Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/f75wnsvo0xfGdw-WnYPim-FQ6E8.roa
File: f75wnsvo0xfGdw-WnYPim-FQ6E8.roa (raw, json)
Hash identifier: GUCnGxbWHshJbIQKXEQDaeLoPfzKJ2C8TBSvgSFZUpM=
Subject key identifier: 7F:BE:70:9E:CB:E8:D3:17:C6:77:0F:96:9D:83:E2:9B:E1:50:E8:4F
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCC051F675BFE3389F5F6CA5B791AB1
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/f75wnsvo0xfGdw-WnYPim-FQ6E8.roa
Signing time: Thu 15 Jun 2023 06:44:04 +0000
ROA not before: Thu 15 Jun 2023 06:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 193.109.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cc:05:1f:67:5b:fe:33:89:f5:f6:ca:5b:79:1a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fbe709ecbe8d317c6770f969d83e29be150e84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:57:75:25:83:ab:f8:e1:bc:01:72:ba:17:ec:
f9:fb:c3:39:14:8c:d8:f3:a1:4b:b1:3b:25:7d:79:
05:51:0f:b3:9a:f0:89:d5:5f:93:de:72:d4:50:2f:
b5:af:1e:ee:0d:48:83:d2:1d:90:c6:b9:1d:b7:dc:
ec:b0:c3:35:ba:18:2e:ab:23:71:bd:08:54:61:a2:
05:d6:5b:f6:45:78:82:ff:2d:fc:70:fc:21:27:b7:
7b:f2:e1:85:d7:0d:a8:67:04:1e:f2:d5:60:67:c5:
ce:a2:43:91:a0:39:ab:86:99:58:0c:22:7e:ef:7a:
bb:98:a6:67:2f:5f:fe:a5:42:d9:41:35:73:e5:5c:
d6:20:d7:7f:9d:a5:65:6c:68:dd:84:54:06:0e:3b:
e0:6f:a7:2b:06:14:9b:cb:b1:65:c5:4c:f7:9c:1f:
c6:cc:ab:71:68:72:47:ab:25:5e:ef:f7:f3:ed:c8:
64:22:02:0a:62:b6:e8:0c:ee:78:b9:63:01:52:b8:
c9:9a:bc:be:eb:57:85:e3:2a:9f:7a:c2:5a:ca:f8:
e6:35:79:cd:1b:72:be:9c:2d:48:d7:a2:7c:de:cf:
11:7b:0b:95:57:14:ce:d6:d1:41:fb:e2:a5:ce:a0:
7b:0a:20:58:15:6a:0e:cc:ae:0f:87:9b:70:c5:47:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BE:70:9E:CB:E8:D3:17:C6:77:0F:96:9D:83:E2:9B:E1:50:E8:4F
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/f75wnsvo0xfGdw-WnYPim-FQ6E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.197.0/24
Signature Algorithm: sha256WithRSAEncryption
67:64:e4:5b:6a:6e:96:04:8a:92:d6:13:96:82:39:b3:32:ea:
c4:57:19:7e:a0:be:70:c7:ac:66:81:e7:24:57:09:50:d4:c0:
05:b0:a3:3d:f4:4c:7a:0f:8b:92:2d:89:2b:c3:da:f9:d8:c9:
47:d3:3a:a0:56:e0:7a:4f:b7:61:05:e6:0c:dc:97:e2:28:2e:
49:fc:58:31:b7:7e:d2:e4:3b:ba:1d:26:bb:94:5c:bb:6b:14:
6e:97:ea:99:cb:81:1b:0b:01:c3:34:21:2a:8a:e2:2c:c2:9c:
b4:10:67:16:17:2f:b0:6c:2a:4b:09:b0:59:d5:8e:1f:c7:9e:
31:a4:ef:52:31:cf:1c:a0:ae:1f:72:89:05:a4:53:d2:0c:28:
f1:5b:5d:40:74:f0:e3:c6:77:ef:76:1c:71:c1:98:59:16:fa:
4c:1c:5f:50:90:65:f1:c0:42:4f:7b:9f:e5:2c:a9:16:67:91:
dd:b7:7d:73:9e:03:e8:cc:b4:c6:35:20:00:47:81:09:ba:40:
b3:a3:8a:e4:aa:0d:50:8c:af:ac:3e:be:9a:0d:a4:35:f1:17:
cf:b3:73:1f:40:49:15:ae:ef:e2:58:f2:de:00:4b:6e:09:b6:
3a:4a:e0:ad:90:c8:21:d4:b0:ce:5b:44:09:2d:15:4f:a2:b5:
18:54:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:04 2025 by rpki-client