Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Me7q07nS1C_yq-m-D3nYAqBcgpk.roa
File: Me7q07nS1C_yq-m-D3nYAqBcgpk.roa (raw, json)
Hash identifier: wUtg5qAWRGvlUl39B0dl0mXVqWM8ur9GnXZ+6h726+o=
Subject key identifier: 31:EE:EA:D3:B9:D2:D4:2F:F2:AB:E9:BE:0F:79:D8:02:A0:5C:82:99
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCC0756C01416F7748BBB5A2391499A
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Me7q07nS1C_yq-m-D3nYAqBcgpk.roa
Signing time: Thu 15 Jun 2023 06:44:04 +0000
ROA not before: Thu 15 Jun 2023 06:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 193.109.194.0/24 maxlen: 24
85.237.200.0/24 maxlen: 24
85.158.56.0/24 maxlen: 24
85.237.213.0/24 maxlen: 24
185.89.77.0/24 maxlen: 24
185.93.33.0/24 maxlen: 24
185.100.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cc:07:56:c0:14:16:f7:74:8b:bb:5a:23:91:49:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31eeead3b9d2d42ff2abe9be0f79d802a05c8299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:77:b6:bc:7e:3d:4a:df:61:95:8b:b6:cf:
de:fa:c2:bd:8a:2c:90:fc:78:06:38:1d:01:cc:4a:
3c:9b:b8:17:7b:61:b0:f8:a6:a0:ea:e0:34:e7:a9:
44:5f:86:6d:23:bb:89:fc:94:b2:e8:c6:23:ea:fa:
48:ca:ae:8d:6c:9e:e3:88:d5:65:8c:ab:f0:e4:2d:
a6:1b:4c:fd:83:59:f5:8b:f5:ca:d8:22:53:96:66:
19:ab:7d:01:d1:3b:17:0c:77:5b:8c:20:4c:43:98:
2a:77:1d:cc:4b:22:d7:12:7a:48:3b:0c:19:66:98:
22:ea:25:74:a2:a6:35:09:c3:ba:ad:73:58:f5:1f:
de:44:62:f8:24:ed:a0:39:37:94:2d:4b:ab:b9:de:
95:8d:53:3a:cb:c7:70:e0:87:80:2b:80:20:c5:1c:
97:20:aa:7a:96:65:d1:7e:8f:2b:91:74:54:10:e2:
cf:ae:68:71:7a:56:fe:1e:4f:09:72:f5:1e:df:da:
e7:35:55:69:a6:1b:dc:b0:4c:d2:5e:16:53:65:77:
ff:ef:57:c7:3d:d8:39:c5:bc:e1:87:5f:e8:1e:60:
c3:c3:74:15:24:5d:12:5d:fc:6a:23:7a:dc:c3:b7:
9b:d0:a4:fb:ec:da:05:6c:96:f8:d4:31:fd:dd:3a:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:EE:EA:D3:B9:D2:D4:2F:F2:AB:E9:BE:0F:79:D8:02:A0:5C:82:99
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Me7q07nS1C_yq-m-D3nYAqBcgpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.56.0/24
85.237.200.0/24
85.237.213.0/24
185.89.77.0/24
185.93.33.0/24
185.100.213.0/24
193.109.194.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f4:d9:02:59:00:14:60:2f:49:1b:1f:fc:68:27:15:b1:31:
fd:df:cc:74:78:d0:5b:3d:25:46:4a:8b:13:5a:45:ce:ae:97:
c2:dc:61:5f:0e:e1:3e:49:c9:b8:b1:8a:00:0e:9d:d3:03:f1:
97:7a:f6:12:07:03:61:61:81:4c:13:8e:80:4e:ad:90:bf:c8:
a4:70:ae:af:2a:c7:5e:f2:42:68:d9:60:a3:cd:ae:1c:88:b7:
2a:80:32:e0:ce:3e:ed:59:14:4c:01:3a:0c:ff:3c:5c:2c:cf:
51:c1:43:d2:7a:1c:cb:4b:1a:49:96:ed:29:f5:c2:98:5d:fd:
09:5c:3a:d4:eb:1b:fe:9d:8e:b8:42:a1:2f:70:ca:e0:e9:17:
8a:66:39:d0:2d:58:d4:54:85:5d:72:fd:64:21:fa:84:b1:6f:
c8:4f:09:a0:e0:ab:67:73:d8:5b:84:c7:14:2a:74:59:85:a4:
07:ad:8a:87:8c:5c:aa:de:1c:5a:89:48:73:f5:77:16:f0:4c:
89:98:4d:64:c0:0d:b6:2c:8b:66:9f:f9:03:e9:c1:fe:41:bc:
c9:6b:8a:b0:3b:33:73:06:99:03:d3:0f:bc:88:b6:28:e8:c6:
9f:6c:d4:48:ab:20:23:42:22:e1:e1:31:e2:fd:b1:7a:3c:dd:
f6:55:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:46 2025 by rpki-client