Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/I8_4v8ltLvuBEwTZRy0apX-qqcA.roa
File: I8_4v8ltLvuBEwTZRy0apX-qqcA.roa (raw, json)
Hash identifier: ubRGAEumVMtS1rYJw9KKI79UghtETX5QZuGOJNWkTrA=
Subject key identifier: 23:CF:F8:BF:C9:6D:2E:FB:81:13:04:D9:47:2D:1A:A5:7F:AA:A9:C0
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 01856FCB9F2C7A151CECE96556F358375024
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/I8_4v8ltLvuBEwTZRy0apX-qqcA.roa
Signing time: Mon 02 Jan 2023 00:04:53 +0000
ROA not before: Mon 02 Jan 2023 00:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19437
IP address blocks: 185.139.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:9f:2c:7a:15:1c:ec:e9:65:56:f3:58:37:50:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jan 2 00:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23cff8bfc96d2efb811304d9472d1aa57faaa9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:0b:9c:3d:53:6c:cf:0f:b4:0b:40:e6:65:
20:06:30:fd:f6:ad:da:14:59:77:57:64:10:03:3c:
91:93:73:04:ec:3f:d7:b7:d7:ae:7e:bc:55:57:4d:
97:6d:19:de:0a:d8:b2:6c:5c:5a:2f:88:58:c7:55:
68:27:cd:96:fe:f1:04:6b:a6:8e:c3:cb:3b:aa:ac:
d3:1f:97:54:30:e5:39:aa:a6:f5:29:53:0a:94:1d:
cb:eb:2d:f1:11:cf:03:85:4f:4c:1a:03:6b:50:0c:
af:ac:1f:79:ba:23:77:20:c3:f5:b1:ff:9a:08:c0:
6a:d5:46:68:89:fd:dd:1b:cf:18:56:67:53:ef:22:
1f:20:60:4e:bb:88:f8:5b:2a:b3:83:9a:b5:a0:01:
88:20:c5:51:de:8f:cf:2a:01:65:c0:33:10:83:60:
2c:18:b4:ca:40:02:68:cf:d3:be:93:62:e0:83:1d:
7d:96:3e:4e:2d:bd:80:4a:49:b4:97:73:cf:1c:dc:
ae:25:fe:dc:c4:c7:ed:d4:05:12:bd:60:3f:e8:21:
35:64:9a:ce:34:d9:4f:ed:79:15:05:0a:9c:ca:16:
89:3c:f0:82:2e:40:e7:c4:eb:55:b9:63:86:7a:d7:
aa:57:fd:e3:0c:06:21:ba:34:d0:75:71:0b:7e:31:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CF:F8:BF:C9:6D:2E:FB:81:13:04:D9:47:2D:1A:A5:7F:AA:A9:C0
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/I8_4v8ltLvuBEwTZRy0apX-qqcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.26.0/24
Signature Algorithm: sha256WithRSAEncryption
63:6c:3b:7d:05:b0:a4:c5:e6:cd:e7:ae:1a:2f:26:23:71:f9:
34:c3:e9:12:f3:93:c1:29:8f:60:e0:6a:f9:67:a4:fd:5a:91:
38:df:c9:b2:6e:ea:0e:01:23:85:b0:a6:b9:42:5d:92:b7:92:
3a:13:5b:6c:d6:fd:64:28:2c:1e:ca:1d:a0:8d:fc:68:01:db:
d9:ac:2e:65:6b:26:13:37:ae:6b:de:aa:a0:c3:1e:a3:7c:ec:
bc:49:b1:4d:03:7e:56:e5:75:fb:06:06:a9:b7:9c:c9:07:f3:
9f:56:0c:1d:b2:5c:2d:ef:aa:b3:98:30:ad:53:9b:40:3f:82:
e6:ae:86:2e:87:2e:7e:75:17:9e:fd:d9:ac:ad:69:a7:53:4a:
9d:a4:e5:aa:11:26:dd:6e:ac:21:c1:00:56:7a:6a:95:12:6f:
2b:d5:bc:d9:f5:2a:bb:dc:05:48:25:95:1e:de:9d:2b:2c:18:
2c:1f:bd:7a:ea:1a:bc:3e:51:7d:a9:d8:c1:0f:c1:8b:60:85:
b9:6e:dc:35:62:b0:1a:93:97:00:ea:a4:f4:33:4d:cd:f9:1a:
dc:ea:6b:9d:c1:7b:9f:83:38:a7:bc:cd:64:19:09:db:25:b7:
0d:98:1b:2b:53:da:cf:57:e7:58:fe:d6:26:31:af:c9:d9:24:
d9:18:5b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:19 2025 by rpki-client