Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/nEmdQb2Wq01gf2zSmPxtKlIdkpo.roa
File: nEmdQb2Wq01gf2zSmPxtKlIdkpo.roa (raw, json)
Hash identifier: u2QuGPWV1KpY9GMzeHaZakQTNnn7GEIyxxgZ7X+fmcY=
Subject key identifier: 9C:49:9D:41:BD:96:AB:4D:60:7F:6C:D2:98:FC:6D:2A:52:1D:92:9A
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 01856FCBA2399EDEFA745D607E570AC6E95D
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/nEmdQb2Wq01gf2zSmPxtKlIdkpo.roa
Signing time: Mon 02 Jan 2023 00:04:54 +0000
ROA not before: Mon 02 Jan 2023 00:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 185.139.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:a2:39:9e:de:fa:74:5d:60:7e:57:0a:c6:e9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jan 2 00:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c499d41bd96ab4d607f6cd298fc6d2a521d929a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b8:52:63:3c:52:68:2a:2f:d4:a0:b0:ca:32:
85:a8:19:1b:14:b0:d0:c9:4b:30:3c:04:dd:9f:40:
40:46:c3:83:33:0b:8a:c7:c5:a0:5f:90:9d:47:41:
21:6c:87:8b:86:be:ec:5c:6e:9e:2a:85:7e:f6:6d:
78:33:d7:8c:63:c7:a8:61:de:8c:21:37:13:4b:e5:
fe:f6:59:64:96:de:d2:c0:4c:4e:cb:f3:96:1f:3a:
ca:b1:05:d2:d8:b2:f4:24:ec:3f:cd:85:8e:4e:9c:
30:d2:12:f2:2d:e3:b1:1f:60:53:77:82:6c:08:2f:
45:21:f8:89:80:32:b3:0c:d9:86:dc:e9:89:79:0c:
e2:d0:a4:53:f4:41:52:48:41:49:e9:c2:96:37:20:
15:a9:5e:a8:f0:54:57:70:3d:43:78:e9:45:85:09:
64:58:da:10:3d:4a:6b:f4:6d:8e:4d:1a:33:40:33:
1d:a0:cf:0a:d3:81:c6:9c:28:8f:c9:c3:7f:ec:7b:
6e:c1:06:65:95:07:5e:6c:52:4b:43:ad:5b:a8:33:
ad:35:2e:c8:91:98:98:21:9e:6d:58:83:a0:78:a0:
bf:cb:45:e5:a7:eb:5f:01:22:8e:aa:9b:d6:e7:86:
6d:f0:fb:13:59:09:9e:34:8a:b1:6c:d3:7e:d2:ad:
fe:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:49:9D:41:BD:96:AB:4D:60:7F:6C:D2:98:FC:6D:2A:52:1D:92:9A
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/nEmdQb2Wq01gf2zSmPxtKlIdkpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.27.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:2d:1d:4e:e9:9c:b3:32:ac:78:ba:46:16:1f:93:bc:8a:fe:
a4:58:07:d2:90:59:c6:f7:48:1f:3b:07:86:63:16:be:34:bf:
bd:fe:11:f1:22:61:cc:f3:49:b5:c6:72:21:1e:6c:6c:81:f7:
4d:9e:76:aa:45:bf:88:ce:6c:a5:7d:8d:b1:cc:0c:1d:7c:89:
74:c0:0b:0f:a9:76:fd:71:69:c5:fb:68:d1:0c:ae:9e:44:23:
1d:ed:66:01:84:cf:1a:91:83:d9:8c:98:3c:5f:d4:d9:04:4f:
a1:1a:61:ac:8d:d9:bf:dd:dc:c2:3d:69:a5:df:6f:58:6a:96:
ec:de:54:c5:9a:3c:24:17:81:f4:a6:e7:18:01:0c:5a:30:05:
f4:5e:5f:b0:af:29:f7:7b:24:79:78:ed:6d:42:fe:96:2b:c8:
a2:bd:eb:72:44:63:fd:6e:1d:5d:fd:fc:64:4c:2e:8e:81:b6:
c8:ab:9c:dc:38:38:68:78:7f:f5:a6:c0:7a:61:3d:d3:63:9c:
56:60:18:d7:02:b0:a6:c3:89:8f:c7:80:f4:b0:82:00:11:ed:
12:f4:66:56:ec:f0:67:bf:d9:c8:5c:e9:e1:c1:18:a1:61:07:
c4:f4:1a:2b:24:7e:1c:23:8b:04:a4:4c:6c:ff:58:11:bd:8e:
4b:b6:bf:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvy6I5nt76dF1gflcKxuldMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YmY3ZjNhZDUzZjI5YTNjNDNmMGFkODIwMTdhMDUzNjhj
MDEwNGEwHhcNMjMwMTAyMDAwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzQ5OWQ0MWJkOTZhYjRkNjA3ZjZjZDI5OGZjNmQyYTUyMWQ5MjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLhSYzxSaCov1KCwyjKFqBkbFLDQ
yUswPATdn0BARsODMwuKx8WgX5CdR0EhbIeLhr7sXG6eKoV+9m14M9eMY8eoYd6M
ITcTS+X+9llklt7SwExOy/OWHzrKsQXS2LL0JOw/zYWOTpww0hLyLeOxH2BTd4Js
CC9FIfiJgDKzDNmG3OmJeQzi0KRT9EFSSEFJ6cKWNyAVqV6o8FRXcD1DeOlFhQlk
WNoQPUpr9G2OTRozQDMdoM8K04HGnCiPycN/7HtuwQZllQdebFJLQ61bqDOtNS7I
kZiYIZ5tWIOgeKC/y0Xlp+tfASKOqpvW54Zt8PsTWQmeNIqxbNN+0q3+JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJxJnUG9lqtNYH9s0pj8bSpSHZKaMB8GA1UdIwQY
MBaAFFi/fzrVPymjxD8K2CAXoFNowBBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUt
OGIzZDUyN2M0OWU0LzEvbkVtZFFiMldxMDFnZjJ6U21QeHRLbElka3BvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUtOGIzZDUyN2M0OWU0
LzEvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYsbMA0G
CSqGSIb3DQEBCwUAA4IBAQAdLR1O6ZyzMqx4ukYWH5O8iv6kWAfSkFnG90gfOweG
Yxa+NL+9/hHxImHM80m1xnIhHmxsgfdNnnaqRb+IzmylfY2xzAwdfIl0wAsPqXb9
cWnF+2jRDK6eRCMd7WYBhM8akYPZjJg8X9TZBE+hGmGsjdm/3dzCPWml329Yapbs
3lTFmjwkF4H0pucYAQxaMAX0Xl+wryn3eyR5eO1tQv6WK8iivetyRGP9bh1d/fxk
TC6OgbbIq5zcODhoeH/1psB6YT3TY5xWYBjXArCmw4mPx4D0sIIAEe0S9GZW7PBn
v9nIXOnhwRihYQfE9BorJH4cI4sEpExs/1gRvY5Ltr/3
-----END CERTIFICATE-----
Generated at Wed Nov 8 07:41:23 2023 by rpki-client on console-ams.rpki-client.org