Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/2qEm0N8BeY_8S2sg84mzUo3mnzE.roa
File: 2qEm0N8BeY_8S2sg84mzUo3mnzE.roa (raw, json)
Hash identifier: gsDjdUR7ZeG8iO3USmEXexu4ijQW6lgKpJjEWkquvOs=
Subject key identifier: DA:A1:26:D0:DF:01:79:8F:FC:4B:6B:20:F3:89:B3:52:8D:E6:9F:31
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B724044026EBBFBBBEE1C1BFFCD919549
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/2qEm0N8BeY_8S2sg84mzUo3mnzE.roa
Signing time: Fri 27 Oct 2023 17:48:16 +0000
ROA not before: Fri 27 Oct 2023 17:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.158.58.0/23 maxlen: 23
85.158.58.0/24 maxlen: 24
85.237.211.0/24 maxlen: 24
85.237.208.0/23 maxlen: 23
85.237.209.0/24 maxlen: 24
85.237.220.0/23 maxlen: 23
185.93.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:72:40:44:02:6e:bb:fb:bb:ee:1c:1b:ff:cd:91:95:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Oct 27 17:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daa126d0df01798ffc4b6b20f389b3528de69f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:28:06:b0:ad:38:47:3d:c7:55:fc:24:2b:
39:c6:31:32:c1:44:b0:18:b1:9f:63:32:13:26:8b:
20:9a:90:0b:b1:cb:f3:ac:0d:c8:7c:88:7c:67:d8:
89:1a:54:d6:25:e5:7d:4f:9b:b9:3b:a2:74:4b:42:
53:28:40:c8:b2:39:42:9c:56:34:d3:81:61:48:74:
1b:e6:e7:de:f6:f9:65:9b:88:9e:9e:49:e3:12:c7:
3b:f2:9a:23:fd:56:80:9e:38:fc:22:2b:c1:65:50:
d2:f8:e5:c7:78:a7:d1:61:6b:60:21:ce:da:bd:5a:
c0:63:18:fe:b6:e7:e2:eb:8c:9d:47:5d:f0:ba:3b:
eb:bc:e2:1c:52:87:96:3f:76:3c:76:4c:67:12:1a:
63:49:1b:ae:dd:ba:77:5a:ef:25:3a:d6:7e:41:b1:
a1:9f:39:c1:a2:a1:9a:dc:71:ff:f2:55:db:81:03:
5f:c9:18:89:fb:12:f2:e0:6b:cd:79:50:93:56:8d:
32:05:d5:3b:f6:96:13:41:bd:31:70:5f:db:5d:72:
e3:66:92:03:ed:e3:00:16:0e:67:cc:4d:a1:cd:b9:
63:13:d2:1d:ed:d7:ec:a4:df:e3:a7:ba:e6:2a:f6:
c4:2d:7e:91:94:b1:fb:22:ec:c0:61:22:57:70:32:
fb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A1:26:D0:DF:01:79:8F:FC:4B:6B:20:F3:89:B3:52:8D:E6:9F:31
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/2qEm0N8BeY_8S2sg84mzUo3mnzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.58.0/23
85.237.208.0/23
85.237.211.0/24
85.237.220.0/23
185.93.32.0/24
Signature Algorithm: sha256WithRSAEncryption
21:6c:62:52:33:4b:2f:82:53:ad:c0:9e:35:62:c7:80:25:b7:
92:34:af:4b:6d:bc:5c:22:71:5b:ee:68:5a:3c:4c:a1:ed:3a:
07:a6:15:45:ca:7c:30:52:4d:7a:1f:c8:13:fb:81:3e:2d:a4:
c6:74:08:3b:9c:47:75:0e:fa:03:cc:f2:41:77:89:60:f0:04:
b6:b3:5a:d7:40:ba:32:c4:71:e0:5c:4b:61:34:f9:e5:3a:8b:
8a:d5:4d:1e:ba:08:02:34:a8:bc:43:55:6d:6b:a0:32:3c:0c:
50:cb:f3:17:37:cd:a3:a5:41:62:7b:ba:a4:65:3b:de:ec:a7:
29:01:92:6a:29:dc:4c:80:87:80:fd:98:d5:00:0b:96:b4:5f:
ac:85:e5:0a:63:26:16:99:0b:59:ab:3a:de:66:50:bf:ef:ee:
8f:62:ec:56:1e:0a:fb:5f:da:63:50:14:50:b5:b5:54:7c:5e:
53:ba:c9:a5:cb:a4:97:1d:56:6d:36:81:42:32:1f:a1:bb:51:
c3:c5:df:a9:98:fe:2e:f0:23:68:f4:d6:06:a3:50:59:cd:09:
4a:1c:92:07:19:9e:24:60:f1:3b:62:49:89:cb:3c:62:d1:eb:
56:aa:fd:1e:33:fe:bd:6c:b9:58:d2:bb:cf:51:08:f2:ca:b8:
b9:1d:12:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:00 2024 by rpki-client on console-fra.rpki-client.org