Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/m4ckkhM1XBFmCBj9YzWq1ojg3sQ.roa
File: m4ckkhM1XBFmCBj9YzWq1ojg3sQ.roa (raw, json)
Hash identifier: kPEj3RwJls3Swq/sXAeJWAlMRj0ZiOA+Bh717xMG8O0=
Subject key identifier: 9B:87:24:92:13:35:5C:11:66:08:18:FD:63:35:AA:D6:88:E0:DE:C4
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018A28A02A113E948C8E8F82E176B631C7E4
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/m4ckkhM1XBFmCBj9YzWq1ojg3sQ.roa
Signing time: Thu 24 Aug 2023 17:38:19 +0000
ROA not before: Thu 24 Aug 2023 17:38:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.197.0/24 maxlen: 24
193.109.198.0/24 maxlen: 24
85.237.206.0/24 maxlen: 24
85.237.206.0/23 maxlen: 23
85.237.202.0/24 maxlen: 24
85.237.208.0/24 maxlen: 24
85.237.220.0/23 maxlen: 23
85.237.220.0/24 maxlen: 24
85.237.221.0/24 maxlen: 24
85.237.223.0/24 maxlen: 24
185.139.26.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.158.58.0/24 maxlen: 24
185.93.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:28:a0:2a:11:3e:94:8c:8e:8f:82:e1:76:b6:31:c7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Aug 24 17:38:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b87249213355c11660818fd6335aad688e0dec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:40:60:2c:7a:fc:cd:63:9c:fa:53:2e:5e:6e:
13:7b:6e:6d:4d:61:fb:e3:ab:b2:ae:97:14:81:b1:
da:65:e6:e4:d3:a1:c6:af:f7:01:81:84:54:7c:e2:
59:06:4a:fd:0d:29:d1:26:03:f3:93:ab:1b:80:a6:
e8:0e:0b:88:5e:42:1c:8a:16:74:10:1d:f7:de:ad:
41:0e:76:06:a5:49:6e:79:45:58:dd:5c:24:5a:f6:
6a:e6:9b:bc:f8:f3:97:cb:09:91:5b:01:43:43:ad:
4c:7e:2c:9d:52:3f:fc:b2:b6:71:fe:58:0e:c4:99:
d6:01:66:ec:57:8f:20:fa:22:31:ef:c4:1f:a7:0b:
ee:23:e0:ac:bd:04:ea:cc:e9:06:97:c4:ff:fa:70:
fb:ec:71:61:72:ca:b6:a9:76:89:77:0d:c1:06:80:
d4:7e:cb:59:8f:e0:c9:55:d3:94:fa:e1:9d:b7:15:
69:0a:33:29:d0:81:b1:0b:eb:9e:c8:cc:0d:68:12:
82:54:f7:02:b1:db:8c:d7:e6:4c:37:08:fa:7d:9c:
18:11:c2:c0:68:fd:99:2a:d6:1a:2e:f6:16:51:ca:
95:d8:eb:f6:e5:e3:31:e8:40:2a:2e:ce:46:8c:cf:
b8:1c:df:24:3f:51:c7:cd:8d:91:19:cf:20:74:73:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:24:92:13:35:5C:11:66:08:18:FD:63:35:AA:D6:88:E0:DE:C4
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/m4ckkhM1XBFmCBj9YzWq1ojg3sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0-85.158.58.255
85.237.202.0/24
85.237.206.0-85.237.208.255
85.237.220.0/23
85.237.223.0/24
185.93.33.0/24
185.139.26.0/24
193.109.197.0-193.109.198.255
Signature Algorithm: sha256WithRSAEncryption
79:84:12:8b:3d:71:3a:3f:49:49:9b:42:d2:03:e0:25:8d:2a:
bc:43:fa:e5:bf:d6:22:bc:29:ad:b5:e0:1c:20:c4:50:4a:28:
31:c9:32:cd:7b:b8:b4:5c:50:08:f6:fa:87:f7:38:a6:a0:97:
26:9c:06:54:48:81:f8:8a:e8:60:66:c8:34:d2:16:e1:13:9a:
c8:e4:54:83:db:0c:68:68:5c:4a:3e:0c:6e:08:91:b5:a7:c7:
ac:e4:5c:e4:76:16:8a:76:e7:53:55:5f:6b:1c:83:4a:b1:5d:
b1:30:3e:2d:f3:68:81:bc:ec:36:86:88:0c:f9:e8:5b:15:88:
74:1a:f0:a0:d3:d2:dd:3b:81:60:31:cf:47:2c:84:d6:a5:50:
ac:6c:f0:e2:45:c5:32:88:0c:44:22:bc:93:15:25:76:07:c8:
98:61:b0:38:b6:e6:37:87:9c:65:2f:b7:28:da:f6:33:4b:fb:
98:7c:1b:53:ae:05:d0:33:53:41:27:41:8c:f2:bc:31:35:79:
dd:c1:d7:88:46:97:f6:db:81:4e:99:72:db:23:ed:b4:be:21:
49:78:39:9c:11:59:9f:33:41:04:f3:ac:64:ca:b4:03:b4:1e:
d3:32:b9:19:ee:63:d0:b9:29:2d:df:74:74:e7:76:c7:97:ab:
ec:f3:af:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:39:27 2025 by rpki-client