Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/LphIHgbr0kJMUK6G1947R2lRWnY.roa
File: LphIHgbr0kJMUK6G1947R2lRWnY.roa (raw, json)
Hash identifier: kwRU9w+X42gttiwKzmB/SbzkPY0XdHGMhSQD6GwBxPI=
Subject key identifier: 2E:98:48:1E:06:EB:D2:42:4C:50:AE:86:D7:DE:3B:47:69:51:5A:76
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B936F725976A0FE4C3099CEEFBA082DF5
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/LphIHgbr0kJMUK6G1947R2lRWnY.roa
Signing time: Fri 03 Nov 2023 04:27:16 +0000
ROA not before: Fri 03 Nov 2023 04:27:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207787
IP address blocks: 85.237.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:6f:72:59:76:a0:fe:4c:30:99:ce:ef:ba:08:2d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Nov 3 04:27:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e98481e06ebd2424c50ae86d7de3b4769515a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:1a:13:69:f7:98:59:c9:c5:0f:6d:68:9d:
f6:11:04:3f:b9:ba:d0:41:c6:26:84:9e:a5:5f:ab:
a3:29:43:de:42:8a:cf:3e:4d:0e:ef:4c:75:06:07:
37:24:5f:9c:bc:db:13:f8:34:f0:3e:4d:7a:3c:77:
3c:f9:da:f5:94:a0:c2:77:1e:a6:ef:30:30:8f:e2:
a0:95:6d:de:90:4d:cd:67:0d:2f:50:f5:2f:08:65:
8d:f4:5b:89:cb:ea:4e:8d:9c:62:af:11:c1:47:5b:
1b:87:8c:cc:65:dc:ee:ef:a9:ec:40:1d:6a:e1:fd:
e6:fe:f9:b1:80:ee:2c:d3:06:a1:ca:15:1a:2b:5b:
08:25:dd:db:7f:b8:9f:6f:d9:74:f2:df:7d:d5:08:
34:71:59:27:68:6d:c5:83:f9:ce:17:42:b1:a6:9a:
e5:4e:1d:8f:6b:ae:51:41:1f:eb:25:1f:6b:2a:33:
21:7c:12:3f:4a:dd:ba:38:06:99:3b:33:22:b6:db:
41:9a:8e:0a:2e:31:bc:2f:de:a9:3f:1e:4b:b0:e8:
e1:3a:37:e3:9b:fb:f6:c4:82:2a:ee:83:c0:ae:d2:
7a:42:b1:cb:1f:33:47:86:d8:b1:ef:36:da:d8:e0:
1b:28:a6:18:d0:e1:bf:ff:a1:33:9d:d6:8d:d4:3c:
01:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:98:48:1E:06:EB:D2:42:4C:50:AE:86:D7:DE:3B:47:69:51:5A:76
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/LphIHgbr0kJMUK6G1947R2lRWnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
Signature Algorithm: sha256WithRSAEncryption
23:30:aa:0e:75:3c:c2:2b:56:97:0a:d8:31:91:6b:60:ac:d3:
6d:de:26:a6:c4:b8:31:47:81:8d:97:46:67:22:6d:37:6a:9c:
cc:f8:2d:f7:c1:04:52:6a:53:a4:c5:73:0d:b6:8e:d7:cb:c2:
44:37:55:a5:db:a9:06:dd:02:7a:87:9d:cb:e8:4a:66:96:78:
e9:13:56:ef:e6:27:65:c6:91:9a:de:df:aa:a4:66:dd:69:9c:
c9:9e:8b:97:ab:b5:6c:b5:16:fa:10:0e:ec:2c:46:5e:68:90:
78:bb:b9:45:ec:5d:da:e3:1e:0d:31:36:0b:30:ec:67:49:21:
a0:29:de:bb:98:8e:03:7b:80:c6:ab:7d:f7:2c:93:f6:c6:a7:
f3:31:8a:92:72:e1:6b:c9:7e:80:0f:1b:e0:85:14:f6:ab:10:
92:96:96:0a:10:78:91:0d:15:8f:20:a3:65:9b:f6:0c:ef:69:
a3:63:29:9b:f7:df:23:cf:d3:e5:37:0f:56:04:a7:bf:2f:14:
61:3a:cc:d1:e5:59:96:60:0d:9f:69:bb:25:e7:84:39:2d:60:
fe:9a:b4:6a:ca:a5:b4:45:4e:3c:83:7d:15:0c:a0:36:1c:d8:
5d:2f:d6:4f:f9:12:50:ed:87:be:ed:ef:4f:b2:1b:b3:25:0a:
28:ab:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 07:16:17 2023 by rpki-client on console-fra.rpki-client.org