Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/E5dtBdi3O15ypzOateoWpy4Kr5I.roa
File: E5dtBdi3O15ypzOateoWpy4Kr5I.roa (raw, json)
Hash identifier: eacNknJf0H0ClvsXoPxY0C/rTVt7VAx0QFk9iBD4Q1k=
Subject key identifier: 13:97:6D:05:D8:B7:3B:5E:72:A7:33:9A:B5:EA:16:A7:2E:0A:AF:92
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018A96806020A466A80BFD3C92923C2B00A0
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/E5dtBdi3O15ypzOateoWpy4Kr5I.roa
Signing time: Fri 15 Sep 2023 01:41:50 +0000
ROA not before: Fri 15 Sep 2023 01:41:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.197.0/24 maxlen: 24
193.109.198.0/24 maxlen: 24
85.237.206.0/24 maxlen: 24
85.237.202.0/24 maxlen: 24
85.237.208.0/24 maxlen: 24
85.237.208.0/23 maxlen: 23
85.237.209.0/24 maxlen: 24
85.237.220.0/23 maxlen: 23
85.237.223.0/24 maxlen: 24
185.139.26.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.158.58.0/23 maxlen: 23
85.158.58.0/24 maxlen: 24
85.158.59.0/24 maxlen: 24
194.169.217.0/24 maxlen: 24
185.100.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:96:80:60:20:a4:66:a8:0b:fd:3c:92:92:3c:2b:00:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Sep 15 01:41:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13976d05d8b73b5e72a7339ab5ea16a72e0aaf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c9:c4:75:98:03:e4:ae:53:33:07:a0:9a:88:
7c:72:b7:5e:74:4a:03:64:7c:fa:10:ff:34:bd:26:
aa:8e:f9:f0:32:67:da:03:ba:64:74:0d:e5:8f:ba:
04:57:97:d4:ce:4a:f6:33:0f:b3:d4:8a:82:73:21:
bc:7f:77:8b:60:ca:f3:95:ce:28:ae:06:f3:c4:77:
dd:18:21:47:7a:59:75:ed:9d:49:08:27:d8:1e:d3:
0e:82:1a:2d:3c:88:01:a3:43:5a:0e:82:7f:c5:7c:
4b:25:b6:50:9d:e0:1b:38:f5:ad:96:e4:34:46:8c:
c2:ff:6b:9f:95:1d:be:d4:f0:f8:e8:3a:b1:9b:fa:
85:97:84:5d:e3:62:89:82:b4:70:d4:14:84:cc:82:
2f:29:5b:ee:57:00:95:3d:8a:fe:a6:1b:60:f6:3a:
78:db:f3:aa:bb:71:bc:96:33:8c:b8:c1:ad:b3:e4:
97:99:db:71:b2:ef:04:f9:ef:d2:3f:dc:f8:a5:c3:
23:19:31:d3:ab:c9:5e:64:b4:8e:7e:b4:16:4f:c9:
68:03:32:55:55:58:83:de:a8:34:50:ba:8b:a9:58:
20:1a:18:2e:f9:76:d0:57:fb:05:78:61:8f:56:e7:
77:00:dc:07:91:60:a1:0c:c0:d2:84:8b:57:d0:ab:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:97:6D:05:D8:B7:3B:5E:72:A7:33:9A:B5:EA:16:A7:2E:0A:AF:92
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/E5dtBdi3O15ypzOateoWpy4Kr5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0-85.158.59.255
85.237.202.0/24
85.237.206.0/24
85.237.208.0/23
85.237.220.0/23
85.237.223.0/24
185.100.213.0/24
185.139.26.0/24
193.109.197.0-193.109.198.255
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0c:92:89:5e:29:e6:16:42:77:7c:62:0b:25:c1:37:80:b3:
ba:50:4c:92:5b:4d:8a:82:48:f4:62:ca:de:30:66:7b:2e:71:
3b:71:5a:72:8a:81:8c:fb:e3:87:31:68:af:c9:4f:03:fb:b0:
fd:8b:bb:02:ff:68:f1:92:cd:f3:91:37:cc:58:93:b5:dc:1e:
26:39:aa:35:11:e3:e7:b1:8e:80:bd:80:b5:cd:dd:86:44:a5:
f4:42:c1:5e:f2:dc:9a:57:8a:4d:51:b1:f2:c1:f7:07:e8:58:
27:94:05:ca:00:1e:74:1e:81:24:fb:9e:bf:6e:58:72:0b:a5:
20:47:91:d6:d8:1e:8a:ed:1e:37:56:6d:6f:f8:b4:c5:6f:2b:
af:d7:ec:33:37:8b:0c:3c:b4:9e:1d:cd:23:8f:32:77:dc:bd:
2c:d6:d5:93:ab:7d:d6:44:4b:a3:51:4a:3c:f0:9b:74:ba:6c:
ce:e1:ea:8b:b0:ee:7e:d1:c9:ae:0e:a6:8f:2e:6f:67:e0:77:
71:41:a9:59:47:7c:8b:1f:71:6e:2b:59:f6:fe:fa:e5:1c:55:
a8:5c:e7:a4:b3:00:4e:b7:39:fd:3c:50:d4:a7:0b:ea:33:e1:
01:d9:49:56:25:f9:1a:15:4c:fe:ee:b1:aa:c3:5e:8b:84:91:
84:92:9c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:14 2024 by rpki-client on console-ams.rpki-client.org