Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/CB6bgxx0VWBID-bB0-eXrD3mqy4.roa
File: CB6bgxx0VWBID-bB0-eXrD3mqy4.roa (raw, json)
Hash identifier: G/zLzL2wbm3aPf4P3tlAxbb+zoiRmRkHZrBB8GezqGs=
Subject key identifier: 08:1E:9B:83:1C:74:55:60:48:0F:E6:C1:D3:E7:97:AC:3D:E6:AB:2E
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B53FFD1238A3E85FC62F8B3E2F2D7EBD3
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/CB6bgxx0VWBID-bB0-eXrD3mqy4.roa
Signing time: Sat 21 Oct 2023 20:49:15 +0000
ROA not before: Sat 21 Oct 2023 20:49:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59426
IP address blocks: 185.139.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:53:ff:d1:23:8a:3e:85:fc:62:f8:b3:e2:f2:d7:eb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Oct 21 20:49:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=081e9b831c745560480fe6c1d3e797ac3de6ab2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d0:10:44:eb:db:7f:84:4b:ad:56:d5:42:b9:
c9:3f:27:17:86:9a:90:5a:0c:d3:26:39:c0:ee:b6:
59:44:c5:84:98:f3:65:3c:c4:d9:07:1b:d0:30:b9:
26:49:96:25:8e:f7:8d:77:b1:7b:5d:3a:00:e2:89:
91:ba:00:b0:d0:ac:da:23:fd:e5:92:b9:c2:22:f0:
d4:0d:e5:91:11:5f:fb:27:31:ed:13:f4:a4:e3:a0:
b2:bc:52:03:df:ed:8a:63:a0:6f:55:f2:1b:dd:c5:
86:2f:87:f1:93:e7:b3:bd:04:53:b6:45:ec:33:27:
a7:24:3f:b8:5a:bc:34:c2:71:a8:eb:b0:4d:2d:04:
79:25:36:ab:43:4b:bf:23:8f:d4:f8:c0:29:bc:c5:
a7:74:29:2f:02:e9:cd:da:df:69:ee:d9:bb:7f:12:
a3:a0:c3:bb:f0:b6:88:18:54:57:cb:d4:ba:92:f5:
61:8f:2f:af:51:41:0e:61:11:e8:2d:ee:70:b4:49:
3c:db:25:b4:9a:44:d7:30:e5:4d:8f:e9:64:9e:02:
f9:a5:e1:5a:d7:b0:09:f7:57:87:e9:49:5a:aa:10:
60:cc:bd:41:f8:99:8e:fc:ca:4f:88:ba:9b:78:06:
38:ca:da:da:47:86:b6:61:fa:a9:34:22:b5:51:af:
61:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1E:9B:83:1C:74:55:60:48:0F:E6:C1:D3:E7:97:AC:3D:E6:AB:2E
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/CB6bgxx0VWBID-bB0-eXrD3mqy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.24.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a6:ae:91:58:2e:87:73:30:25:ff:15:37:db:e1:df:66:6e:
7e:1d:f0:4f:04:37:e1:97:19:62:df:4b:c6:30:f7:cb:88:98:
9e:50:c3:e2:59:79:78:5f:76:db:a3:34:94:26:0d:86:a5:fd:
f0:73:c1:50:e0:c4:16:a2:f7:70:53:c7:0b:14:ee:21:de:92:
76:81:ef:6e:88:a2:f3:e7:b7:8d:4f:f4:1a:f0:22:38:0c:af:
48:e5:2f:d0:7d:e8:f0:6d:68:08:9e:74:28:74:42:33:a0:a1:
82:cb:52:5d:6d:7e:d2:9d:65:70:cd:52:0a:41:1a:c5:68:82:
a8:74:bf:86:a7:6f:f4:66:22:4e:b5:c4:47:7e:72:0f:e2:b0:
b8:30:31:50:70:f4:0a:bc:46:f5:9c:5e:22:ae:45:42:31:d3:
aa:3d:94:c6:cb:6e:9d:fa:21:3b:ec:81:34:34:12:cd:de:11:
a2:44:0d:03:05:ce:ef:51:21:09:00:50:64:0d:bc:34:9b:f2:
9b:3b:73:77:06:e8:85:43:ce:8f:c0:3e:d7:be:2e:86:22:b0:
40:63:3a:1b:0e:b2:e1:50:a1:3d:a4:fa:f8:80:2d:f4:53:2d:
30:66:c5:0a:01:d8:ad:d2:3e:1c:f7:24:15:bc:e2:ca:e5:7b:
8f:e2:1f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 07:16:17 2023 by rpki-client on console-fra.rpki-client.org