Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/FJAGLcwXOuThUrVH_pGR1rkaHwY.roa
File: FJAGLcwXOuThUrVH_pGR1rkaHwY.roa (raw, json)
Hash identifier: ga9UAK8jKkz9g85sNJLH/oaCefhWQ41ryCKT0r47g24=
Subject key identifier: 14:90:06:2D:CC:17:3A:E4:E1:52:B5:47:FE:91:91:D6:B9:1A:1F:06
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 01894444902965CE699BB39AB6EBA729D8B8
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/FJAGLcwXOuThUrVH_pGR1rkaHwY.roa
Signing time: Tue 11 Jul 2023 09:24:51 +0000
ROA not before: Tue 11 Jul 2023 09:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206505
IP address blocks: 85.237.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:44:90:29:65:ce:69:9b:b3:9a:b6:eb:a7:29:d8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jul 11 09:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1490062dcc173ae4e152b547fe9191d6b91a1f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:e1:06:3b:f0:c1:be:9e:8a:59:c9:9d:de:
2c:53:f2:cd:e4:2c:41:44:50:05:30:39:f0:b3:12:
37:c7:72:00:b6:6c:23:d9:f7:2d:08:bb:41:8f:41:
33:9c:3f:c2:2b:04:99:5c:25:bf:e0:61:66:fa:14:
22:38:ce:5e:4e:c6:01:e9:4d:da:0d:76:d0:1b:26:
c8:d4:37:ee:0e:27:0e:e1:10:3e:70:fb:0a:c3:b3:
85:ec:91:d0:8d:73:33:3d:f2:8d:19:09:f4:e0:83:
d0:9d:4f:41:11:ee:0e:03:b9:5a:d9:a1:05:76:e9:
a3:da:29:3a:47:04:f8:80:7e:f5:e4:44:ed:fe:09:
b3:1a:af:ac:55:90:98:d9:33:90:34:49:b4:0c:fa:
c3:56:56:39:eb:03:92:fb:af:fd:61:25:99:f7:a3:
6a:35:18:d5:f9:00:af:ed:fb:8e:6f:ba:6f:b5:59:
0f:75:b4:1b:38:0e:06:4f:c3:a2:b9:69:85:7d:15:
0d:d7:7c:20:7c:9c:38:fb:2d:fb:9b:d3:d6:a9:76:
08:32:2e:c8:36:d9:fc:2c:9f:f2:40:89:e9:7d:6e:
f0:34:0a:39:27:15:b8:fb:cc:07:cc:3b:65:9c:34:
8b:45:b4:90:4a:5d:3f:e6:48:d7:17:18:d6:42:d1:
09:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:90:06:2D:CC:17:3A:E4:E1:52:B5:47:FE:91:91:D6:B9:1A:1F:06
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/FJAGLcwXOuThUrVH_pGR1rkaHwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.217.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:8c:e6:8c:be:f1:8c:15:22:dc:ca:df:67:ab:6d:cc:8b:ef:
82:21:47:d7:ea:4c:9f:b2:7f:54:f2:e1:48:08:a6:1c:b7:1d:
c3:01:5d:38:1d:d5:e2:22:51:1c:b7:99:18:82:99:10:8c:e4:
80:75:ba:c0:20:fd:db:36:1c:e9:e9:7d:6b:68:2b:46:44:6d:
3a:1f:44:f1:cf:d9:b8:b3:65:d2:b4:5e:1b:a8:35:22:c5:87:
dc:2d:49:f5:a8:0f:15:12:b6:52:92:84:5c:02:0a:a4:cf:a3:
27:5a:35:20:2d:10:04:67:f8:52:8e:d5:4e:b7:c6:db:2f:10:
43:4f:b7:96:39:a3:41:80:af:70:a9:e4:9e:93:6d:cf:70:ed:
97:66:fb:46:92:b4:ad:17:70:d2:01:92:36:3e:d8:1f:a8:5f:
01:04:2d:5c:5f:4e:b1:31:a9:5b:a7:97:29:b6:9b:97:5d:fb:
28:a9:d7:60:60:12:7a:74:d2:b9:18:9c:cd:5b:3b:f7:6b:e7:
62:e9:9d:59:41:10:d6:8e:fc:be:07:e8:db:b8:34:c2:26:ef:
40:35:eb:fc:51:dd:df:b2:dc:d5:5e:de:c4:d0:61:84:86:b2:
2d:e1:d0:55:42:64:f5:ff:83:4e:70:2f:fd:c2:cb:46:ed:57:
b0:0d:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:12 2025 by rpki-client