Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/HZRs8WcxcQ_JSMsNRpBh64rAkdk.roa
File: HZRs8WcxcQ_JSMsNRpBh64rAkdk.roa (raw, json)
Hash identifier: AWQeY2GQFo36sY0/YpPzYoB4npwpUU7r7oAfx4COg04=
Subject key identifier: 1D:94:6C:F1:67:31:71:0F:C9:48:CB:0D:46:90:61:EB:8A:C0:91:D9
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018A8BE141EEC6F4C5AE48C3D6F53E5AAC81
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/HZRs8WcxcQ_JSMsNRpBh64rAkdk.roa
Signing time: Wed 13 Sep 2023 00:11:50 +0000
ROA not before: Wed 13 Sep 2023 00:11:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.197.0/24 maxlen: 24
193.109.198.0/24 maxlen: 24
85.237.206.0/24 maxlen: 24
85.237.202.0/24 maxlen: 24
85.237.208.0/24 maxlen: 24
85.237.209.0/24 maxlen: 24
85.237.220.0/23 maxlen: 23
85.237.223.0/24 maxlen: 24
185.139.26.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.158.58.0/24 maxlen: 24
85.158.59.0/24 maxlen: 24
185.93.33.0/24 maxlen: 24
194.169.217.0/24 maxlen: 24
185.100.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8b:e1:41:ee:c6:f4:c5:ae:48:c3:d6:f5:3e:5a:ac:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Sep 13 00:11:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d946cf16731710fc948cb0d469061eb8ac091d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:44:32:d4:d0:28:d3:b8:11:0e:72:98:c3:
0e:b5:da:09:17:c5:6b:78:94:5a:f0:5b:cb:c6:c0:
fd:1f:8d:f8:c5:8f:34:c3:65:a4:8a:c5:0a:33:31:
12:39:92:04:ea:0d:a4:95:98:f3:00:52:46:27:0b:
ad:6f:3d:c2:85:e5:24:a9:f2:b1:46:1c:6a:97:62:
48:29:7d:b0:fe:6b:f2:33:57:be:8a:ce:a8:6c:2e:
92:49:68:ea:52:ea:25:4b:09:1a:b2:a9:67:17:2d:
69:14:5e:21:26:9c:68:fe:db:6d:64:4f:07:ca:06:
82:8c:d4:dc:a9:b0:17:1c:1f:37:5b:d9:dc:cb:b8:
f5:d6:7e:af:6f:61:b0:d4:b8:13:b1:86:84:44:15:
e1:c3:f3:ee:c5:85:0b:0a:c4:bd:ff:b9:ab:6f:0c:
12:36:6a:f1:63:40:2a:4e:06:89:37:8e:ec:9e:2b:
c1:97:f6:b3:0a:cf:79:6c:28:04:2d:90:3f:ea:3c:
d9:f8:e8:4b:3b:a9:7a:56:63:0c:bc:9c:c0:62:b4:
1c:85:03:3c:bf:b2:ae:78:8f:f6:e7:5a:80:f6:12:
b5:b8:d9:23:f7:69:5d:b6:92:ca:ae:08:a9:be:ac:
07:e0:6f:97:31:25:84:c2:02:38:c2:14:5b:dc:7a:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:94:6C:F1:67:31:71:0F:C9:48:CB:0D:46:90:61:EB:8A:C0:91:D9
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/HZRs8WcxcQ_JSMsNRpBh64rAkdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0-85.158.59.255
85.237.202.0/24
85.237.206.0/24
85.237.208.0/23
85.237.220.0/23
85.237.223.0/24
185.93.33.0/24
185.100.213.0/24
185.139.26.0/24
193.109.197.0-193.109.198.255
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
28:c7:d5:86:b3:7e:c4:ee:70:cc:c7:c2:a9:25:c5:55:2c:3b:
b2:7b:c5:39:0d:77:3d:53:a0:98:37:e6:6d:0e:87:9f:2b:7a:
6c:c1:5b:f4:93:43:c1:86:fb:dd:f6:72:74:bd:1c:79:90:60:
27:54:73:fb:8d:49:b4:45:f5:55:39:03:db:ca:29:b5:ee:41:
ad:9d:b4:4a:b1:e8:9e:0d:b6:32:74:8f:66:1d:27:a1:b2:df:
b2:19:d2:9a:c8:3b:e0:e6:5b:a0:0f:f8:c0:75:60:05:ba:6f:
77:8b:bf:73:ee:8f:fc:1a:53:e1:e1:06:b4:c8:2d:40:c2:af:
b1:9d:7a:6b:62:e2:15:6c:af:53:51:16:12:13:fc:e9:3e:b0:
c4:01:e7:3d:6b:72:11:2d:53:71:dd:02:d8:d8:ae:a7:b5:2d:
31:36:bd:0b:14:d9:c4:e6:9f:e7:84:4a:f5:c8:98:67:78:5c:
fd:17:f5:65:f3:7d:dd:0d:92:36:f6:63:d3:60:64:59:ce:3a:
c3:47:bf:b5:93:31:15:fd:4e:12:1b:cd:2b:3f:12:1c:2e:8b:
fe:fd:ea:aa:f0:32:a4:c7:da:51:1e:99:de:b3:ff:74:b4:d9:
46:9c:c6:60:c4:18:6e:c4:3f:bc:1e:84:10:cc:7e:88:8c:d2:
34:59:5f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:00 2024 by rpki-client on console-fra.rpki-client.org