Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/62jGaB1ZM0w43pCczcYvvcwIOpg.roa
File: 62jGaB1ZM0w43pCczcYvvcwIOpg.roa (raw, json)
Hash identifier: bSafTPemz5YA0Wifrvn2mafHIA5URD/j1JIC0I5cIXg=
Subject key identifier: EB:68:C6:68:1D:59:33:4C:38:DE:90:9C:CD:C6:2F:BD:CC:08:3A:98
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188C84CE9B38265094CCF372D969CACFC16
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/62jGaB1ZM0w43pCczcYvvcwIOpg.roa
Signing time: Sat 17 Jun 2023 07:41:03 +0000
ROA not before: Sat 17 Jun 2023 07:41:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
85.237.206.0/24 maxlen: 24
85.237.206.0/23 maxlen: 23
85.237.202.0/24 maxlen: 24
85.237.217.0/24 maxlen: 24
85.237.220.0/24 maxlen: 24
185.93.33.0/24 maxlen: 24
185.139.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c8:4c:e9:b3:82:65:09:4c:cf:37:2d:96:9c:ac:fc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 17 07:41:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb68c6681d59334c38de909ccdc62fbdcc083a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:99:fd:1a:f5:85:fe:42:cd:f0:45:66:25:36:
ac:4a:b3:d0:9f:d7:e1:50:b2:0b:80:91:8a:95:17:
5e:80:99:a0:1d:65:bc:95:98:7e:40:40:f1:82:b7:
3f:8a:66:9e:53:ce:58:09:dc:2b:b0:54:ce:c0:5c:
31:1a:d0:4e:4d:5b:10:8c:ba:a6:e7:15:dd:2f:61:
5b:7b:00:e9:95:fb:e8:ef:67:e6:85:0f:a7:6c:3c:
07:15:4a:7a:a0:ba:7f:ec:e6:61:4b:36:6c:cb:f7:
c8:7b:33:e5:f7:62:51:55:8d:42:0e:8d:67:22:cc:
82:67:ad:72:36:b8:62:ef:c0:b7:49:dd:56:59:16:
de:75:34:d4:e1:e0:c9:6b:fa:bb:84:cc:fb:2e:98:
ee:6c:51:91:59:88:86:9c:08:cb:9b:e8:71:f4:27:
89:d5:a2:fc:3b:f1:1c:7c:24:28:10:7f:c3:ac:24:
b6:32:72:33:cc:91:ca:60:a0:89:51:c1:25:53:a3:
7a:9d:29:6d:25:2b:32:bd:f6:c1:d0:54:ff:36:af:
1c:b8:83:fb:a2:5a:af:e6:35:9f:a3:98:e6:10:83:
ec:cc:97:f6:55:7c:5c:bd:ff:5c:8f:c4:2a:47:14:
38:84:79:db:f0:8d:24:cd:d8:e9:c5:c6:3b:01:ca:
8e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:68:C6:68:1D:59:33:4C:38:DE:90:9C:CD:C6:2F:BD:CC:08:3A:98
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/62jGaB1ZM0w43pCczcYvvcwIOpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.202.0/24
85.237.206.0/23
85.237.217.0/24
85.237.220.0/24
185.93.33.0/24
185.139.26.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a2:db:8d:8f:fc:1e:2e:42:1b:14:cd:ee:f9:25:28:0c:20:
11:0e:29:04:66:af:9a:f1:70:46:29:46:79:08:bf:a1:a6:66:
e8:de:2d:e7:a8:5a:45:1b:ca:c3:00:d5:ea:23:a7:d1:54:f2:
f9:77:83:93:26:2e:9a:9b:72:d7:3b:83:bd:84:55:91:8a:08:
00:aa:68:89:20:74:b1:a6:f4:a3:e9:d3:b2:3c:34:89:48:26:
cc:0a:9b:46:d5:3a:01:79:e9:ba:c8:ff:65:bb:ef:27:24:46:
93:dd:e2:ce:a4:1b:68:bc:c0:40:7f:cf:d4:9d:17:02:4b:3d:
e0:ef:a9:b8:ab:a1:b7:86:dd:4a:38:a0:2b:d7:d0:e7:bf:a9:
b3:00:7d:be:81:0d:12:c1:25:66:1b:09:46:16:3a:6d:fc:cc:
31:9d:52:82:7c:74:b8:34:c1:76:fc:2a:97:c7:ae:6e:99:9a:
dd:b3:20:41:db:36:73:93:1e:75:7a:65:94:65:d9:b8:8f:e8:
26:71:b2:84:7f:59:ba:79:49:f7:6a:c3:5f:a2:da:08:67:3b:
73:c0:33:6e:9b:c9:3d:7e:23:19:d8:81:33:7a:11:f4:38:b1:
ca:f7:57:d9:e3:c1:7b:bf:ee:95:9c:87:e2:d3:30:f5:23:56:
0a:ba:13:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:00 2024 by rpki-client on console-fra.rpki-client.org