Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/ht_EdnIo9DJ0pUA0-h8hC4WMO5c.roa
File: ht_EdnIo9DJ0pUA0-h8hC4WMO5c.roa (raw, json)
Hash identifier: vlnMjGi3OeRMWgG/wi3csp74Y1kArtXwnfaEwjZExAo=
Subject key identifier: 86:DF:C4:76:72:28:F4:32:74:A5:40:34:FA:1F:21:0B:85:8C:3B:97
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCC05B8C827ED33EA8E53E223B67D8D
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/ht_EdnIo9DJ0pUA0-h8hC4WMO5c.roa
Signing time: Thu 15 Jun 2023 06:44:04 +0000
ROA not before: Thu 15 Jun 2023 06:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 85.237.194.0/24 maxlen: 24
85.237.212.0/24 maxlen: 24
194.169.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cc:05:b8:c8:27:ed:33:ea:8e:53:e2:23:b6:7d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86dfc4767228f43274a54034fa1f210b858c3b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a3:fd:0c:94:21:8a:e8:23:4b:b4:9c:32:52:
37:2d:e2:7a:af:62:4e:c4:ff:3f:1b:c6:6e:f3:df:
50:5c:8e:b2:da:40:00:3a:9d:32:5f:b6:f8:a3:d7:
77:05:05:53:67:74:35:d6:34:64:3a:7d:7c:0f:28:
ff:56:e6:f1:1e:a2:19:e1:53:f8:bf:b0:43:80:ab:
7e:92:75:9a:d6:3c:9e:3c:b0:3e:c0:e3:30:26:28:
4f:3f:d7:80:f1:42:9f:52:f8:99:4f:9d:69:b6:c9:
b0:06:53:c8:4e:21:cd:6c:22:be:e2:0f:2c:c1:98:
27:f2:ad:21:8a:cf:6f:bc:82:0e:d8:49:8f:e4:4d:
c1:d7:23:42:a1:41:74:7c:a4:ce:dc:9e:35:34:07:
c8:dc:2b:e0:14:ff:e6:b4:b9:7d:05:fa:41:d4:eb:
64:e7:84:58:19:1c:5c:d9:08:96:c6:1c:64:56:02:
18:81:5e:0b:8d:62:f4:05:11:0a:fa:e7:9f:56:eb:
ed:a6:ac:60:cd:d4:60:a0:02:a3:09:db:6a:d4:81:
a2:f2:ca:d0:e5:0f:fa:34:53:0e:66:02:da:95:f3:
53:ff:3d:13:29:0c:2e:e8:2b:07:ec:01:c9:d2:20:
db:bf:b0:09:d9:d8:62:e2:a6:dc:e4:f4:09:ab:41:
77:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DF:C4:76:72:28:F4:32:74:A5:40:34:FA:1F:21:0B:85:8C:3B:97
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/ht_EdnIo9DJ0pUA0-h8hC4WMO5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.194.0/24
85.237.212.0/24
194.169.217.0/24
Signature Algorithm: sha256WithRSAEncryption
57:0c:4f:98:0b:a3:25:42:53:f0:46:75:82:2c:6b:d3:ae:b5:
92:59:7a:81:de:c0:38:c0:00:bb:e1:ca:11:66:64:e9:5d:59:
f4:2d:47:be:74:be:59:43:51:a8:02:19:30:8f:e3:cd:7f:03:
97:db:ae:7f:4c:e0:db:96:df:3d:55:93:d1:7a:91:20:be:ef:
c5:d9:3f:e0:d6:09:ff:a8:71:f4:a4:b3:1f:93:36:ce:cc:7f:
04:55:7e:3d:3b:c3:b5:ef:cd:54:1b:68:98:09:f0:4c:60:55:
b9:f4:90:54:fa:4e:cb:6c:d6:aa:0e:a0:57:aa:a7:63:cf:a8:
d9:0e:86:21:56:f2:fb:58:ec:50:8e:9e:90:f8:d5:29:f8:bd:
2f:8c:22:04:3a:3d:e1:89:e6:28:50:c7:18:34:73:a2:2b:83:
bc:1c:58:75:3a:14:0f:1b:b5:fb:fd:62:cc:a8:a6:44:5a:0b:
0f:31:92:0e:5e:e8:e1:50:a9:fc:d9:45:18:3e:cc:a8:c3:81:
61:88:6e:5a:e9:27:c2:d8:88:e9:5e:a8:97:f8:0c:08:78:00:
89:c7:00:fc:d3:38:dd:f9:c2:76:5e:3d:d5:44:91:98:77:40:
e8:69:7b:13:f5:1e:c4:ed:f2:63:7b:82:67:a6:7e:54:e1:0c:
ea:9e:88:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:14 2024 by rpki-client on console-ams.rpki-client.org