Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WBYJChuX5KvrNhwHj08hMvH25ts.roa
File: WBYJChuX5KvrNhwHj08hMvH25ts.roa (raw, json)
Hash identifier: 9py6ERJWAoVRI8TO7Dms2Fgw+YKCIuBofhD4MKUme5o=
Subject key identifier: 58:16:09:0A:1B:97:E4:AB:EB:36:1C:07:8F:4F:21:32:F1:F6:E6:DB
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 01856FCBA40BF3D45048FF8A1857BDE66C10
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WBYJChuX5KvrNhwHj08hMvH25ts.roa
Signing time: Mon 02 Jan 2023 00:04:54 +0000
ROA not before: Mon 02 Jan 2023 00:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62579
IP address blocks: 185.139.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:a4:0b:f3:d4:50:48:ff:8a:18:57:bd:e6:6c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jan 2 00:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5816090a1b97e4abeb361c078f4f2132f1f6e6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e3:fd:69:84:3b:b4:b5:c6:d8:3e:c1:33:b7:
b8:82:f2:de:32:3e:b3:7d:58:e8:7a:d8:1a:99:4c:
0f:1b:81:64:ff:1b:d8:56:14:57:85:23:d6:91:ea:
e9:fd:83:4a:79:ad:2e:0d:a6:83:38:90:71:d1:9c:
6f:9f:c2:e1:a8:43:1a:4f:2e:6c:e0:25:b0:fa:11:
59:11:e4:25:9d:83:3f:00:d2:25:cf:04:6d:96:2b:
2a:82:7a:0e:f5:a7:6b:c1:73:44:84:06:ba:c9:aa:
56:d1:ce:1d:a9:3a:b9:69:b3:e8:49:83:9c:e2:0d:
d4:88:81:65:34:fe:1e:77:81:4d:ce:6e:36:fb:a8:
8f:3e:2b:76:b5:c8:d6:67:bf:8b:8e:af:d3:cc:7e:
e6:85:a4:57:d4:5d:8f:ef:ec:37:d2:8f:65:68:0d:
4b:ab:8d:bc:a7:cd:2c:54:25:5a:07:97:95:88:e8:
6c:2f:2a:fa:0b:e8:ac:59:85:bc:2f:ad:93:f3:0e:
3b:93:7f:2a:56:28:24:1e:42:11:aa:f9:20:55:2e:
19:41:e4:e6:47:2d:96:9d:66:8d:8d:d1:41:aa:90:
e3:57:fc:5b:01:a6:51:16:30:c4:96:78:09:7d:50:
7b:f0:23:1f:57:31:8c:f0:a8:d8:43:92:60:5b:a8:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:16:09:0A:1B:97:E4:AB:EB:36:1C:07:8F:4F:21:32:F1:F6:E6:DB
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WBYJChuX5KvrNhwHj08hMvH25ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.25.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:55:2e:57:0d:75:87:d4:0a:89:02:43:b6:5f:fc:46:22:d0:
b1:59:6c:ac:86:7c:ff:f2:c7:83:bc:fb:dd:24:5d:a4:1d:ba:
7a:c1:b6:3e:69:01:9f:f3:7e:57:fa:65:8b:5e:69:61:2d:39:
d4:94:9c:35:7c:e4:7a:79:07:90:e2:0b:c4:6e:f7:2d:ca:94:
e8:60:d7:9f:57:11:f8:24:83:46:bf:d0:9c:4b:e5:2e:55:0c:
5b:7d:42:c0:ff:bf:cb:36:5e:eb:9e:d8:f1:04:82:df:7e:d7:
e0:51:6b:cb:f8:c6:a8:6d:87:17:a1:04:eb:d0:f5:74:51:b3:
9e:a5:b2:70:73:cf:20:dd:a0:84:d6:77:04:1a:ab:1e:cb:6d:
a4:91:1e:44:c0:54:68:05:6a:c4:7e:3d:0d:be:ad:be:53:88:
46:e9:5b:a2:02:c5:9e:8d:ba:df:0f:c5:9f:98:87:7d:da:31:
a3:60:2d:cb:9e:df:3f:c1:1e:37:e0:5b:f8:85:d2:9d:ae:a5:
19:63:95:b2:3f:2a:c0:cc:d5:61:87:40:7b:73:ec:86:2c:52:
6a:b8:11:25:bb:08:e4:c8:af:9b:cf:17:eb:f4:96:5d:ec:b2:
20:90:e4:a6:b8:07:f2:a5:7f:f4:2a:65:34:68:5a:11:74:21:
c4:11:28:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:05 2025 by rpki-client