Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/RWCpYIXM668MoXES0i3L8DILH78.roa
File: RWCpYIXM668MoXES0i3L8DILH78.roa (raw, json)
Hash identifier: JG7u7rn0GwdbA7ncIsnCuUr0LzwMl95z8ODTc2wg8Ok=
Subject key identifier: 45:60:A9:60:85:CC:EB:AF:0C:A1:71:12:D2:2D:CB:F0:32:0B:1F:BF
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018AAE65033B1AE61ED08700F4A2E0A53605
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/RWCpYIXM668MoXES0i3L8DILH78.roa
Signing time: Tue 19 Sep 2023 17:02:50 +0000
ROA not before: Tue 19 Sep 2023 17:02:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 185.100.214.0/24 maxlen: 24
85.237.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ae:65:03:3b:1a:e6:1e:d0:87:00:f4:a2:e0:a5:36:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Sep 19 17:02:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4560a96085ccebaf0ca17112d22dcbf0320b1fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:b5:1f:d9:cc:b1:ef:4e:e6:99:22:28:35:
57:7c:2d:c4:63:4f:c7:9f:82:f5:ab:59:65:e5:49:
c9:c0:e5:a0:c8:30:ae:95:00:75:64:5e:1f:28:79:
e7:3e:7c:fb:c7:f6:7b:44:47:6b:56:d5:c1:41:61:
f1:78:60:29:68:46:39:30:25:75:28:45:ab:41:f1:
95:42:ff:21:68:9c:c7:22:9a:cb:bd:85:ea:f1:98:
7b:69:42:ca:c9:8a:96:5c:59:ec:19:0f:89:67:c7:
5e:fa:44:df:66:a6:a8:0a:bd:bd:d4:79:ac:81:4c:
8f:68:5a:eb:9f:7c:c2:c9:e1:85:9e:0e:8f:a8:66:
be:f8:54:72:91:d8:49:10:fb:af:58:e4:85:3a:5a:
7f:ed:77:e7:9e:82:aa:64:57:3f:70:b2:2d:ec:37:
a1:53:33:c4:82:b4:5e:b7:0c:9d:ac:3f:4b:af:00:
84:96:31:2e:07:51:9a:4f:e4:3d:21:a8:71:06:30:
de:85:ba:69:91:c8:dc:00:4e:1f:5d:37:aa:01:8a:
d1:44:c2:ae:32:b6:b3:82:ad:82:63:48:47:cc:fc:
43:a8:14:9a:58:d0:fc:ef:a2:67:bd:0e:a8:ac:2a:
16:bb:39:cb:d0:66:ed:7a:bb:15:6e:1a:c8:d2:fa:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:60:A9:60:85:CC:EB:AF:0C:A1:71:12:D2:2D:CB:F0:32:0B:1F:BF
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/RWCpYIXM668MoXES0i3L8DILH78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.204.0/24
185.100.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:0c:95:17:f9:f8:71:e6:c4:23:05:3f:8c:98:6f:e9:00:6b:
d2:17:f5:17:33:bc:a5:38:58:55:cc:2e:69:62:e8:7e:16:4f:
5d:b4:1a:c1:0c:62:7b:f0:5c:a5:2c:05:c4:66:60:01:08:e1:
f0:64:9b:4b:2f:6c:a7:16:d0:1b:c7:40:d0:74:10:8d:71:a6:
75:c2:91:e4:00:0b:40:4b:7c:91:d2:ed:4c:4f:06:e1:93:23:
ff:09:5f:27:1d:69:22:a9:b7:f4:57:9f:08:6a:49:df:01:94:
e1:ca:a4:54:01:e5:e9:ed:bb:7c:7b:de:c6:49:c9:81:0a:a6:
f3:0e:43:bf:4c:d1:b5:fa:e1:4c:28:c9:f5:5a:47:f6:4a:61:
90:22:68:08:dd:66:11:42:16:2e:7f:37:1c:61:81:e1:f8:87:
7d:b4:b4:9d:fd:62:05:95:a7:4d:58:fd:8a:d3:00:fe:44:29:
f5:2a:f3:7a:22:a8:4d:54:9c:24:26:70:6a:6f:40:cb:b6:ba:
b8:06:01:37:cc:79:08:cf:bb:db:46:7f:7f:17:93:45:b6:32:
c4:89:b5:9e:f2:fd:04:9d:70:60:83:93:9c:77:53:39:59:8b:
1d:00:d0:38:f3:94:63:db:01:30:86:4f:ff:3f:b2:6b:a6:65:
93:92:17:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:38 2025 by rpki-client