Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/C7SLhDdMS4zOkEQ9WkulGyLHQ2g.roa
File: C7SLhDdMS4zOkEQ9WkulGyLHQ2g.roa (raw, json)
Hash identifier: CdqxwOcBzZZagV0izJkv/ab/iiCL2sBnbBp4BJaUzvI=
Subject key identifier: 0B:B4:8B:84:37:4C:4B:8C:CE:90:44:3D:5A:4B:A5:1B:22:C7:43:68
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018A8BDCAE822639D5EE2F8D0EE15D4F6488
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/C7SLhDdMS4zOkEQ9WkulGyLHQ2g.roa
Signing time: Wed 13 Sep 2023 00:06:50 +0000
ROA not before: Wed 13 Sep 2023 00:06:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 193.109.194.0/24 maxlen: 24
85.237.200.0/24 maxlen: 24
85.158.56.0/24 maxlen: 24
85.237.213.0/24 maxlen: 24
185.89.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8b:dc:ae:82:26:39:d5:ee:2f:8d:0e:e1:5d:4f:64:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Sep 13 00:06:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bb48b84374c4b8cce90443d5a4ba51b22c74368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:45:83:8e:d7:c6:05:12:fc:b4:11:96:c2:8b:
9a:4f:29:8b:7a:ce:71:84:d5:2f:21:8c:9e:83:c9:
c7:50:c7:15:0f:d6:20:2c:d7:59:20:e9:55:f6:77:
27:a9:b5:35:be:9a:88:03:3d:5e:54:18:76:d4:bd:
06:97:55:06:4d:e9:9f:37:66:2f:32:a6:da:23:aa:
7f:09:4a:e2:f8:53:57:8b:5e:5d:06:8f:6e:68:77:
d7:64:7c:f1:55:29:5d:b9:02:fe:de:e8:5a:a2:33:
57:70:2b:9f:ef:4f:2a:f7:4c:ad:8e:dc:1b:16:95:
0e:80:cb:ce:9e:4c:52:46:27:f8:17:4e:88:10:d0:
ba:58:52:10:a7:13:ac:58:56:7c:2c:8e:75:d3:b1:
e1:63:8b:a7:c3:33:50:02:ad:be:18:b9:82:64:25:
ba:4d:b4:12:b5:27:1f:d6:83:87:bb:fd:75:f7:43:
33:06:09:52:be:1a:9c:d1:2b:08:7a:af:b7:07:fe:
23:9b:cc:77:42:76:cb:ce:12:c7:02:03:db:d4:a4:
45:7c:64:77:ec:03:62:da:3d:9f:9b:5d:64:67:70:
53:02:d1:0d:93:f0:be:c0:72:00:4b:97:3d:1f:34:
78:e7:77:3c:db:b6:44:c4:a6:49:74:17:86:1a:46:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B4:8B:84:37:4C:4B:8C:CE:90:44:3D:5A:4B:A5:1B:22:C7:43:68
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/C7SLhDdMS4zOkEQ9WkulGyLHQ2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.56.0/24
85.237.200.0/24
85.237.213.0/24
185.89.77.0/24
193.109.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2f:c5:47:6e:82:cd:33:37:bb:91:f0:e3:75:86:74:16:34:
50:b3:cb:12:7b:99:d9:2e:70:7c:80:26:1d:09:9d:3b:b3:21:
1e:de:03:45:d2:d8:fa:2e:ab:28:7f:c9:79:79:f7:0c:c0:8d:
6c:ce:d4:d1:68:79:dc:27:13:99:39:70:9a:c0:18:16:29:f4:
53:7c:68:2c:e0:a9:db:1d:0f:b2:14:a9:4a:9e:80:ce:cc:1b:
ad:b6:c8:df:6f:96:a4:f9:79:17:a2:84:57:fc:e2:e6:5f:fc:
b1:97:55:d2:69:96:ed:b1:99:e6:fc:0c:98:c2:bd:31:2d:83:
19:b7:91:41:fb:76:ab:65:95:65:9b:9f:d6:7d:9d:ad:7f:58:
0f:b2:d4:65:b1:fe:80:df:3a:7c:52:4c:02:53:77:17:dc:7d:
9a:04:8c:43:d7:2d:6b:74:48:e3:0f:58:70:bf:a9:1f:03:5b:
51:ac:f9:83:4a:14:66:0a:cf:c2:9b:e2:f5:84:f5:2f:e8:8b:
24:d6:bd:6e:24:82:32:87:cb:8b:3c:ef:d8:27:67:24:c0:5b:
fd:42:13:1c:68:8b:0f:72:e5:2b:07:50:44:8c:6b:ba:b5:6f:
4d:77:27:9d:cd:07:f6:ca:58:0e:a0:77:e7:85:4d:4f:00:53:
e6:2d:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:14 2024 by rpki-client on console-ams.rpki-client.org