Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/VDuljpVqLVdrE1NsP0_erhUjhVk.roa
File: VDuljpVqLVdrE1NsP0_erhUjhVk.roa (raw, json)
Hash identifier: R30FANB4PMakcyMNXdzrw+nt0OBvbYEjzSyGOfOAxI4=
Subject key identifier: 54:3B:A5:8E:95:6A:2D:57:6B:13:53:6C:3F:4F:DE:AE:15:23:85:59
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCC0939185E200D3D5DFAD585C68751
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/VDuljpVqLVdrE1NsP0_erhUjhVk.roa
Signing time: Thu 15 Jun 2023 06:44:05 +0000
ROA not before: Thu 15 Jun 2023 06:44:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400040
IP address blocks: 85.237.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cc:09:39:18:5e:20:0d:3d:5d:fa:d5:85:c6:87:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:44:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=543ba58e956a2d576b13536c3f4fdeae15238559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:b2:e5:a9:2d:75:2e:67:bb:29:b6:a3:84:
2f:f3:5d:eb:1c:cb:15:e2:9a:17:ef:a8:2f:fc:e0:
dd:63:5a:f0:b9:af:a6:ba:3c:1e:c6:36:f7:4b:64:
64:1a:28:19:b6:9f:0d:18:f5:c8:a5:e6:d2:86:92:
cf:2e:4b:e1:a2:49:47:07:3b:e7:34:bd:1f:8d:5a:
c7:bf:54:57:27:e5:f8:66:6f:86:77:f4:b8:44:43:
2c:09:17:62:a2:41:b6:38:4e:e7:91:cd:33:93:a7:
b5:6c:1e:5f:8d:d0:8a:ed:09:f3:0b:9f:0f:42:2c:
12:a4:56:c0:a8:b7:4f:4a:16:b2:2a:e2:02:93:8e:
00:a6:1d:d5:12:8c:99:17:fe:9a:1d:c2:a4:11:de:
f4:95:ed:29:e2:16:71:a3:ce:32:7b:86:d2:5d:3d:
7c:99:f6:19:79:5b:71:14:dc:26:85:8d:67:49:78:
37:8f:08:62:95:30:ac:fa:36:8c:40:f5:5e:e6:ce:
4b:c3:2a:7e:fc:78:a5:2d:a6:92:62:ee:4e:04:a9:
3b:b2:ec:6f:ac:0e:a1:df:e0:18:44:6e:33:d0:40:
e7:62:a7:15:f5:26:ca:73:9e:ff:de:03:89:f0:c1:
cc:9e:97:68:b8:e3:9f:08:bc:26:cc:bb:cb:53:8b:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3B:A5:8E:95:6A:2D:57:6B:13:53:6C:3F:4F:DE:AE:15:23:85:59
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/VDuljpVqLVdrE1NsP0_erhUjhVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.197.0/24
Signature Algorithm: sha256WithRSAEncryption
74:57:5d:cd:f9:9f:aa:78:67:4a:3f:28:52:07:b9:7a:b2:84:
fd:10:6e:ea:89:13:2f:98:95:c4:1f:ea:bc:6c:63:6b:c1:91:
1c:d0:ca:f0:63:67:da:79:52:b0:b8:af:8d:a1:5f:f4:f6:bd:
96:1e:1d:75:8d:9f:b6:71:69:db:50:bf:8e:2b:2c:0e:1f:a1:
61:d1:ea:75:14:8a:11:96:7f:db:f9:35:fe:d2:3d:57:b4:b1:
20:f7:f0:05:f8:f3:c9:e2:fc:13:9a:fc:68:6e:86:db:ed:52:
ba:4e:38:ab:5f:03:8e:6c:87:e0:98:80:fc:72:bb:97:e6:1f:
a7:82:c0:25:32:b3:5b:40:06:6d:30:53:2d:83:b0:45:09:fc:
06:f3:1d:8e:69:75:66:51:96:69:04:98:9a:22:35:4a:8e:3b:
3c:8d:d7:44:68:4a:5d:00:6b:87:2c:f2:dc:45:97:78:46:26:
f4:cd:1d:f1:6e:99:65:16:94:31:ce:91:32:ef:15:90:ba:83:
23:b4:9c:67:00:aa:a5:42:b5:34:88:8e:65:e5:9a:66:e4:69:
72:ff:7b:07:39:74:6b:e5:2b:52:dc:37:ac:8b:d9:08:b6:2c:
fe:b8:d4:56:05:23:03:dd:a3:36:18:57:a3:43:f0:40:b8:0f:
12:a4:48:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 07:41:23 2023 by rpki-client on console-ams.rpki-client.org