Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/FA38ufTB-2JbPmJGuLuC1S9XQ8k.roa
File: FA38ufTB-2JbPmJGuLuC1S9XQ8k.roa (raw, json)
Hash identifier: cX/QKtK51mMGia+Izf7WqxagGwfU7qOcF7oOQD0uF6w=
Subject key identifier: 14:0D:FC:B9:F4:C1:FB:62:5B:3E:62:46:B8:BB:82:D5:2F:57:43:C9
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0189247C916319E01DD8243E39B036982A26
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/FA38ufTB-2JbPmJGuLuC1S9XQ8k.roa
Signing time: Wed 05 Jul 2023 05:18:10 +0000
ROA not before: Wed 05 Jul 2023 05:18:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.197.0/24 maxlen: 24
193.109.198.0/24 maxlen: 24
85.237.206.0/24 maxlen: 24
85.237.206.0/23 maxlen: 23
85.237.217.0/24 maxlen: 24
85.237.220.0/23 maxlen: 23
85.237.220.0/24 maxlen: 24
85.237.221.0/24 maxlen: 24
85.237.222.0/24 maxlen: 24
85.237.223.0/24 maxlen: 24
185.93.33.0/24 maxlen: 24
185.139.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:24:7c:91:63:19:e0:1d:d8:24:3e:39:b0:36:98:2a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jul 5 05:18:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=140dfcb9f4c1fb625b3e6246b8bb82d52f5743c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:18:05:22:fe:02:b0:aa:6c:91:34:ab:fc:
9d:30:b1:d6:01:82:7c:1a:24:83:7e:fa:06:b8:f6:
c4:33:5a:5c:7d:9a:d8:91:77:cd:44:49:7f:35:ea:
1a:c9:57:83:d5:08:77:a4:07:ca:69:6c:9b:2c:00:
e6:f3:af:09:41:82:d3:7b:03:32:b7:dc:4c:5d:73:
a7:d4:11:69:2a:e7:f1:15:a4:b8:15:76:dc:d2:b2:
2f:a2:d5:9c:fc:74:0a:99:56:2d:a8:53:fa:bd:01:
ec:10:2d:ca:37:17:ed:43:a7:35:a1:7e:fd:df:4d:
fb:ed:8f:a4:5c:3a:62:74:40:16:d1:a8:0b:39:86:
1e:b0:2c:0d:34:7c:ff:e3:44:a8:77:a3:45:8f:2f:
26:37:b7:8f:8c:77:5a:ef:04:f2:09:65:4d:b8:e8:
da:9e:ad:7e:f6:59:4e:77:01:5b:91:3c:32:b2:bc:
dd:25:f2:35:de:77:98:d4:df:51:60:48:97:7a:7d:
49:d4:ce:f3:cb:4c:99:a1:45:e5:e3:54:3a:d5:be:
87:97:40:7c:28:64:90:d7:1e:46:94:42:42:4c:22:
09:15:83:08:14:f7:6a:0f:48:48:05:cf:4d:25:fa:
42:f9:b2:55:1d:25:07:92:a2:20:48:e1:54:f2:35:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0D:FC:B9:F4:C1:FB:62:5B:3E:62:46:B8:BB:82:D5:2F:57:43:C9
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/FA38ufTB-2JbPmJGuLuC1S9XQ8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.206.0/23
85.237.217.0/24
85.237.220.0/22
185.93.33.0/24
185.139.26.0/24
193.109.197.0-193.109.198.255
Signature Algorithm: sha256WithRSAEncryption
45:ff:3d:58:a3:3f:b7:0e:14:99:24:a9:8b:ac:ab:9b:3c:e7:
80:f3:20:bb:77:7e:62:14:ff:c5:f6:f6:2b:86:6a:3a:0f:91:
ec:28:70:f2:ad:22:27:78:b1:bb:ae:8c:24:05:4c:03:4b:d1:
6b:ac:0b:57:5c:6f:5c:cc:9e:c6:35:b6:1f:ab:37:fb:67:54:
5b:08:4b:c0:0a:10:8c:2b:3f:66:93:46:76:12:05:45:11:8d:
ca:20:6a:17:2d:45:05:c2:7f:ba:97:f7:21:59:d1:61:7b:6c:
e1:cd:00:d8:38:b4:17:6b:ec:5b:5b:b0:d7:7f:f6:3e:20:9a:
cd:5e:fd:fd:f4:a3:7e:71:40:a5:dd:e4:7f:ae:70:a7:ad:1e:
5e:c0:f9:77:f8:2e:3c:75:5b:00:0f:b8:bd:47:62:11:fe:6c:
44:70:52:94:b7:59:e7:23:3b:70:54:cc:22:e2:c5:16:76:bb:
20:a4:45:a4:dc:60:6f:f8:5e:7e:af:a9:89:d6:1c:67:6b:81:
a7:8f:01:f4:db:94:ed:28:5b:30:df:a8:a6:45:91:eb:14:ad:
d4:ee:a6:94:70:f9:93:48:a1:f6:8d:43:c7:0a:2f:61:86:10:
9b:9d:ac:c6:a3:45:53:21:07:52:c2:ac:26:2d:6b:51:74:67:
86:5a:19:74
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYkkfJFjGeAd2CQ+ObA2mComMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YmY3ZjNhZDUzZjI5YTNjNDNmMGFkODIwMTdhMDUzNjhj
MDEwNGEwHhcNMjMwNzA1MDUxODEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDBkZmNiOWY0YzFmYjYyNWIzZTYyNDZiOGJiODJkNTJmNTc0M2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUMYBSL+ArCqbJE0q/ydMLHWAYJ8
GiSDfvoGuPbEM1pcfZrYkXfNREl/NeoayVeD1Qh3pAfKaWybLADm868JQYLTewMy
t9xMXXOn1BFpKufxFaS4FXbc0rIvotWc/HQKmVYtqFP6vQHsEC3KNxftQ6c1oX79
30377Y+kXDpidEAW0agLOYYesCwNNHz/40Sod6NFjy8mN7ePjHda7wTyCWVNuOja
nq1+9llOdwFbkTwysrzdJfI13neY1N9RYEiXen1J1M7zy0yZoUXl41Q61b6Hl0B8
KGSQ1x5GlEJCTCIJFYMIFPdqD0hIBc9NJfpC+bJVHSUHkqIgSOFU8jVX1QIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFBQN/Ln0wftiWz5iRri7gtUvV0PJMB8GA1UdIwQY
MBaAFFi/fzrVPymjxD8K2CAXoFNowBBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUt
OGIzZDUyN2M0OWU0LzEvRkEzOHVmVEItMkpiUG1KR3VMdUMxUzlYUThrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUtOGIzZDUyN2M0OWU0
LzEvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBVe3OAwQA
Ve3ZAwQCVe3cAwQAuV0hAwQAuYsaMAwDBADBbcUDBADBbcYwDQYJKoZIhvcNAQEL
BQADggEBAEX/PVijP7cOFJkkqYusq5s854DzILt3fmIU/8X29iuGajoPkewocPKt
Iid4sbuujCQFTANL0WusC1dcb1zMnsY1th+rN/tnVFsIS8AKEIwrP2aTRnYSBUUR
jcogahctRQXCf7qX9yFZ0WF7bOHNANg4tBdr7FtbsNd/9j4gms1e/f30o35xQKXd
5H+ucKetHl7A+Xf4Ljx1WwAPuL1HYhH+bERwUpS3WecjO3BUzCLixRZ2uyCkRaTc
YG/4Xn6vqYnWHGdrgaePAfTblO0oWzDfqKZFkesUrdTuppRw+ZNIofaNQ8cKL2GG
EJudrMajRVMhB1LCrCYta1F0Z4ZaGXQ=
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:47 2025 by rpki-client