Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Hwq8JFM4GTA97RBBpCdZOS1hf1Y.roa
File: Hwq8JFM4GTA97RBBpCdZOS1hf1Y.roa (raw, json)
Hash identifier: y2Qhk+D3Fl2VZ7CxCzJUS7sIw3V+sQm/+XYzTUQeFRY=
Subject key identifier: 1F:0A:BC:24:53:38:19:30:3D:ED:10:41:A4:27:59:39:2D:61:7F:56
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188C84CEA152156D6779720C832C3947ED0
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Hwq8JFM4GTA97RBBpCdZOS1hf1Y.roa
Signing time: Sat 17 Jun 2023 07:41:03 +0000
ROA not before: Sat 17 Jun 2023 07:41:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.237.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c8:4c:ea:15:21:56:d6:77:97:20:c8:32:c3:94:7e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 17 07:41:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f0abc24533819303ded1041a42759392d617f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:31:06:cb:7c:8e:b0:04:ef:ce:e5:ec:00:8c:
0b:65:d6:31:5b:88:76:47:69:5b:fa:d9:13:f5:6a:
ab:a9:f3:ad:db:e2:a6:be:83:54:17:2e:40:01:0f:
d2:7e:8c:c3:ec:1c:02:11:f8:ce:cc:75:8f:41:8c:
f5:1c:1f:9c:17:2f:85:ce:61:4b:a6:27:d2:80:7b:
e2:e9:94:92:68:ea:9a:6e:e0:48:83:96:88:d2:c7:
15:37:27:62:21:95:c5:fa:d8:a5:48:25:78:71:e9:
1e:87:6d:4f:0b:13:a4:41:02:b9:86:33:4d:92:32:
bb:2a:50:48:aa:2a:6e:7b:6e:79:19:a4:06:03:68:
92:60:a6:e0:ff:9b:9d:98:ec:6f:be:80:85:bb:9e:
d2:9b:94:c0:a7:b3:bc:bf:e5:18:1d:cd:69:70:18:
c1:7d:84:69:5b:b5:85:38:17:54:3b:3e:d8:17:4b:
4b:c5:9f:ee:8d:b5:cf:ce:2a:88:10:b0:dd:15:4a:
ba:06:c9:03:60:70:c8:9c:ec:de:53:51:10:48:7c:
ee:bf:04:5d:29:df:4a:e5:15:ca:31:76:83:42:16:
18:a1:52:6b:1d:d6:0d:7e:e3:dc:c7:e4:44:ed:41:
00:02:fd:29:2e:f7:49:53:db:90:49:29:f2:3a:5c:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:BC:24:53:38:19:30:3D:ED:10:41:A4:27:59:39:2D:61:7F:56
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Hwq8JFM4GTA97RBBpCdZOS1hf1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.207.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3c:66:04:81:ed:ae:5c:d3:6e:77:fb:bc:8e:3f:93:1e:fb:
eb:7f:3a:4d:50:df:e0:33:13:8b:f7:99:6e:83:ef:14:64:3e:
5c:a1:a1:f9:d9:bd:c4:b7:9b:88:75:94:71:08:9d:55:92:04:
4d:8d:d7:f6:4e:f2:96:4d:f7:bd:64:9c:27:db:70:e2:a6:bf:
d9:87:1a:9c:3c:b1:28:35:d7:b4:65:d9:52:8d:e2:c5:75:8c:
ee:02:87:c5:75:94:b7:b4:6f:b8:27:d8:09:30:fb:c5:a2:00:
c9:d7:54:ae:56:14:86:51:3e:4e:a5:c3:b3:60:89:4d:fe:a9:
45:d6:9d:94:4b:41:98:e4:c5:b8:3f:d5:bd:0b:52:5f:5c:52:
a3:7f:c4:4b:ac:23:02:85:c4:4f:2e:6a:32:52:1e:03:80:c5:
bf:5d:26:fa:15:ec:01:18:7a:75:80:75:ef:bd:e5:4e:4d:34:
0d:08:04:47:89:95:93:23:52:c5:8b:27:72:d7:e3:5b:af:35:
40:5c:df:3f:0b:63:85:8c:ba:57:f8:02:06:af:4a:58:7c:65:
ca:5a:c0:0c:a5:5d:6f:f8:05:a4:4f:6a:e7:7c:d4:6e:23:d4:
86:c3:2e:4c:5b:92:80:8a:5c:4f:e7:96:28:bf:7a:12:5b:62:
23:06:5a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:24 2025 by rpki-client