Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/8DicAH_E6EQ8f3WrW_Qxr6hs3uE.roa
File: 8DicAH_E6EQ8f3WrW_Qxr6hs3uE.roa (raw, json)
Hash identifier: FD2Z8lb67P4d6yrcaF6guwe9nSwScXiJKYh7ich4P5g=
Subject key identifier: F0:38:9C:00:7F:C4:E8:44:3C:7F:75:AB:5B:F4:31:AF:A8:6C:DE:E1
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 01856FCBA69C3E7BD4D40F8A372ED2D2D778
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/8DicAH_E6EQ8f3WrW_Qxr6hs3uE.roa
Signing time: Mon 02 Jan 2023 00:04:55 +0000
ROA not before: Mon 02 Jan 2023 00:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397630
IP address blocks: 185.100.215.0/24 maxlen: 24
185.139.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:a6:9c:3e:7b:d4:d4:0f:8a:37:2e:d2:d2:d7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jan 2 00:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0389c007fc4e8443c7f75ab5bf431afa86cdee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:f0:b9:f5:c3:8e:c9:e3:8d:6c:d0:c6:70:
f9:86:68:e1:0d:88:53:23:25:10:3c:33:6f:b4:65:
0d:f8:61:cc:5b:4e:60:a2:26:6f:08:fe:52:1f:33:
b9:0d:15:1b:96:c7:e1:91:b8:85:42:9f:ea:64:73:
cd:42:e8:1f:74:a1:9b:13:8e:47:02:4d:26:5f:2b:
80:2b:98:27:38:d7:f7:d0:fe:ba:01:ad:59:a8:d3:
63:e8:3e:22:7d:20:a4:00:f2:4c:7c:74:06:6a:b1:
d9:59:38:34:a2:01:be:b6:c2:8f:df:d4:e8:56:9f:
b0:a5:11:94:7f:81:df:ce:c2:43:83:37:a7:a4:d1:
7f:bd:1e:35:30:3d:df:ac:25:78:fc:f9:0b:90:6f:
da:fe:08:d5:42:d2:58:cd:b1:d2:3a:28:32:db:d2:
b2:a4:d1:36:78:fa:2a:ea:f9:64:42:e8:84:f8:8b:
fe:45:3c:e8:b6:4e:2e:1e:9b:7f:60:29:11:51:39:
fc:97:85:b2:07:c9:7b:39:ec:83:7e:12:9d:8a:ee:
ed:c2:51:78:fb:7f:f2:1a:6e:5e:33:8b:4b:74:6e:
3b:f6:17:f0:55:8c:f8:1a:f6:3e:0a:d8:55:3b:3b:
c0:2d:66:3e:d0:63:64:11:fd:77:49:74:09:b0:15:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:38:9C:00:7F:C4:E8:44:3C:7F:75:AB:5B:F4:31:AF:A8:6C:DE:E1
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/8DicAH_E6EQ8f3WrW_Qxr6hs3uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.215.0/24
185.139.27.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2e:cf:e8:d8:c8:d1:f1:19:7d:66:45:7d:0d:3c:59:a2:b7:
96:78:13:94:d5:ce:b2:16:45:0d:44:14:1e:33:02:95:68:d6:
95:f0:2c:33:25:e3:ec:ca:4f:9f:b6:70:f0:3a:a7:98:00:0d:
fa:53:32:92:fc:81:64:7f:15:94:4a:66:d9:23:42:84:5f:03:
4e:5f:8b:ad:20:e4:24:0c:43:a2:e8:43:2c:b4:39:bf:2a:b3:
f0:e0:26:05:61:ed:e3:ea:ae:f5:7d:29:98:b0:b2:2c:76:dd:
8c:a6:5b:dd:04:72:00:2d:6c:29:18:49:b4:a4:2d:3b:02:0b:
e4:5e:4b:23:86:d0:7a:e4:13:2b:ed:f7:5a:7c:4c:89:32:0e:
09:5f:f7:74:b0:ef:5e:55:f7:2c:f3:6a:52:49:f1:2c:c7:e1:
62:dd:d2:a0:1e:cb:7c:b1:2b:35:9b:68:a9:97:9b:83:df:05:
28:0c:cb:79:19:3c:a5:92:fd:f3:05:ed:ad:f0:38:15:7e:bf:
b7:ff:aa:a6:c0:a9:bd:0d:20:4f:bc:29:67:6a:94:35:d1:ae:
d6:5c:a1:8d:7c:ba:98:0b:1e:9c:ee:c6:59:86:5c:af:66:2a:
e9:24:8d:d4:2b:d0:74:78:aa:43:4c:53:93:55:07:59:08:4e:
50:f7:c3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:14 2024 by rpki-client on console-ams.rpki-client.org