Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/osk6BjViFp4dnx2Cs-ssjumVTZ0.roa
File: osk6BjViFp4dnx2Cs-ssjumVTZ0.roa (raw, json)
Hash identifier: /AMthoXpGIuE88TGEjNfF9wE/Dq2uFOElu/T9hbmey8=
Subject key identifier: A2:C9:3A:06:35:62:16:9E:1D:9F:1D:82:B3:EB:2C:8E:E9:95:4D:9D
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018960B6AB4AD7943B29757670E694CC6D36
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/osk6BjViFp4dnx2Cs-ssjumVTZ0.roa
Signing time: Sun 16 Jul 2023 21:58:51 +0000
ROA not before: Sun 16 Jul 2023 21:58:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.197.0/24 maxlen: 24
193.109.198.0/24 maxlen: 24
85.237.206.0/24 maxlen: 24
85.237.206.0/23 maxlen: 23
85.158.57.0/24 maxlen: 24
85.237.220.0/23 maxlen: 23
85.237.220.0/24 maxlen: 24
85.237.221.0/24 maxlen: 24
85.237.222.0/24 maxlen: 24
85.237.223.0/24 maxlen: 24
185.93.33.0/24 maxlen: 24
185.139.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:60:b6:ab:4a:d7:94:3b:29:75:76:70:e6:94:cc:6d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jul 16 21:58:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2c93a063562169e1d9f1d82b3eb2c8ee9954d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:7b:fb:78:66:50:d8:08:18:ac:3d:06:bc:
6f:e1:e5:95:cb:c1:14:83:9e:73:73:61:16:d7:49:
23:45:01:dc:7d:5e:58:68:35:f6:0c:c7:4a:9e:b7:
70:5e:27:8e:c0:1b:c0:34:3f:91:5e:b3:13:31:a8:
ad:c0:f7:2a:d0:51:60:e6:bf:00:4d:01:58:8b:d0:
65:68:2e:76:32:1b:7c:f3:e8:4c:03:ad:06:15:b7:
3c:68:09:4f:88:f0:4d:a7:a0:6b:7f:24:d1:15:f8:
7d:84:28:61:db:00:e7:0b:e6:f4:54:1c:f8:4d:0f:
3f:a5:64:33:df:95:e6:fb:1d:e2:12:2f:5e:17:c7:
bc:1c:84:af:2f:95:2a:77:d8:f9:fb:8c:25:34:f2:
84:7a:a6:4d:0f:e8:88:c9:86:b3:20:61:c2:6b:e9:
77:ce:dd:a8:e8:11:21:7a:7a:3d:d0:57:61:95:75:
d6:1e:18:6a:0c:4f:82:e5:87:2e:4d:32:cc:dd:ae:
fd:15:69:73:ca:ad:c0:54:48:57:9f:31:d7:fd:3e:
39:82:5d:92:33:21:ff:c4:3a:4c:e7:c9:95:e8:42:
7b:5e:94:ed:f4:c3:e6:90:31:23:26:5e:76:ad:11:
ca:b9:c2:2c:8e:65:93:20:7d:8b:98:3b:bc:f4:ce:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C9:3A:06:35:62:16:9E:1D:9F:1D:82:B3:EB:2C:8E:E9:95:4D:9D
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/osk6BjViFp4dnx2Cs-ssjumVTZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0/24
85.237.206.0/23
85.237.220.0/22
185.93.33.0/24
185.139.26.0/24
193.109.197.0-193.109.198.255
Signature Algorithm: sha256WithRSAEncryption
a9:09:13:df:5c:57:d8:88:6c:89:42:70:ec:bd:bc:db:9a:e1:
22:58:d5:6f:3a:d9:71:68:0b:6d:e3:61:5d:5c:da:10:43:ad:
44:2b:d4:44:3f:a1:be:bc:9d:98:9e:5b:81:a9:a8:b9:21:84:
99:d8:d2:12:ae:b9:48:e8:6f:13:75:f7:a3:df:81:e9:14:4b:
d6:6c:5a:0d:eb:a3:c8:4d:c2:f7:e5:70:03:94:c0:95:12:6f:
2a:e1:23:ff:48:f3:15:1e:57:0f:dc:a8:0f:e8:9e:95:9b:5c:
da:7b:e5:50:a7:9e:d2:ed:92:b7:fb:26:42:c0:62:6d:18:df:
79:25:db:47:97:dd:9e:c0:9a:36:91:66:e5:71:33:e9:6a:9e:
c7:12:a5:96:6b:2b:13:29:62:09:db:a2:ec:65:3f:62:8b:9f:
70:0a:9a:4c:78:45:f2:96:4b:4f:bd:77:43:48:33:0d:2d:bb:
b2:82:4c:e4:de:b9:8a:06:60:1e:49:85:b4:7c:7d:a7:88:9a:
91:73:0d:ae:e9:01:35:99:7f:95:bf:e4:1a:ec:db:ab:0c:ea:
bb:25:5d:03:74:94:a0:eb:e5:c7:25:a1:44:eb:70:06:c5:b4:
12:50:2d:cb:46:53:13:19:8f:bf:98:1b:8d:b6:8c:24:29:3c:
6b:7b:4e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 22:20:22 2025 by rpki-client