Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Jv5A1pQOJqiE858Ejp0zsJL9eYk.roa
File: Jv5A1pQOJqiE858Ejp0zsJL9eYk.roa (raw, json)
Hash identifier: PmK3kYvRb4KQe6vfOaMP2tj/0Lg8UZPyb53r2DFyd7g=
Subject key identifier: 26:FE:40:D6:94:0E:26:A8:84:F3:9F:04:8E:9D:33:B0:92:FD:79:89
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCC010C1BB0D6D782415468C6CB2E72
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Jv5A1pQOJqiE858Ejp0zsJL9eYk.roa
Signing time: Thu 15 Jun 2023 06:44:03 +0000
ROA not before: Thu 15 Jun 2023 06:44:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
85.237.206.0/23 maxlen: 23
85.237.202.0/24 maxlen: 24
85.237.217.0/24 maxlen: 24
85.237.220.0/24 maxlen: 24
185.93.33.0/24 maxlen: 24
185.139.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cc:01:0c:1b:b0:d6:d7:82:41:54:68:c6:cb:2e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:44:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26fe40d6940e26a884f39f048e9d33b092fd7989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7a:cc:95:f1:f4:c6:8e:ae:5d:6a:01:a1:68:
75:af:a1:65:cc:76:da:2b:37:2d:d8:f3:d4:51:79:
3c:63:ed:3b:3a:71:8c:e4:04:62:b0:b0:96:b7:4b:
65:d6:c7:08:0f:66:b9:a9:39:b4:76:45:b5:ca:cf:
c5:ee:2c:dd:18:b1:9e:b6:65:f8:14:a0:28:20:ad:
65:8e:c9:77:6e:57:d7:58:62:92:f8:16:80:95:f0:
ab:6c:7f:e2:6e:91:71:3f:3e:bf:4b:5d:b6:fc:0d:
a7:c6:60:09:a6:62:73:04:ed:36:93:0a:7b:0a:ec:
3f:29:02:05:26:2e:73:3b:85:f5:28:8d:20:51:aa:
58:da:21:f3:32:3d:9b:05:55:af:a8:c3:7a:22:4a:
65:16:96:f0:a3:c9:e8:8e:72:9f:6e:59:45:71:99:
52:1b:52:43:ad:a5:36:ef:cf:6b:35:98:31:d5:cb:
e5:65:1d:93:dd:8e:0f:6c:df:8a:4a:7f:8e:6c:fe:
29:15:9e:ad:8d:5b:af:63:b6:de:cb:c1:19:ac:2d:
7b:fd:76:cd:a9:40:fe:52:89:77:5b:8f:4d:16:48:
e9:f2:0c:9d:38:fd:b8:ea:18:64:85:06:14:4d:e1:
a6:2a:1e:82:f9:e2:d3:fd:a0:d9:01:4c:01:db:0f:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FE:40:D6:94:0E:26:A8:84:F3:9F:04:8E:9D:33:B0:92:FD:79:89
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Jv5A1pQOJqiE858Ejp0zsJL9eYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.202.0/24
85.237.206.0/23
85.237.217.0/24
85.237.220.0/24
185.93.33.0/24
185.139.26.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5c:3c:a0:9e:4b:cf:93:67:be:d7:1a:68:b5:0a:4c:aa:51:
77:0b:3a:02:5e:23:0b:69:99:e2:90:17:ea:68:25:9f:b5:4f:
62:b3:77:af:ac:1b:ef:81:ac:4c:d1:49:bf:cb:64:2a:82:d3:
3e:01:8d:e9:03:8e:a3:af:ff:31:20:aa:15:c3:24:f6:ca:9d:
cd:62:a0:a9:03:07:5f:ea:43:ad:71:44:fd:2d:e2:ae:c0:5b:
26:01:ad:be:97:42:fb:f0:d9:75:9b:2b:b3:8c:34:38:d0:86:
3c:3a:a2:69:dd:d6:78:69:ea:41:2d:c2:0c:76:78:4f:96:83:
63:8a:97:9d:87:c4:81:ba:00:7a:a3:b5:d7:2f:cb:fd:6d:e7:
a6:33:0b:42:30:f7:41:f7:fe:e0:81:ef:0d:25:85:27:24:c4:
2a:68:a3:6c:f0:24:33:dd:e1:1a:c4:9a:33:63:d5:1c:2d:94:
e0:ca:fa:dd:a2:4b:06:1b:68:2e:97:7c:ea:a3:90:68:a9:b2:
52:5d:96:90:79:2f:a1:f1:ce:f5:c5:9c:80:5f:f3:9e:55:f5:
8b:02:23:17:80:91:4e:11:5f:fe:95:01:86:b8:67:db:14:9a:
89:8e:69:d8:74:74:c1:33:c5:14:fc:e3:66:33:28:18:17:0c:
2b:82:e5:4d
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYi9zAEMG7DW14JBVGjGyy5yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YmY3ZjNhZDUzZjI5YTNjNDNmMGFkODIwMTdhMDUzNjhj
MDEwNGEwHhcNMjMwNjE1MDY0NDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmZlNDBkNjk0MGUyNmE4ODRmMzlmMDQ4ZTlkMzNiMDkyZmQ3OTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHrMlfH0xo6uXWoBoWh1r6FlzHba
Kzct2PPUUXk8Y+07OnGM5ARisLCWt0tl1scID2a5qTm0dkW1ys/F7izdGLGetmX4
FKAoIK1ljsl3blfXWGKS+BaAlfCrbH/ibpFxPz6/S122/A2nxmAJpmJzBO02kwp7
Cuw/KQIFJi5zO4X1KI0gUapY2iHzMj2bBVWvqMN6IkplFpbwo8nojnKfbllFcZlS
G1JDraU2789rNZgx1cvlZR2T3Y4PbN+KSn+ObP4pFZ6tjVuvY7bey8EZrC17/XbN
qUD+Uol3W49NFkjp8gydOP246hhkhQYUTeGmKh6C+eLT/aDZAUwB2w/xNwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFCb+QNaUDiaohPOfBI6dM7CS/XmJMB8GA1UdIwQY
MBaAFFi/fzrVPymjxD8K2CAXoFNowBBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUt
OGIzZDUyN2M0OWU0LzEvSnY1QTFwUU9KcWlFODU4RWpwMHpzSkw5ZVlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUtOGIzZDUyN2M0OWU0
LzEvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAVe3KAwQB
Ve3OAwQAVe3ZAwQAVe3cAwQAuV0hAwQAuYsaAwQAwW3GMA0GCSqGSIb3DQEBCwUA
A4IBAQBbXDygnkvPk2e+1xpotQpMqlF3CzoCXiMLaZnikBfqaCWftU9is3evrBvv
gaxM0Um/y2QqgtM+AY3pA46jr/8xIKoVwyT2yp3NYqCpAwdf6kOtcUT9LeKuwFsm
Aa2+l0L78Nl1myuzjDQ40IY8OqJp3dZ4aepBLcIMdnhPloNjipedh8SBugB6o7XX
L8v9beemMwtCMPdB9/7gge8NJYUnJMQqaKNs8CQz3eEaxJozY9UcLZTgyvrdoksG
G2gul3zqo5BoqbJSXZaQeS+h8c71xZyAX/OeVfWLAiMXgJFOEV/+lQGGuGfbFJqJ
jmnYdHTBM8UU/ONmMygYFwwrguVN
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:14 2024 by rpki-client on console-ams.rpki-client.org