Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/3aTA-h7k6CVnFPNxTyShKc764S0.roa
File: 3aTA-h7k6CVnFPNxTyShKc764S0.roa (raw, json)
Hash identifier: mP7dr6Nwj8BjyBwP6H4tQ7qn4CIVXtkYpRPLjWbPHjw=
Subject key identifier: DD:A4:C0:FA:1E:E4:E8:25:67:14:F3:71:4F:24:A1:29:CE:FA:E1:2D
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018AF821DF8AE176B769532E283D6312B6B2
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/3aTA-h7k6CVnFPNxTyShKc764S0.roa
Signing time: Wed 04 Oct 2023 00:41:24 +0000
ROA not before: Wed 04 Oct 2023 00:41:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 85.237.196.0/24 maxlen: 24
193.109.198.0/24 maxlen: 24
85.237.208.0/24 maxlen: 24
85.237.215.0/24 maxlen: 24
85.237.214.0/24 maxlen: 24
85.237.216.0/24 maxlen: 24
185.139.25.0/24 maxlen: 24
185.139.27.0/24 maxlen: 24
185.235.32.0/24 maxlen: 24
85.158.58.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.158.61.0/24 maxlen: 24
85.158.63.0/24 maxlen: 24
85.158.62.0/24 maxlen: 24
85.158.60.0/24 maxlen: 24
185.93.34.0/24 maxlen: 24
185.93.35.0/24 maxlen: 24
185.100.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f8:21:df:8a:e1:76:b7:69:53:2e:28:3d:63:12:b6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Oct 4 00:41:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dda4c0fa1ee4e8256714f3714f24a129cefae12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:16:64:c3:85:ab:c1:f7:7a:9d:b5:7e:33:
f3:96:30:cb:6b:93:07:29:40:71:1b:dc:aa:ba:78:
80:cc:32:1a:87:fc:a2:6e:32:e8:e0:0c:4c:fc:96:
89:fb:ee:87:1d:fe:b7:1c:b3:05:76:28:8e:67:ce:
df:bd:ab:84:f0:8e:dc:93:db:83:76:e9:bd:e7:6c:
85:f8:e0:25:fe:f5:29:3e:fb:e0:85:71:6d:c4:5e:
0e:11:e2:e2:b2:68:3f:12:11:c8:f6:d3:fd:5a:81:
85:6a:a6:bd:a6:7d:36:1e:34:36:3c:a7:5d:91:b1:
f1:79:ab:b3:ff:dc:5c:e3:7c:4c:2d:ac:3a:b2:ea:
c1:da:c0:6b:bc:c3:6a:ed:a7:b2:91:ec:84:4c:d3:
93:95:ae:85:67:75:1b:97:8a:b0:58:5b:1b:46:22:
e7:c8:3f:4f:c2:e5:04:98:36:4e:3b:7a:12:d9:35:
58:8a:f7:f5:40:b3:0d:9a:6a:fc:5c:f6:ec:a3:66:
96:aa:fc:ec:2f:00:07:0b:40:05:78:dc:1d:33:53:
f9:77:4f:1d:7e:96:b9:f3:75:ea:b8:e1:9a:50:0d:
4c:0a:43:52:49:60:d7:68:ed:74:87:b6:ea:e9:0a:
c9:5a:b3:65:bd:e5:c2:f9:7c:4c:ad:b0:d5:c5:e9:
b7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:C0:FA:1E:E4:E8:25:67:14:F3:71:4F:24:A1:29:CE:FA:E1:2D
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/3aTA-h7k6CVnFPNxTyShKc764S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0-85.158.58.255
85.158.60.0/22
85.237.196.0/24
85.237.208.0/24
85.237.214.0-85.237.216.255
185.93.34.0/23
185.100.212.0/22
185.139.25.0/24
185.139.27.0/24
185.235.32.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
77:23:76:53:a4:1f:01:ed:83:c5:ba:9b:31:15:f3:63:d5:37:
af:47:ce:53:de:e6:c8:2a:5b:74:b7:2b:e8:64:c7:59:1e:27:
66:c4:1a:37:9f:b8:ff:88:08:5c:f1:00:2d:d7:a1:2c:d8:d1:
1c:51:ba:e9:be:f7:25:a5:ce:c6:61:9b:41:59:68:7c:d7:ba:
b1:98:36:1d:9f:19:46:ca:99:81:14:38:f5:9e:96:56:2d:6a:
72:8e:40:6c:b6:03:0a:78:94:40:c0:3c:39:27:cc:19:58:ab:
b7:60:d0:a3:17:e2:7d:bb:55:22:87:15:18:03:72:86:bb:a9:
65:82:40:f8:1b:20:5c:fe:42:c3:e5:29:5e:7a:cd:b4:4b:e8:
9a:8d:b2:63:af:8e:23:fb:a8:29:63:de:64:38:0c:32:0c:b1:
ba:18:5c:0d:f0:84:c0:14:c0:e5:d4:20:b7:5b:57:34:b2:fe:
10:10:43:a8:98:d2:fa:8f:4a:69:04:4e:98:64:b5:c0:de:c7:
93:df:96:62:21:d5:ae:88:36:f6:22:63:e5:42:a6:44:f5:1c:
b0:02:95:7d:f1:0f:27:6f:c7:d9:6e:18:b7:26:78:f4:31:cb:
8f:51:fc:df:3a:49:e2:da:b1:2b:64:ff:e8:9a:59:c7:3a:81:
a9:7b:58:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:00 2024 by rpki-client on console-fra.rpki-client.org