Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/W-kNaQhqHXo6bNiKATINJWTeWvQ.roa
File: W-kNaQhqHXo6bNiKATINJWTeWvQ.roa (raw, json)
Hash identifier: UHIaaQSYnx+Pr/sL6BqcZW6425OobDVagkhqpOuEbdI=
Subject key identifier: 5B:E9:0D:69:08:6A:1D:7A:3A:6C:D8:8A:01:32:0D:25:64:DE:5A:F4
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B192B161A70A463E18B813DC3C580E3D4
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/W-kNaQhqHXo6bNiKATINJWTeWvQ.roa
Signing time: Tue 10 Oct 2023 10:38:55 +0000
ROA not before: Tue 10 Oct 2023 10:38:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200088
IP address blocks: 85.237.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:19:2b:16:1a:70:a4:63:e1:8b:81:3d:c3:c5:80:e3:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Oct 10 10:38:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5be90d69086a1d7a3a6cd88a01320d2564de5af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:31:ac:3c:5f:15:bc:47:f7:aa:7a:03:c8:
02:3a:f6:cf:f5:46:82:8e:8b:09:ca:61:41:57:d0:
4f:05:45:45:13:2b:63:d8:88:98:a1:11:49:59:6e:
34:f2:8d:6b:5b:70:38:d6:3e:b7:49:9e:53:6d:c7:
f9:5e:aa:e6:6f:42:15:ef:d5:92:8d:a2:0a:21:71:
b6:4c:4b:d3:58:b8:59:c1:a4:f9:d3:ec:c8:16:a1:
79:9c:67:82:2e:ac:2f:cb:64:a9:f1:76:12:aa:2e:
1f:c9:35:e4:18:28:44:bc:62:d2:3c:a1:c8:27:77:
bb:02:02:56:ce:da:e2:52:cd:98:dc:1c:30:45:5f:
89:0d:e2:6c:55:02:7f:6f:ba:8c:a2:a1:d8:ec:40:
4b:39:e0:69:5d:cd:54:da:82:d1:ef:33:71:96:8a:
84:42:9e:13:cf:ae:b5:ec:a1:5f:02:00:ff:23:2f:
fe:3e:d9:f9:f7:2e:b2:5d:de:59:ad:f8:38:a8:6e:
4c:7d:af:56:ff:4c:79:13:ac:60:55:56:f8:e6:61:
30:e3:ef:d1:b2:b5:93:08:7a:a9:b1:08:6d:9b:c3:
4c:ac:2e:79:72:49:03:75:b5:cf:6a:36:9e:6f:8d:
bd:3d:c0:70:c4:36:03:ee:5a:57:e0:7a:19:a8:30:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E9:0D:69:08:6A:1D:7A:3A:6C:D8:8A:01:32:0D:25:64:DE:5A:F4
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/W-kNaQhqHXo6bNiKATINJWTeWvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.199.0/24
Signature Algorithm: sha256WithRSAEncryption
56:51:29:7e:c1:23:bd:91:26:9f:fc:71:5f:c6:e9:10:46:c7:
25:84:20:53:d3:76:7f:c7:67:b4:f1:f4:61:50:75:c4:95:58:
6f:ab:8d:ac:9b:63:05:52:24:f1:12:0d:10:55:39:d0:2c:52:
5f:5b:45:49:6e:16:61:a8:2c:70:55:72:84:95:57:57:b4:f8:
f1:d0:6e:81:e3:4d:3d:6c:c6:ee:ee:9c:86:36:3d:bc:4e:80:
0e:a4:98:dc:ed:20:be:f9:d9:53:8d:ba:15:58:b7:a5:cb:56:
1e:04:b4:1c:26:42:db:66:a3:dd:00:a3:5a:7e:93:2f:ef:88:
64:fc:d9:d6:42:77:e9:58:ba:56:d3:82:6f:ff:18:9c:90:0b:
a3:7f:9b:32:fc:f3:be:ff:bb:30:b0:29:ba:b2:7c:f4:d9:37:
2b:6d:be:58:fa:06:1c:de:1b:7b:40:2f:75:2f:0d:73:62:6b:
1d:26:0f:a7:70:8f:bd:c3:c2:85:0a:63:c1:be:d5:3c:55:df:
97:2c:8e:23:b0:91:cd:4b:2c:01:f7:d4:0d:63:5b:75:8c:37:
2d:fb:34:54:f6:22:cb:55:b2:8b:20:d4:9b:c1:a1:78:41:13:
df:0a:97:52:83:77:c1:d3:45:75:f7:88:31:25:b6:c6:2c:7d:
df:2e:dc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:14 2024 by rpki-client on console-ams.rpki-client.org