Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/fWt72ac9_IoEoKK9kseY7KHieOY.roa
File: fWt72ac9_IoEoKK9kseY7KHieOY.roa (raw, json)
Hash identifier: N4gZ+EJ60wniyI7N79wCOZHOSWSLh28x1MeABNYO6ZY=
Subject key identifier: 7D:6B:7B:D9:A7:3D:FC:8A:04:A0:A2:BD:92:C7:98:EC:A1:E2:78:E6
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018AFEB2628055498FF88FC945D9B0124D67
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/fWt72ac9_IoEoKK9kseY7KHieOY.roa
Signing time: Thu 05 Oct 2023 07:16:58 +0000
ROA not before: Thu 05 Oct 2023 07:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200088
IP address blocks: 85.237.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:b2:62:80:55:49:8f:f8:8f:c9:45:d9:b0:12:4d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Oct 5 07:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d6b7bd9a73dfc8a04a0a2bd92c798eca1e278e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9b:0b:14:54:14:89:ee:cd:67:29:6e:09:af:
ce:60:ee:93:42:c4:bc:e5:70:06:c0:c0:3f:4e:ac:
aa:f7:4f:f2:8f:04:0a:40:4a:e3:d7:08:60:70:e1:
3a:d4:34:c8:14:89:db:17:82:72:e6:9e:de:25:45:
53:b5:75:83:3c:42:ab:69:61:bf:4c:98:cd:90:1b:
fa:b7:9b:83:ac:f2:03:4d:47:2a:3b:d0:af:92:98:
12:78:eb:c5:51:e0:95:be:92:61:a6:c4:e3:35:60:
45:07:3f:ed:6d:20:de:5f:8f:a2:90:ab:0c:80:0d:
ec:a0:2a:4b:2b:61:69:c0:ed:59:1d:61:84:94:3c:
df:e5:0d:d1:f7:32:24:d7:13:d3:aa:70:f6:77:38:
a1:22:30:fa:a8:39:61:90:ce:46:b1:9e:8f:ea:c6:
24:8b:f6:ce:fc:ec:ad:51:30:b6:aa:8b:ef:aa:3c:
89:90:0e:d8:99:5c:9c:b4:2e:8c:b9:45:12:36:47:
58:60:8e:f9:bb:a4:c0:60:e6:46:8c:c5:ca:90:5a:
61:a2:28:a6:cd:27:af:77:e0:6e:69:50:45:16:27:
3f:f0:46:c0:27:10:61:b5:68:3e:72:0e:fb:87:39:
a2:e7:13:77:db:80:f7:f9:fb:4b:07:fc:37:78:b8:
12:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6B:7B:D9:A7:3D:FC:8A:04:A0:A2:BD:92:C7:98:EC:A1:E2:78:E6
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/fWt72ac9_IoEoKK9kseY7KHieOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.199.0/24
Signature Algorithm: sha256WithRSAEncryption
41:53:dd:cf:e8:d7:66:71:f4:52:71:56:33:7f:06:a2:6a:fa:
d5:27:57:6a:02:58:6a:b0:0b:01:cd:59:e4:b2:e7:b2:9e:50:
01:0d:01:95:1a:b8:b1:fd:40:33:c8:39:3d:d0:a5:1e:17:76:
91:41:29:db:77:97:15:b7:99:75:5f:1e:be:5b:aa:1f:f4:56:
97:42:31:77:e8:42:f3:bc:09:3e:43:b8:56:c7:4e:de:50:17:
87:00:b6:cd:f1:35:e5:f5:6d:ab:36:b8:39:52:3e:d5:0e:9b:
ff:30:17:20:49:21:a6:62:a2:e6:11:e3:dc:0e:a7:08:fa:36:
b2:fd:8a:0b:27:a9:66:3f:8d:a3:55:8a:d0:8f:3e:ef:04:9f:
67:8a:39:aa:21:b4:22:82:5c:26:3b:83:63:2f:24:35:1f:d4:
16:47:53:e1:a6:30:69:9c:55:c4:22:80:e3:23:8b:74:b4:15:
42:24:20:44:ec:25:15:5c:8a:68:d9:53:83:16:a9:4f:94:6a:
96:a6:de:4a:b7:2d:62:95:0a:65:87:7c:14:0b:35:db:9f:18:
4f:53:17:b4:c1:00:44:1a:71:b2:19:94:ec:99:1a:e2:b6:e5:
90:45:7e:5e:4f:f5:a6:0f:2a:81:02:62:aa:44:aa:e9:d8:af:
69:f1:a4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:00 2024 by rpki-client on console-fra.rpki-client.org