Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/kfAPEoJNB55Wdl2Uw09sx-8iqlQ.roa
File: kfAPEoJNB55Wdl2Uw09sx-8iqlQ.roa (raw, json)
Hash identifier: Fif9JdBu9+QOEKloA9Zbr2c3Bi+kBoCbphhLNmVRB+8=
Subject key identifier: 91:F0:0F:12:82:4D:07:9E:56:76:5D:94:C3:4F:6C:C7:EF:22:AA:54
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0328B38C
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/kfAPEoJNB55Wdl2Uw09sx-8iqlQ.roa
Signing time: Sat 01 Jan 2022 11:04:26 +0000
ROA not before: Sat 01 Jan 2022 11:04:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23470
IP address blocks: 185.139.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52999052 (0x328b38c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jan 1 11:04:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91f00f12824d079e56765d94c34f6cc7ef22aa54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:6d:9a:74:f4:a9:fa:5a:ec:48:20:84:62:
d4:30:bb:ca:7b:95:15:d7:0c:10:91:64:d9:21:fb:
d9:f0:e2:38:fe:a5:54:d5:e4:23:46:0c:4d:67:d2:
87:a9:56:59:9e:b6:25:94:60:47:84:45:f9:b5:f9:
f8:0a:c0:f8:36:42:a5:76:95:e5:a4:13:b0:3d:2d:
06:55:85:0e:cc:b9:ba:4b:d3:4e:c7:83:be:f7:15:
6f:2b:a3:8f:6d:dd:a7:6e:3c:1f:97:2e:7c:18:3e:
44:6d:e5:fa:bb:6f:8f:9e:93:a1:6d:16:e8:18:d2:
ef:10:13:7e:43:9f:ab:c3:c5:e2:a1:e9:eb:73:5f:
64:0c:56:b4:1b:67:56:53:10:db:0e:fe:a6:97:a7:
f8:64:f2:fd:33:67:45:f3:44:dd:90:7e:00:86:54:
54:91:a8:e9:a4:a0:cb:1d:9a:14:62:8b:d3:21:d0:
a1:d0:49:f5:c2:dc:4b:13:c3:06:17:c5:71:4b:99:
be:da:8b:97:98:79:29:51:cc:53:7d:cb:23:8f:ed:
52:f6:32:9e:c5:81:ec:ff:53:00:c5:f8:74:63:19:
df:42:90:b7:00:e0:93:0e:2d:b6:f9:01:94:31:66:
01:60:65:83:13:c0:80:28:c9:b1:ef:54:1e:34:b0:
96:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F0:0F:12:82:4D:07:9E:56:76:5D:94:C3:4F:6C:C7:EF:22:AA:54
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/kfAPEoJNB55Wdl2Uw09sx-8iqlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.24.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:15:74:12:ef:3f:65:1d:87:e5:38:5d:6a:04:8f:76:01:c4:
7e:e9:b0:d4:ad:34:5f:2c:bf:10:4a:4d:d0:60:8a:21:85:f1:
76:c3:c5:8d:30:66:8f:9e:e4:69:c9:28:fa:04:09:40:14:94:
98:bd:ea:37:ee:cd:4e:78:07:23:52:b5:da:6f:89:d4:8c:f6:
57:8f:2d:d5:5b:8d:ee:aa:7a:7b:14:e2:cb:1b:1c:34:31:40:
0f:ab:7c:54:76:01:fb:28:c5:dd:09:1c:92:a1:ef:3a:41:3a:
34:dc:0b:7f:7e:59:49:49:b3:f6:41:8b:4d:83:b5:4c:52:82:
f1:1d:bb:f2:1a:96:45:3f:ec:35:f0:f7:7c:8e:64:f6:d5:f5:
f4:c7:59:32:3e:9a:be:79:b6:7b:a0:91:7a:db:04:15:47:ae:
ca:f5:47:d7:8b:2a:6f:f5:e0:52:48:ce:48:e8:62:51:31:f9:
ff:5a:c8:59:29:ab:29:9d:00:7f:33:2e:1d:06:dc:18:b9:fe:
e4:7f:c6:6b:ab:5c:d7:92:fa:55:56:8a:f0:28:5b:06:c7:74:
55:a7:33:dd:df:c0:e9:0a:bb:5b:8d:f8:9f:33:a1:2e:3b:58:
62:1e:07:1b:1a:a4:e4:37:35:2f:1d:02:04:ac:11:18:c7:96:
46:51:47:08
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAyizjDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
OGJmN2YzYWQ1M2YyOWEzYzQzZjBhZDgyMDE3YTA1MzY4YzAxMDRhMB4XDTIyMDEw
MTExMDQyNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTFmMDBmMTI4MjRk
MDc5ZTU2NzY1ZDk0YzM0ZjZjYzdlZjIyYWE1NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM6JbZp09Kn6WuxIIIRi1DC7ynuVFdcMEJFk2SH72fDiOP6l
VNXkI0YMTWfSh6lWWZ62JZRgR4RF+bX5+ArA+DZCpXaV5aQTsD0tBlWFDsy5ukvT
TseDvvcVbyujj23dp248H5cufBg+RG3l+rtvj56ToW0W6BjS7xATfkOfq8PF4qHp
63NfZAxWtBtnVlMQ2w7+ppen+GTy/TNnRfNE3ZB+AIZUVJGo6aSgyx2aFGKL0yHQ
odBJ9cLcSxPDBhfFcUuZvtqLl5h5KVHMU33LI4/tUvYynsWB7P9TAMX4dGMZ30KQ
twDgkw4ttvkBlDFmAWBlgxPAgCjJse9UHjSwltcCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSR8A8Sgk0HnlZ2XZTDT2zH7yKqVDAfBgNVHSMEGDAWgBRYv3861T8po8Q/
CtggF6BTaMAQSjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dMOV9PdFVfS2FQRVB3cllJQmVnVTJqQUVFby5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGYvMzY0Yjk0LTZjYTQtNGY5YS04OGE1LThiM2Q1MjdjNDllNC8x
L2tmQVBFb0pOQjU1V2RsMlV3MDlzeC04aXFsUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYv
MzY0Yjk0LTZjYTQtNGY5YS04OGE1LThiM2Q1MjdjNDllNC8xL1dMOV9PdFVfS2FQ
RVB3cllJQmVnVTJqQUVFby5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmLGDANBgkqhkiG9w0BAQsFAAOC
AQEArRV0Eu8/ZR2H5ThdagSPdgHEfumw1K00Xyy/EEpN0GCKIYXxdsPFjTBmj57k
acko+gQJQBSUmL3qN+7NTngHI1K12m+J1Iz2V48t1VuN7qp6exTiyxscNDFAD6t8
VHYB+yjF3QkckqHvOkE6NNwLf35ZSUmz9kGLTYO1TFKC8R278hqWRT/sNfD3fI5k
9tX19MdZMj6avnm2e6CRetsEFUeuyvVH14sqb/XgUkjOSOhiUTH5/1rIWSmrKZ0A
fzMuHQbcGLn+5H/Ga6tc15L6VVaK8ChbBsd0Vacz3d/A6Qq7W434nzOhLjtYYh4H
Gxqk5Dc1Lx0CBKwRGMeWRlFHCA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:26:50 2025 by rpki-client