Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/jAzp3yrDJfZ2YzMUdoMFG2YY1oc.roa
File: jAzp3yrDJfZ2YzMUdoMFG2YY1oc.roa (raw, json)
Hash identifier: BuxP1GaDJH0d7AUH+Dfz6jCkUwBJw7ui4uyqM+D7o+I=
Subject key identifier: 8C:0C:E9:DF:2A:C3:25:F6:76:63:33:14:76:83:05:1B:66:18:D6:87
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B936F71E00433AB04EA53027A1935FC7D
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/jAzp3yrDJfZ2YzMUdoMFG2YY1oc.roa
Signing time: Fri 03 Nov 2023 04:27:16 +0000
ROA not before: Fri 03 Nov 2023 04:27:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207785
IP address blocks: 85.237.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:6f:71:e0:04:33:ab:04:ea:53:02:7a:19:35:fc:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Nov 3 04:27:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c0ce9df2ac325f6766333147683051b6618d687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b1:20:ab:23:08:fa:ae:f5:89:c4:da:ed:14:
ae:b6:d3:fe:65:7f:15:70:cd:3f:2a:86:6c:6d:9a:
0d:3b:36:a6:e7:da:5c:b7:3d:61:51:6e:56:a1:6e:
60:65:05:44:05:10:56:52:70:f6:39:52:d7:1d:5f:
95:44:de:5f:b4:77:d4:fe:13:75:bd:16:a8:13:58:
4d:e4:dc:d6:fb:7b:bf:64:ea:ef:41:12:e1:d9:41:
11:1f:18:26:77:8d:04:56:a3:56:be:b4:fe:86:92:
fe:7a:07:d3:86:e9:33:25:64:28:f8:5a:68:60:dd:
1c:ee:d3:91:24:ea:aa:78:1f:76:39:80:63:84:5e:
26:dd:40:0c:0c:e5:70:db:7c:22:72:b6:18:b3:d0:
ad:00:b1:8a:78:48:7b:59:da:22:7f:2e:d2:4b:9a:
51:58:8d:b0:34:16:91:cd:46:ed:7b:b4:47:98:b3:
66:47:69:c4:fc:8c:c2:55:71:37:01:98:c6:7b:ab:
cd:34:2d:c9:49:3a:87:cd:07:d4:e0:2c:d2:25:be:
2c:f5:92:bc:1b:98:13:18:bb:63:16:6a:97:ef:45:
7b:75:f4:13:63:0e:45:2d:e3:39:51:c2:c0:04:40:
22:e0:a1:28:50:e9:38:ce:b8:59:7c:bc:29:c5:71:
1b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0C:E9:DF:2A:C3:25:F6:76:63:33:14:76:83:05:1B:66:18:D6:87
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/jAzp3yrDJfZ2YzMUdoMFG2YY1oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.211.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1e:91:5a:97:0b:bb:7c:64:ba:14:0b:17:b9:c7:87:95:b8:
e4:b6:53:2f:57:59:1a:9b:64:aa:af:56:08:7d:17:d5:48:06:
74:3a:59:f1:9e:cf:b4:c0:01:99:8d:0f:19:09:70:05:69:34:
12:ec:15:9c:57:99:84:43:a4:67:cf:68:dd:e8:bf:bf:e5:1f:
12:d1:a3:f4:2d:ee:7a:c0:b7:b0:d8:66:99:8b:2c:70:1a:64:
19:9d:a9:52:3b:d2:8e:81:3d:b1:c3:8e:45:cb:e2:f9:83:7c:
59:29:7c:c5:3a:df:e0:d7:e1:f5:98:1f:e3:69:a7:27:f5:a3:
f8:60:b3:4d:48:19:2f:ba:2b:91:d5:72:f2:1d:d4:0f:8b:da:
83:8e:2c:32:20:7b:45:c2:77:b9:df:bb:e5:12:7b:d0:5a:31:
a8:78:4e:7e:33:e0:36:c4:b8:fb:0f:6d:84:15:e6:f2:07:a4:
c8:4c:10:8b:75:cc:a9:70:81:6e:35:1f:68:c5:7b:1d:2c:4a:
3e:53:11:5c:c9:f1:eb:1d:b6:e4:79:32:d8:e6:d1:64:f4:ee:
30:fd:a4:24:05:6f:17:ca:08:6b:26:39:55:7d:58:0c:7d:a0:
c7:98:00:fc:73:1e:ad:79:dd:ec:2a:f4:12:c6:60:05:0f:f8:
08:48:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 07:16:17 2023 by rpki-client on console-fra.rpki-client.org