Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/hWTHzkxWD9KWzOidcMEO-es_zU4.roa
File: hWTHzkxWD9KWzOidcMEO-es_zU4.roa (raw, json)
Hash identifier: D8U8WtxnUlE5KFQmRi/ZZ5CPet0OX2uSv0TGbMlYQE0=
Subject key identifier: 85:64:C7:CE:4C:56:0F:D2:96:CC:E8:9D:70:C1:0E:F9:EB:3F:CD:4E
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B0AC154DD811DBE3D4C251807B372D27C
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/hWTHzkxWD9KWzOidcMEO-es_zU4.roa
Signing time: Sat 07 Oct 2023 15:28:44 +0000
ROA not before: Sat 07 Oct 2023 15:28:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200088
IP address blocks: 85.237.199.0/24 maxlen: 24
85.237.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:c1:54:dd:81:1d:be:3d:4c:25:18:07:b3:72:d2:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Oct 7 15:28:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8564c7ce4c560fd296cce89d70c10ef9eb3fcd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:fe:94:eb:7a:56:da:ae:b8:e5:61:e9:81:
41:d5:ba:88:46:bf:b7:c1:74:18:a6:9a:ce:74:0e:
0e:2b:59:93:78:ac:1a:47:90:4d:b5:84:01:e9:80:
08:4b:5c:5a:d9:ef:43:ed:80:47:eb:78:34:55:b6:
c6:8d:2e:e3:4b:01:0e:f8:10:52:5c:52:6b:e6:9b:
4f:07:9f:14:60:5f:65:a4:39:93:ad:80:2c:ff:ef:
15:14:df:12:4e:37:23:a4:ef:ae:f3:ab:c0:a6:7f:
e9:80:2d:b5:9f:3e:1e:b2:66:c7:e0:4b:d2:2a:69:
10:32:f7:cf:fb:22:8f:c8:d7:05:30:37:db:0a:f6:
0b:49:be:26:6a:ee:28:23:f9:b4:c8:5b:54:e1:0d:
10:e2:a5:b7:da:34:0f:20:61:3a:72:c8:10:47:6f:
3e:ea:19:6f:85:40:10:49:58:f6:74:f5:86:ce:51:
1f:62:a5:a4:76:53:84:0a:85:ae:1e:1c:9a:cb:fc:
6e:fb:90:c7:ca:4e:7f:28:4c:db:33:70:03:c9:d3:
3b:dc:ab:e7:98:ad:48:6b:de:1a:e2:13:b6:b0:db:
49:b7:c4:94:0b:40:7f:26:15:43:bb:62:ac:1a:3a:
c6:c9:55:87:c4:00:4a:ae:34:8b:c1:2f:e2:78:46:
ef:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:64:C7:CE:4C:56:0F:D2:96:CC:E8:9D:70:C1:0E:F9:EB:3F:CD:4E
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/hWTHzkxWD9KWzOidcMEO-es_zU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.199.0/24
85.237.204.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b5:3a:fc:5b:af:59:2e:21:f5:fd:2b:75:72:6c:e9:9c:70:
aa:97:08:71:ed:14:89:e9:9c:f3:74:1e:34:b2:da:ac:7e:1f:
05:14:0f:50:13:c7:62:91:5d:35:0a:46:1b:98:ab:76:5d:39:
e6:08:47:23:aa:68:92:3e:80:c1:97:f6:57:c7:cf:a0:3a:fa:
2b:00:a1:9f:ca:3f:2f:84:4f:58:ea:b0:aa:76:38:ab:a9:84:
77:80:6f:a9:7c:8e:6a:ce:65:af:9f:fa:dd:80:79:a8:bd:43:
f6:ab:01:cd:ab:57:cc:00:55:b3:3b:27:6b:5a:a6:78:ab:98:
ff:d1:d9:75:07:4c:36:85:cb:64:cb:78:db:38:fe:f7:f4:62:
55:0a:bd:e8:2c:2d:d7:6f:39:2d:84:4d:84:f0:9f:b5:4e:81:
90:7a:22:b0:09:d0:80:26:fb:35:d7:10:42:17:94:f5:d6:4e:
62:e6:7f:0e:27:b8:ec:3e:f5:9e:5d:d2:27:16:c3:b0:87:16:
82:5f:95:4b:63:1c:8b:b8:c5:c7:5e:ce:23:f2:cc:e2:6c:77:
aa:22:79:e0:df:42:0b:d9:80:99:c0:5d:5b:70:34:f1:47:3c:
90:f1:3c:59:df:5d:44:a1:a7:dc:e1:de:52:ef:c6:01:77:8f:
79:4b:ad:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:33 2025 by rpki-client