Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/RyfZadYcBJYKH43my33dR915ROI.roa
File: RyfZadYcBJYKH43my33dR915ROI.roa (raw, json)
Hash identifier: agk51EcfjCxiov+pvZOVFooCvVpdTdbdb+bx/RU1RZ8=
Subject key identifier: 47:27:D9:69:D6:1C:04:96:0A:1F:8D:E6:CB:7D:DD:47:DD:79:44:E2
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B0184850B3D691EBC715799ADC9ED8103
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/RyfZadYcBJYKH43my33dR915ROI.roa
Signing time: Thu 05 Oct 2023 20:25:43 +0000
ROA not before: Thu 05 Oct 2023 20:25:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.196.0/24 maxlen: 24
85.237.204.0/24 maxlen: 24
85.237.206.0/23 maxlen: 23
85.158.58.0/23 maxlen: 23
85.158.58.0/24 maxlen: 24
85.237.208.0/23 maxlen: 23
85.237.208.0/24 maxlen: 24
85.237.209.0/24 maxlen: 24
85.237.220.0/23 maxlen: 23
185.139.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:84:85:0b:3d:69:1e:bc:71:57:99:ad:c9:ed:81:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Oct 5 20:25:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4727d969d61c04960a1f8de6cb7ddd47dd7944e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:c2:07:12:95:6c:03:55:ff:f5:b2:9c:f0:
61:6a:5c:18:9b:81:c7:a3:c9:61:13:d6:cf:ce:4f:
dd:13:39:4b:c1:0e:cb:eb:ba:22:5a:12:09:b9:fe:
62:80:8d:e8:1a:92:89:50:56:91:b2:3c:c5:5f:6f:
29:8f:41:a5:fa:24:7a:86:27:27:83:77:b4:f1:88:
b6:90:8a:79:f1:fe:f3:f0:e7:a1:f8:8f:db:a8:0a:
48:e1:3f:c5:6c:2d:e6:0c:fd:5a:83:9d:52:1f:4a:
e9:a2:84:09:e2:35:56:03:85:76:ba:60:37:92:9a:
af:4d:a0:45:fb:77:23:b1:00:cd:6f:81:c7:10:aa:
87:a8:46:dd:11:ee:54:f9:30:f5:74:32:ab:09:6d:
6e:5d:79:7d:5a:83:59:4f:35:e5:c9:47:ed:08:fa:
4e:53:f7:87:ad:31:5d:da:5e:11:e8:79:33:c4:33:
e6:93:b2:32:a2:f3:e2:8a:36:64:7e:e3:ce:f8:03:
6c:bb:1b:a8:e3:01:40:85:df:bb:9b:e1:10:74:92:
83:50:49:3f:f5:2f:69:ef:18:27:c8:c1:0f:23:48:
4c:42:5e:39:f3:c7:2b:cf:a2:f3:cb:22:9b:4e:43:
04:43:b3:d9:1a:ea:ec:9b:90:fd:8c:a3:7a:3c:5a:
08:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:27:D9:69:D6:1C:04:96:0A:1F:8D:E6:CB:7D:DD:47:DD:79:44:E2
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/RyfZadYcBJYKH43my33dR915ROI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.58.0/23
85.237.204.0/24
85.237.206.0-85.237.209.255
85.237.220.0/23
185.139.26.0/24
193.109.196.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d8:63:81:6b:13:ed:55:0e:0e:04:8f:58:d3:ae:64:f6:64:
67:fa:a9:0a:1d:a8:e2:8e:84:98:9d:67:03:e3:fa:47:1b:89:
cd:7e:58:ab:a0:ee:f5:55:8a:06:c1:f6:32:da:45:e9:11:8d:
f7:4c:92:41:0f:41:94:eb:b4:b2:0d:a1:44:01:85:88:ec:fa:
1a:2e:66:96:b8:18:7d:fc:63:ac:dd:bb:f8:92:56:33:af:ab:
22:ef:c0:4b:16:df:80:19:4b:f5:1e:c3:0c:31:f8:fa:b5:ac:
95:f6:23:99:ba:84:82:91:90:e7:77:8b:10:c1:57:a9:2c:09:
61:bb:d5:69:88:72:28:cb:a7:98:88:19:0e:5b:d2:50:d3:a3:
79:75:ac:df:7b:60:7f:75:1b:a9:60:02:17:b8:d9:3a:fa:cb:
c9:c6:f5:92:a0:27:a2:59:3f:12:f8:27:cb:ab:13:35:4a:71:
ce:94:5f:38:7c:ee:c1:88:0c:d6:b5:33:36:a3:d7:d9:18:73:
93:0a:3a:ba:ee:57:55:49:c1:44:f0:3a:3a:9e:56:e6:fa:85:
d2:57:01:70:eb:4a:e7:d4:61:da:68:37:02:fc:a6:71:e5:e4:
75:21:cd:0f:88:9b:3e:29:21:23:d9:27:16:53:04:fd:96:2d:
0b:40:48:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:56 2025 by rpki-client