Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/aA1DN2u6muCcmyhR0b4LmxOJYX8.roa
File: aA1DN2u6muCcmyhR0b4LmxOJYX8.roa (raw, json)
Hash identifier: 66eczyRxNw0oLrzN1Z7jDdDiNTaxF9TINFJoSHZqDKM=
Subject key identifier: 68:0D:43:37:6B:BA:9A:E0:9C:9B:28:51:D1:BE:0B:9B:13:89:61:7F
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018AB823A0C1FF7208BE86C7A88992B3FA14
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/aA1DN2u6muCcmyhR0b4LmxOJYX8.roa
Signing time: Thu 21 Sep 2023 14:27:37 +0000
ROA not before: Thu 21 Sep 2023 14:27:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400866
IP address blocks: 193.109.197.0/24 maxlen: 24
194.169.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:23:a0:c1:ff:72:08:be:86:c7:a8:89:92:b3:fa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Sep 21 14:27:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=680d43376bba9ae09c9b2851d1be0b9b1389617f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a6:5e:94:15:98:2d:8d:2e:e3:4c:cb:49:39:
10:d0:b8:7a:5d:84:9f:d4:02:03:cb:c4:01:25:8d:
2b:87:45:5a:16:ad:d2:37:a4:40:15:de:4c:97:92:
73:95:c9:7c:0b:69:fc:c9:8e:41:11:73:79:cc:42:
0f:cd:c7:c8:40:90:5f:7a:66:f1:5f:bd:6b:7e:a3:
b7:49:f7:ad:d5:06:a2:43:ef:54:00:da:80:5b:cc:
e3:ac:02:c3:2e:f5:56:1e:84:88:c4:2b:1d:25:0b:
e2:d4:1a:ba:08:8b:95:5d:95:6a:d9:bc:ba:0b:71:
40:73:17:90:bc:18:9f:4a:f3:a5:a1:b5:71:9d:04:
e1:c2:be:c2:53:60:de:c5:35:7a:15:89:b0:62:7d:
dc:8f:c9:7e:a4:35:88:2b:e7:fd:23:b4:a2:f3:64:
0d:0d:10:4f:88:58:12:ad:de:04:4b:c1:1a:4a:d0:
5d:3f:63:76:1e:77:5c:aa:82:af:ae:27:0c:ef:3f:
5a:ad:33:59:e9:86:88:af:27:2d:8b:2d:b0:56:71:
bf:1f:41:5f:89:c5:c2:66:cd:36:64:39:01:9e:b3:
48:14:8e:63:90:ff:70:8c:19:c5:fe:4f:b6:ab:02:
31:db:04:1e:46:ac:55:39:06:e0:5d:a4:cb:76:24:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0D:43:37:6B:BA:9A:E0:9C:9B:28:51:D1:BE:0B:9B:13:89:61:7F
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/aA1DN2u6muCcmyhR0b4LmxOJYX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.197.0/24
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c9:be:5e:79:06:2a:6a:8f:78:30:62:54:5a:d6:6e:92:bc:
61:18:8c:c5:60:a8:d7:ad:31:82:f4:2e:28:a3:81:5e:cc:2e:
b3:d9:70:c2:7e:64:83:ff:42:2a:46:78:86:3a:e5:bc:45:0f:
9a:d8:dc:d5:93:2f:59:1c:45:e2:f9:8d:c2:12:ce:1c:eb:4d:
b7:95:31:c7:32:51:92:66:65:f5:ec:88:61:88:e3:7e:c9:ad:
63:ea:89:0a:1a:d2:6b:c7:bf:a8:fc:fa:19:9b:3e:c9:1a:6f:
ed:26:32:dd:1c:c9:3e:05:94:f7:18:ff:f9:68:a6:cd:f7:6c:
03:26:3e:80:47:6a:23:6e:97:f3:99:60:10:a4:88:ee:97:c9:
c0:e8:09:2f:69:fc:1b:ac:9d:3e:04:6a:d4:12:cb:5e:74:62:
16:3c:93:8e:5b:43:88:b6:b4:51:0c:0a:7d:00:ec:b3:dc:72:
92:3d:06:9a:ca:30:6c:28:52:0d:a3:7b:5b:7f:3d:8f:42:e0:
82:8c:72:02:0a:31:9f:e3:f4:f1:2f:a2:21:29:22:2f:e4:37:
93:8a:9f:71:8f:18:71:ac:cf:10:ed:ed:2c:cc:68:94:12:15:
cc:2d:86:53:fc:23:1a:b7:36:7b:97:8b:23:1b:d0:bb:1a:19:
e2:8c:ce:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:44 2025 by rpki-client