Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/5GsGLqOvA96h-m9CE53G6JiAtDY.roa
File: 5GsGLqOvA96h-m9CE53G6JiAtDY.roa (raw, json)
Hash identifier: sEyaHKUhOtoFtDKJmNEUjo9jkFxRtum6tLKjpMnGrmA=
Subject key identifier: E4:6B:06:2E:A3:AF:03:DE:A1:FA:6F:42:13:9D:C6:E8:98:80:B4:36
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018944448FAD3957097165018825434B2A88
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/5GsGLqOvA96h-m9CE53G6JiAtDY.roa
Signing time: Tue 11 Jul 2023 09:24:51 +0000
ROA not before: Tue 11 Jul 2023 09:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.197.0/24 maxlen: 24
193.109.198.0/24 maxlen: 24
85.237.206.0/24 maxlen: 24
85.237.206.0/23 maxlen: 23
85.237.220.0/23 maxlen: 23
85.237.220.0/24 maxlen: 24
85.237.221.0/24 maxlen: 24
85.237.222.0/24 maxlen: 24
85.237.223.0/24 maxlen: 24
185.93.33.0/24 maxlen: 24
185.139.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:44:8f:ad:39:57:09:71:65:01:88:25:43:4b:2a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jul 11 09:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e46b062ea3af03dea1fa6f42139dc6e89880b436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d6:a1:3d:58:78:41:31:e7:51:09:4a:b6:bb:
df:75:6b:c2:85:7c:5b:a5:aa:f9:41:bf:d9:e9:5f:
8a:c3:a9:2d:f1:32:41:19:07:ae:41:84:40:71:a7:
43:9e:95:de:e1:23:0f:09:96:a0:31:c9:b4:ee:7b:
7a:aa:a4:13:2f:74:21:1b:99:8f:95:ff:8b:30:30:
79:38:7c:32:17:07:b4:ef:72:97:02:e5:3a:1f:41:
a4:5b:e1:98:f3:c3:77:c5:2f:49:04:31:ed:e4:3a:
1d:ae:a0:ba:be:85:47:a0:7a:db:4a:31:de:84:11:
cb:cd:84:87:8d:b1:9b:f4:38:ee:2e:15:14:7f:bd:
ea:86:ce:54:b5:ac:f4:48:17:49:21:a9:f0:e9:50:
a0:91:6c:a5:d6:4f:61:f1:2a:c3:fe:e1:bc:9c:c7:
a0:77:b4:1e:60:c2:b6:41:66:2e:c0:4e:ee:4e:83:
af:bb:0a:9b:e0:eb:4c:e7:d6:bd:14:fd:0a:5e:2f:
bb:29:36:12:9b:58:0a:95:5b:74:aa:10:20:27:bb:
4d:1b:65:b0:f7:f6:d5:01:d2:26:8a:65:9e:c2:fa:
62:c1:2c:27:c7:48:f2:05:b0:9a:b0:95:82:b7:5e:
0f:e6:d5:e7:40:5b:83:cd:fe:bf:b8:9d:d7:22:0f:
fd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6B:06:2E:A3:AF:03:DE:A1:FA:6F:42:13:9D:C6:E8:98:80:B4:36
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/5GsGLqOvA96h-m9CE53G6JiAtDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.206.0/23
85.237.220.0/22
185.93.33.0/24
185.139.26.0/24
193.109.197.0-193.109.198.255
Signature Algorithm: sha256WithRSAEncryption
38:1a:29:35:a0:f1:5a:47:97:ba:f6:89:e0:dc:dd:34:fe:60:
d8:10:e7:19:4c:5e:d2:96:84:84:bc:c8:7d:16:4a:3f:44:f3:
56:2e:28:86:8f:13:a8:92:fb:97:65:09:e7:02:6f:21:09:90:
31:c3:67:4b:f4:34:ec:e5:e1:73:92:35:6b:d4:9d:30:10:d7:
1f:1b:f0:e8:2a:a9:4a:26:bb:b5:62:8b:7e:cd:58:35:50:11:
63:62:ef:d9:cd:f2:62:91:63:ee:ff:01:fc:2d:26:cc:99:ef:
6c:c0:6e:16:35:72:23:6b:4b:02:5d:fe:31:49:7c:8d:43:81:
ed:80:f9:d2:5d:86:2d:f0:d5:5e:8b:9b:fd:4f:9c:61:f0:3e:
f5:c5:05:b1:9c:5e:3b:a2:71:38:10:1b:a0:76:a0:c9:2f:83:
5d:db:e9:e7:72:a7:d6:f8:ea:b3:e5:94:b2:e6:1b:70:49:45:
89:04:3c:35:d5:f2:f1:e4:b6:00:c4:fe:81:72:f3:8b:11:c7:
da:da:cf:95:71:06:e2:03:79:c5:5f:5d:7b:9c:e6:6c:f8:3e:
45:8d:31:8a:c3:cd:f7:a6:76:d8:43:f0:28:39:26:09:f9:0c:
47:ef:bc:e8:01:aa:e4:cb:c6:8b:5b:9c:a1:1b:c8:71:44:30:
cc:7c:6a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:14 2024 by rpki-client on console-ams.rpki-client.org