Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/irSuTo6H0PC_KJY2LUmKKxy_JR0.roa
File: irSuTo6H0PC_KJY2LUmKKxy_JR0.roa (raw, json)
Hash identifier: Yi/BV91RIOoJ8PCEppE5VWBZxwaJFXbVKnojHYYxsXM=
Subject key identifier: 8A:B4:AE:4E:8E:87:D0:F0:BF:28:96:36:2D:49:8A:2B:1C:BF:25:1D
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B8D86140299BBD0421487F66D11AB9BE6
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/irSuTo6H0PC_KJY2LUmKKxy_JR0.roa
Signing time: Thu 02 Nov 2023 00:54:16 +0000
ROA not before: Thu 02 Nov 2023 00:54:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.158.58.0/23 maxlen: 23
85.237.211.0/24 maxlen: 24
85.237.208.0/23 maxlen: 23
85.237.220.0/23 maxlen: 23
85.237.222.0/24 maxlen: 24
185.93.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8d:86:14:02:99:bb:d0:42:14:87:f6:6d:11:ab:9b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Nov 2 00:54:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ab4ae4e8e87d0f0bf2896362d498a2b1cbf251d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f9:19:7b:a7:2d:e4:89:37:5d:39:ad:8c:ad:
de:87:a1:f7:a7:9d:eb:11:c2:8c:8e:5f:a0:4a:11:
4c:c9:fb:03:30:56:31:64:e3:82:4a:95:2b:f1:a9:
e1:0a:49:e7:ae:93:fd:89:2a:b0:e9:11:7b:4c:84:
73:bf:83:26:cd:44:cf:3e:85:80:a4:76:d3:f3:4d:
af:74:f6:50:ad:e3:ca:2b:1c:ef:04:d0:b2:91:a6:
72:f5:46:43:97:e6:89:55:e4:c3:93:de:3a:28:75:
6a:49:d3:c7:0d:36:a7:5c:09:45:fd:71:33:94:a2:
c5:27:78:4a:6e:5e:89:d6:0e:50:f9:0a:6d:a0:45:
d3:bd:4e:35:6d:a2:e5:3e:bc:3b:2a:53:69:ec:06:
ee:3a:7f:06:26:20:e3:2e:8e:b1:bd:78:2a:5d:53:
60:c6:80:f4:8a:2e:ed:dc:d1:e9:24:c3:23:bb:3e:
99:11:7d:e8:00:0f:59:5d:2f:57:40:89:ca:d6:ec:
95:fc:52:bb:35:a0:d8:0f:f7:4a:db:09:72:fb:ef:
7f:a5:19:93:17:c7:25:8f:ca:12:b8:da:5a:86:50:
08:08:ee:0c:4e:5d:58:62:0d:f4:8f:97:e3:9a:a6:
6f:a2:24:58:ac:e0:f4:d2:fe:6b:6b:03:59:63:91:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B4:AE:4E:8E:87:D0:F0:BF:28:96:36:2D:49:8A:2B:1C:BF:25:1D
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/irSuTo6H0PC_KJY2LUmKKxy_JR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.58.0/23
85.237.208.0/23
85.237.211.0/24
85.237.220.0-85.237.222.255
185.93.32.0/24
Signature Algorithm: sha256WithRSAEncryption
60:9d:8a:be:77:af:33:f5:ac:0f:28:03:42:36:f1:69:6b:75:
07:a2:2c:18:99:c5:7e:ec:eb:4f:53:27:bd:01:f4:27:ed:f5:
16:85:2b:44:07:aa:39:f2:ea:f2:c0:ed:99:2f:01:e1:33:7b:
01:35:44:4e:6f:fd:f5:ff:0d:74:9c:cf:dd:d5:fc:de:b0:b8:
a1:05:34:f2:ac:3e:f9:d7:9e:b1:fc:82:2a:c4:dc:02:40:74:
79:6e:80:99:5d:8e:3a:d7:b6:c5:9b:e7:f4:ec:4e:b6:27:49:
f2:85:12:85:ec:20:19:88:e9:e6:2b:1d:a6:48:cd:dc:17:7c:
bf:bc:2d:2d:b5:38:4f:3f:87:39:9e:41:7f:17:ab:08:65:29:
63:c4:74:2f:5a:9b:fe:67:a1:5f:79:f1:fa:96:40:24:20:af:
e5:1a:ee:8f:3f:11:76:58:c9:20:cf:15:2e:57:98:0e:12:ce:
24:7a:35:c3:db:a5:f0:ed:3d:15:99:a2:dc:47:5c:51:d1:82:
98:26:68:ea:2c:25:a1:fe:c0:e3:ee:81:dc:71:5e:66:bf:78:
cc:c5:9c:d4:8d:57:05:6d:88:d0:08:12:19:48:69:6c:3f:6b:
18:d9:f0:fa:7f:f4:bb:66:a5:e5:1e:a6:c5:57:95:d1:eb:57:
13:40:01:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:14 2024 by rpki-client on console-ams.rpki-client.org