Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/NJZAiMQpEA8GjoDhE9YOZ-FM6ik.roa
File: NJZAiMQpEA8GjoDhE9YOZ-FM6ik.roa (raw, json)
Hash identifier: 5kSh2nlLkz6ef1KI96y6+IxIeriunPK99V5qRmBukKs=
Subject key identifier: 34:96:40:88:C4:29:10:0F:06:8E:80:E1:13:D6:0E:67:E1:4C:EA:29
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCC0634AD336F59916AA5F97B111CAE
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/NJZAiMQpEA8GjoDhE9YOZ-FM6ik.roa
Signing time: Thu 15 Jun 2023 06:44:04 +0000
ROA not before: Thu 15 Jun 2023 06:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209181
IP address blocks: 85.237.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cc:06:34:ad:33:6f:59:91:6a:a5:f9:7b:11:1c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34964088c429100f068e80e113d60e67e14cea29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:dd:fe:53:11:fa:c4:8d:97:eb:47:b8:4e:3b:
8f:c1:88:b4:49:82:47:74:86:9e:02:70:43:85:ca:
96:37:79:81:32:7c:79:68:d6:58:fb:cc:9b:c4:9a:
7e:7f:7a:9a:e3:ee:b7:6c:86:39:d2:11:4f:7d:d4:
55:cb:8f:be:68:3e:0e:72:c1:43:06:0c:83:f1:12:
1c:93:b2:41:ae:c7:b9:82:8e:a9:e5:03:d2:39:aa:
e6:fa:98:4e:26:b5:e3:8f:f3:ec:18:20:61:4b:5b:
28:2a:4c:e0:11:7d:a4:00:9f:e1:78:1c:8c:b2:75:
19:ca:01:f3:84:07:b2:b0:12:dd:73:56:c9:7c:77:
3c:1f:91:5e:db:c8:38:27:e8:ab:06:9f:86:85:e7:
91:97:ef:0e:5e:18:44:9c:1d:72:d4:55:71:b8:4e:
14:78:c6:e2:1f:11:b6:df:a1:aa:26:10:8b:3f:07:
09:c4:0c:87:fb:d8:7f:d9:02:a2:4e:5a:95:5f:12:
05:81:30:83:3f:cd:cc:dc:58:e9:82:7d:2f:11:f0:
4a:b8:dc:c3:d0:3a:52:db:bf:b3:c9:19:13:93:e9:
10:56:99:16:5d:92:a3:f0:7e:d8:54:d1:69:5f:a9:
75:c9:b6:4f:08:dc:89:ef:7a:42:8e:8e:b4:e4:5f:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:96:40:88:C4:29:10:0F:06:8E:80:E1:13:D6:0E:67:E1:4C:EA:29
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/NJZAiMQpEA8GjoDhE9YOZ-FM6ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.210.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:98:ef:7d:5f:f5:bf:0a:41:0c:b7:cb:fd:b2:a3:4a:a3:4f:
46:73:8a:51:b8:f8:e8:db:67:5a:10:fd:e6:64:94:37:ce:a2:
a9:fd:4e:10:38:3b:fe:88:2c:9c:db:2d:3f:6d:1c:97:5c:d7:
d4:f6:ac:1b:77:58:1a:8f:9e:a0:7f:37:47:ba:7d:d0:38:2c:
02:b2:00:a8:e0:dd:c8:30:db:c7:4f:29:81:52:c9:c9:23:64:
c7:20:13:a2:a7:0e:7b:03:3d:90:75:15:3a:35:d4:b9:fd:e2:
8a:4e:ba:18:b8:7a:4f:af:93:15:70:8b:4b:79:9c:90:00:ef:
38:ac:82:22:07:e4:8e:31:3d:42:33:02:6a:61:77:05:5a:29:
ac:59:5f:44:61:44:10:ed:39:d3:88:da:9b:a4:3f:22:aa:79:
1f:67:b7:cc:05:68:61:46:0c:71:b9:09:2b:f4:a4:70:11:25:
c6:44:4e:26:21:6a:72:71:e8:34:81:f3:9f:ca:13:e4:8a:36:
3e:20:3f:ae:cf:07:ed:19:d2:ac:f2:ef:0a:63:47:f5:38:d0:
c6:91:37:fd:67:c7:f3:2a:13:4e:c6:8d:33:54:35:bf:30:cc:
4c:6b:14:41:a0:f9:85:70:39:63:34:3c:66:f1:e7:22:a8:6b:
84:10:6b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:06 2025 by rpki-client