Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/MvLZWTAUQTpGXGbmfF0nZw-8DPw.roa
File: MvLZWTAUQTpGXGbmfF0nZw-8DPw.roa (raw, json)
Hash identifier: t6selWFUcL8KmMTN56PKEDl1gjiKthfrAtfuS9ULX+o=
Subject key identifier: 32:F2:D9:59:30:14:41:3A:46:5C:66:E6:7C:5D:27:67:0F:BC:0C:FC
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B1EAF55A04D9758D32F37E301655C8DF9
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/MvLZWTAUQTpGXGbmfF0nZw-8DPw.roa
Signing time: Wed 11 Oct 2023 12:21:29 +0000
ROA not before: Wed 11 Oct 2023 12:21:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.109.194.0/24 maxlen: 24
85.237.196.0/24 maxlen: 24
193.109.198.0/24 maxlen: 24
85.237.204.0/24 maxlen: 24
85.237.208.0/24 maxlen: 24
85.237.215.0/24 maxlen: 24
85.237.214.0/24 maxlen: 24
85.237.216.0/24 maxlen: 24
185.139.25.0/24 maxlen: 24
185.139.26.0/24 maxlen: 24
185.139.27.0/24 maxlen: 24
185.235.32.0/24 maxlen: 24
85.158.58.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.158.61.0/24 maxlen: 24
85.158.63.0/24 maxlen: 24
85.158.62.0/24 maxlen: 24
85.158.60.0/24 maxlen: 24
185.93.34.0/24 maxlen: 24
185.93.35.0/24 maxlen: 24
185.100.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:af:55:a0:4d:97:58:d3:2f:37:e3:01:65:5c:8d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Oct 11 12:21:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32f2d9593014413a465c66e67c5d27670fbc0cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:88:9b:ff:01:fd:ba:49:ea:b9:62:7e:5d:
ec:c9:62:c7:cb:0c:44:3b:6e:e2:81:cf:3c:86:41:
b0:20:57:f7:ad:3e:11:2e:14:bd:b9:32:9b:12:7c:
28:56:67:53:f4:a9:95:f7:fa:68:7f:4f:cc:52:72:
38:63:11:a8:f7:a9:28:0c:da:3a:05:0e:7f:96:95:
a4:0d:21:40:ea:cd:05:21:3a:0e:fc:ec:2d:3c:f9:
cc:f5:6c:c5:cc:e9:98:ef:86:56:7e:10:05:d4:dd:
4d:fc:5d:78:cf:55:79:16:dd:41:46:61:ce:e9:14:
20:70:d4:e4:f3:bb:07:be:c6:f2:f9:7a:9f:da:af:
49:a3:45:eb:f9:1a:f2:32:4f:7c:0a:06:2c:c6:66:
01:1d:a0:92:29:f8:9d:32:72:b6:c4:76:15:08:7c:
10:b1:5e:97:af:65:bd:9a:44:08:31:c9:85:53:d7:
73:8e:e1:67:ac:78:62:47:1c:7e:df:ef:26:0a:14:
6d:b7:35:d3:f9:1a:c9:6f:02:a7:fc:af:d2:f9:be:
cb:16:3d:1d:41:91:92:f6:e0:e3:e7:20:c5:81:5c:
9b:9d:99:ee:9e:5e:6f:d2:18:18:ee:8c:3d:cc:94:
9e:76:2a:48:6c:7a:68:f5:ce:dc:0c:f5:d7:e9:df:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F2:D9:59:30:14:41:3A:46:5C:66:E6:7C:5D:27:67:0F:BC:0C:FC
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/MvLZWTAUQTpGXGbmfF0nZw-8DPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0-85.158.58.255
85.158.60.0/22
85.237.196.0/24
85.237.204.0/24
85.237.208.0/24
85.237.214.0-85.237.216.255
185.93.34.0/23
185.100.212.0/22
185.139.25.0-185.139.27.255
185.235.32.0/24
193.109.194.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:08:5e:87:67:36:74:e4:a5:e4:66:50:80:e4:6e:54:b8:1a:
61:1c:39:23:82:78:18:bd:93:b9:88:48:8a:10:2b:cb:e1:99:
9f:6b:9a:ee:70:f2:31:09:48:df:15:73:6c:53:c9:0b:24:37:
97:2c:38:7a:c3:d1:31:96:46:89:e0:6f:da:b3:d9:9f:8c:ab:
af:93:e3:2b:e8:ec:35:2e:4f:05:68:cb:de:ef:6c:60:ab:b2:
9a:38:7a:59:f2:28:a2:67:6b:3c:cc:2a:98:80:db:4c:4b:62:
d6:64:b4:c7:fb:d3:81:9c:59:9f:2c:a2:e2:62:3f:ac:2a:24:
2e:33:ce:df:a5:d8:96:9d:e4:1b:b3:fc:a2:b7:ce:b3:47:c4:
91:db:e3:70:53:b5:da:f0:bc:c0:4d:fa:3d:f6:b6:fa:40:d6:
93:b0:ec:46:d2:f2:6c:77:1a:81:1f:8f:55:f7:d5:1f:93:cc:
9a:5b:5f:f5:a2:6e:45:14:e6:d5:fa:91:ee:3b:bd:e9:b3:4f:
78:62:12:0a:d3:30:bb:5c:1f:ad:ce:da:d6:5c:1a:d6:a1:f7:
2b:b3:a8:06:61:c6:c6:2c:fa:02:29:55:5b:00:61:86:c8:42:
19:6a:84:73:2b:41:71:d1:3b:d9:d6:65:f9:a2:bf:56:df:15:
94:32:4e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:14 2024 by rpki-client on console-ams.rpki-client.org