Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/deXzsZwYJYf7Uogw-jIZvgrjwFY.roa
File: deXzsZwYJYf7Uogw-jIZvgrjwFY.roa (raw, json)
Hash identifier: P5hE5V90+HUOGeyskWaUgZWY9gyrRXkjxtnn+r6fyx4=
Subject key identifier: 75:E5:F3:B1:9C:18:25:87:FB:52:88:30:FA:32:19:BE:0A:E3:C0:56
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018AE29CC82F25087FE77F4181141A99BA60
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/deXzsZwYJYf7Uogw-jIZvgrjwFY.roa
Signing time: Fri 29 Sep 2023 20:24:00 +0000
ROA not before: Fri 29 Sep 2023 20:24:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 85.237.196.0/24 maxlen: 24
85.237.208.0/24 maxlen: 24
85.237.215.0/24 maxlen: 24
85.237.214.0/24 maxlen: 24
85.237.216.0/24 maxlen: 24
185.139.25.0/24 maxlen: 24
185.139.27.0/24 maxlen: 24
185.235.32.0/24 maxlen: 24
85.158.58.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.158.61.0/24 maxlen: 24
85.158.63.0/24 maxlen: 24
85.158.62.0/24 maxlen: 24
85.158.60.0/24 maxlen: 24
185.93.34.0/24 maxlen: 24
185.93.35.0/24 maxlen: 24
185.100.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e2:9c:c8:2f:25:08:7f:e7:7f:41:81:14:1a:99:ba:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Sep 29 20:24:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75e5f3b19c182587fb528830fa3219be0ae3c056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:d0:e3:ed:61:ef:b9:e7:f0:32:0c:aa:e6:
60:4e:bd:37:a9:33:8d:e4:03:8c:ce:4b:a8:5c:fb:
20:cb:17:f2:3e:81:83:5a:92:98:04:f3:25:dc:02:
dd:fa:00:ac:07:dd:f8:a3:88:21:a6:85:02:19:b9:
0a:a3:c1:cf:10:94:a1:c1:d0:3d:f1:a8:d4:de:50:
08:a9:59:37:62:94:63:0e:9b:f6:b0:6d:4c:9b:99:
d0:89:a4:86:a6:0f:4b:59:05:1c:b8:50:38:7c:67:
22:c4:43:90:da:2d:10:07:f0:df:66:ae:22:38:1b:
00:66:80:31:88:f4:94:0b:d6:ae:b7:b6:12:28:09:
62:37:5f:de:e6:f0:62:ac:b4:e6:3e:65:b9:55:fa:
60:c0:8d:7c:53:62:ff:c1:66:12:d1:9f:7c:77:e6:
1c:71:6f:19:bf:f4:10:26:99:94:19:e1:0a:d9:63:
1b:5d:74:7e:ce:10:35:fc:15:5f:c6:9b:49:33:1f:
72:30:83:d3:1d:32:7c:1b:85:3d:71:b9:b7:9a:8d:
33:ee:0d:7f:5b:73:34:90:02:2f:95:b0:8c:5b:9d:
ac:d1:7d:6f:ef:92:ff:02:29:97:a2:ec:2f:de:20:
3b:85:c0:be:9e:7d:7f:83:5f:ae:1c:e1:b3:a4:59:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E5:F3:B1:9C:18:25:87:FB:52:88:30:FA:32:19:BE:0A:E3:C0:56
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/deXzsZwYJYf7Uogw-jIZvgrjwFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0-85.158.58.255
85.158.60.0/22
85.237.196.0/24
85.237.208.0/24
85.237.214.0-85.237.216.255
185.93.34.0/23
185.100.212.0/22
185.139.25.0/24
185.139.27.0/24
185.235.32.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b2:f0:9a:04:70:99:50:23:fd:b5:05:33:1e:2c:9c:0a:87:
26:90:92:5e:8a:3b:61:79:aa:d4:63:66:cc:58:b3:ac:4b:6d:
aa:73:75:c3:2c:e4:fb:8d:3f:a8:b4:bd:c6:8f:05:1f:4d:d5:
6c:32:fd:63:8f:f9:dc:26:41:3b:69:43:ac:03:b3:41:3b:3b:
4b:87:7f:60:cf:bd:14:3b:53:61:6d:ba:f0:02:33:8e:d1:7a:
21:1b:1f:09:ac:16:3b:30:d5:fc:bd:88:ab:2b:eb:e6:63:6f:
da:3d:5a:96:12:4b:1f:2a:2f:58:9d:69:7d:a0:82:09:50:51:
c7:69:8f:2b:b0:65:64:46:b0:b7:34:57:fe:b6:84:94:39:63:
8e:00:36:f9:f1:41:40:9a:bf:43:a8:67:de:fc:da:8a:4a:0c:
14:f8:01:c2:03:f5:71:8b:a1:5d:ce:79:14:b2:b4:bd:3b:67:
3c:13:ca:5f:c3:e2:66:69:d2:98:00:5b:e4:dc:5e:fd:c2:0d:
0b:6c:87:d4:3b:7e:3c:8c:00:e6:0e:a1:44:10:a6:9b:7c:8e:
4d:af:fa:9a:99:25:24:fd:1c:0a:b3:75:03:a1:7f:e8:84:bd:
c9:9a:f2:e5:0e:05:0d:a7:fe:d3:e9:9c:1f:73:dc:bf:bb:eb:
f8:2a:d1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:00 2024 by rpki-client on console-fra.rpki-client.org