWbBEn9zBP3du3nqEQLc.roa (raw, json)
Hash identifier: POShogwuAKswfhkvuOqwTEOuUz00zTxfUcgMz2Va2Ko=
Subject key identifier: D8:D8:98:7D:31:A6:59:B0:44:9F:DC:C1:3F:77:6E:DE:7A:84:40:B7
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018A506004DBACCC546FF387A6480B59B85A
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/2NiYfTGmWbBEn9zBP3du3nqEQLc.roa
Signing time: Fri 01 Sep 2023 10:53:04 +0000
ROA not before: Fri 01 Sep 2023 10:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.197.0/24 maxlen: 24
193.109.198.0/24 maxlen: 24
85.237.206.0/24 maxlen: 24
85.237.202.0/24 maxlen: 24
85.237.208.0/24 maxlen: 24
85.237.209.0/24 maxlen: 24
85.237.220.0/23 maxlen: 23
85.237.220.0/24 maxlen: 24
85.237.221.0/24 maxlen: 24
85.237.223.0/24 maxlen: 24
185.139.26.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.158.58.0/24 maxlen: 24
85.158.59.0/24 maxlen: 24
185.93.33.0/24 maxlen: 24
194.169.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:50:60:04:db:ac:cc:54:6f:f3:87:a6:48:0b:59:b8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Sep 1 10:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8d8987d31a659b0449fdcc13f776ede7a8440b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cd:e4:ca:e7:29:96:56:1a:66:eb:74:5a:a2:
b9:80:e1:38:ab:68:de:c5:ea:61:e8:1d:30:75:7f:
e3:35:5a:66:e3:e0:48:6a:52:fd:af:3a:98:3e:ee:
19:3b:25:74:b7:e8:c6:41:d9:7e:61:bd:bf:f6:cc:
33:c2:d5:cb:40:1c:ec:38:51:c5:ec:76:ed:c1:b1:
97:00:08:1e:49:df:16:14:b1:b1:1d:37:d5:f4:af:
6b:50:b1:a3:d3:dc:13:ea:5c:ed:61:9c:33:74:7a:
9c:2d:b3:cc:28:64:de:90:9a:a0:89:5c:cc:21:1e:
78:1c:35:d6:5e:78:ca:db:15:69:8f:5f:64:a7:27:
49:77:8d:02:63:7f:64:b7:d1:a8:85:20:c2:75:01:
1e:30:c9:a9:91:17:f4:a1:5b:ee:84:d0:b6:29:df:
c8:cf:fb:94:99:cc:1d:1b:d2:33:cd:06:99:28:0b:
45:f4:ec:17:d7:8b:22:63:12:4e:48:03:21:12:9a:
47:d8:ff:fe:4d:7b:42:6f:f9:a5:29:10:af:ac:38:
5b:1a:1c:bd:b2:09:4f:43:47:2e:c9:86:19:1c:6e:
8a:92:de:1e:c2:a1:25:ca:bf:ea:19:cf:f6:47:ae:
56:f2:a5:57:ab:60:91:ba:f2:52:c9:d6:ec:03:95:
76:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D8:98:7D:31:A6:59:B0:44:9F:DC:C1:3F:77:6E:DE:7A:84:40:B7
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/2NiYfTGmWbBEn9zBP3du3nqEQLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0-85.158.59.255
85.237.202.0/24
85.237.206.0/24
85.237.208.0/23
85.237.220.0/23
85.237.223.0/24
185.93.33.0/24
185.139.26.0/24
193.109.197.0-193.109.198.255
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
35:3d:ba:60:3a:5e:ee:49:4c:ef:fe:c8:2a:50:9f:36:70:c2:
51:bc:39:8b:10:9f:60:58:da:38:26:19:9f:0d:3a:f7:94:8a:
90:83:bf:29:10:0d:08:0a:78:a6:d5:fc:06:85:dd:8f:55:32:
97:67:b1:19:18:53:12:e2:3c:d3:b5:27:87:4f:9c:7b:d1:23:
23:30:23:94:1e:7a:3c:b4:50:c5:22:82:fd:14:75:ef:8c:61:
00:1f:b1:30:4f:7d:73:ae:b9:fd:36:6d:c7:c5:e6:9a:b1:8b:
da:6e:6a:61:95:5c:04:40:e2:b0:67:54:b4:3d:20:41:f6:c9:
61:d2:1c:7b:37:7f:09:f6:22:bd:70:8a:55:dc:c5:bf:d0:2f:
0a:2c:ad:d6:08:9a:a3:7d:85:22:43:38:f7:78:48:df:74:ea:
3b:85:34:38:e7:14:3f:d0:b8:76:6e:aa:a9:ab:12:70:4e:ef:
8f:74:1b:5f:27:0b:1c:0a:ab:74:bc:58:ee:4e:5e:6a:ab:29:
56:9e:86:ed:49:78:d7:16:9e:47:66:f6:6b:99:35:c6:5c:f7:
a5:57:69:36:49:9b:b7:e0:1b:dc:9c:3d:39:1d:e7:51:86:32:
88:ce:a0:38:6e:52:e8:18:05:54:a5:3b:bd:3d:75:a8:c2:9a:
3c:8e:5f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:14 2024 by rpki-client on console-ams.rpki-client.org