Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/QjSzGqz-cMubF1st7a-mwWwbFr4.roa
File: QjSzGqz-cMubF1st7a-mwWwbFr4.roa (raw, json)
Hash identifier: mPSqXLo4aVy9QzsADdoe/GXbqivTm6VpAgrBqnYJlHg=
Subject key identifier: 42:34:B3:1A:AC:FE:70:CB:9B:17:5B:2D:ED:AF:A6:C1:6C:1B:16:BE
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCC04545750E9A1CEDE542ADEA3EA03
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/QjSzGqz-cMubF1st7a-mwWwbFr4.roa
Signing time: Thu 15 Jun 2023 06:44:04 +0000
ROA not before: Thu 15 Jun 2023 06:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 85.237.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cc:04:54:57:50:e9:a1:ce:de:54:2a:de:a3:ea:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4234b31aacfe70cb9b175b2dedafa6c16c1b16be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:da:08:7b:42:b3:df:5b:0d:f3:ed:d8:ae:
33:e7:27:c8:0c:a9:e7:75:b0:1a:73:bc:dc:78:34:
2d:75:f4:21:87:49:64:87:a9:ac:32:a6:98:6d:42:
06:72:76:45:f1:78:69:16:d8:d8:d3:9d:82:7c:c6:
f6:cb:99:5d:0b:57:0c:3b:e0:c2:fc:4a:2f:d6:b1:
09:44:28:d9:e7:d6:fd:1a:bb:9d:6f:81:98:fa:03:
c9:2b:f9:41:43:71:8f:da:17:3e:e0:3a:de:2b:67:
01:c3:0a:56:f6:40:6a:55:59:15:85:da:5b:39:69:
ea:d3:fa:a2:5c:91:2e:c7:31:22:72:33:70:f8:d1:
3d:47:43:48:22:01:e0:2e:c7:2b:cc:0e:f6:5d:e6:
e3:e0:f6:51:ef:01:7a:50:93:71:7c:21:7e:24:f8:
7b:84:c6:7b:f3:0c:93:fe:62:ed:85:f5:7c:fa:09:
71:1c:e2:45:1a:df:0e:af:8a:85:20:80:e7:62:00:
6e:46:f6:3d:03:88:26:71:d1:c2:bc:0e:cb:4c:bf:
5d:41:0c:c5:38:8a:ab:0c:ea:85:a8:da:49:9f:dc:
b2:ce:58:96:1b:00:53:eb:4c:2f:56:29:ef:fc:9e:
03:87:06:5a:0a:46:eb:4e:2f:86:62:7a:1a:8b:d5:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:34:B3:1A:AC:FE:70:CB:9B:17:5B:2D:ED:AF:A6:C1:6C:1B:16:BE
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/QjSzGqz-cMubF1st7a-mwWwbFr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
Signature Algorithm: sha256WithRSAEncryption
14:76:78:43:ce:f4:98:c5:ac:04:01:f6:93:67:60:e2:d4:d7:
24:35:ca:63:aa:b2:48:33:00:56:ba:b7:46:1c:68:20:bc:ca:
27:4e:f9:21:f9:00:e3:e4:10:33:72:03:00:5e:32:66:01:c1:
05:e1:ad:d1:4a:07:95:13:c3:a5:9a:c2:10:0a:c1:9e:e3:5d:
ca:98:69:a3:9a:fc:13:d0:30:de:d4:50:e8:84:3d:d2:91:3a:
b9:16:89:af:8f:03:8c:20:38:34:c8:71:f3:11:5f:dd:c5:0d:
00:90:f1:47:d2:e9:44:fa:99:5d:3a:83:c4:15:e6:88:d0:db:
8a:b6:25:86:32:80:05:c8:71:98:e6:1a:51:a0:02:7f:8c:c2:
0a:73:d3:12:f5:a3:48:45:54:fb:3d:35:df:3f:37:fb:13:28:
63:fe:cd:27:7b:a0:ce:20:56:f0:f8:b9:39:77:c5:10:1e:72:
33:b0:b5:d0:09:de:54:fa:98:24:40:c4:78:90:e9:0c:a9:32:
8f:20:8d:68:63:f6:ec:e9:96:65:65:a4:21:d3:29:ce:12:24:
e2:7c:9d:83:27:d5:b5:39:d1:f4:a3:91:08:86:4e:a5:9c:05:
fa:9b:11:f6:80:8d:08:e1:64:3d:3c:90:7e:7c:d0:11:11:d8:
77:1f:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:14 2024 by rpki-client on console-ams.rpki-client.org