Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/wpNmUwG63D8QbkqxpPXvOX61S8E.roa
File: wpNmUwG63D8QbkqxpPXvOX61S8E.roa (raw, json)
Hash identifier: hSJd6S+31NClHFO1rNbU59/tzdQZg02UCz7iNA6q/RA=
Subject key identifier: C2:93:66:53:01:BA:DC:3F:10:6E:4A:B1:A4:F5:EF:39:7E:B5:4B:C1
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B33FC9FFD91C12511C9D87CED2B3AB0C0
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/wpNmUwG63D8QbkqxpPXvOX61S8E.roa
Signing time: Sun 15 Oct 2023 15:37:55 +0000
ROA not before: Sun 15 Oct 2023 15:37:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.158.58.0/23 maxlen: 23
85.158.58.0/24 maxlen: 24
85.237.208.0/23 maxlen: 23
85.237.209.0/24 maxlen: 24
85.237.220.0/23 maxlen: 23
185.93.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:33:fc:9f:fd:91:c1:25:11:c9:d8:7c:ed:2b:3a:b0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Oct 15 15:37:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c293665301badc3f106e4ab1a4f5ef397eb54bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c2:d6:86:2b:f6:34:fa:e9:5c:c1:6d:0d:87:
fb:ef:26:f3:93:26:49:a6:bf:d2:80:5c:18:39:6c:
bb:6b:4f:09:ce:5a:22:b7:28:f7:62:bb:80:65:b5:
e5:0a:e0:b6:c5:af:0b:e8:1e:45:94:88:22:ee:86:
96:7f:ac:1d:06:49:fa:c0:ba:52:22:84:2d:af:dd:
29:d0:a0:09:1b:36:1e:8b:88:aa:93:49:5e:99:d5:
2c:48:39:ff:c0:ef:be:44:db:6b:3d:9b:81:95:d9:
8a:8d:80:28:07:b7:a9:33:50:45:84:ac:d0:00:a8:
16:da:d7:87:78:12:cb:f1:f2:90:62:4d:b0:3d:c3:
9c:e7:a8:75:c5:52:cd:ba:e5:39:71:2b:9c:01:f7:
54:aa:6d:1d:98:47:06:7b:dd:6e:3b:6c:69:38:49:
58:55:fa:aa:a0:65:2c:f0:93:72:ab:ec:9d:1d:41:
3b:2b:52:71:85:fc:03:a0:47:b0:0d:32:0f:74:ef:
e4:4e:54:7e:31:18:81:61:44:e4:72:f5:08:d3:3a:
64:16:5f:f8:1e:ac:a0:f2:2c:e0:3d:fd:c7:87:8f:
09:4a:0a:68:a5:48:72:32:76:ce:ad:19:ae:f7:51:
ab:84:cf:11:c1:da:9b:79:0c:87:33:43:62:9f:d6:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:93:66:53:01:BA:DC:3F:10:6E:4A:B1:A4:F5:EF:39:7E:B5:4B:C1
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/wpNmUwG63D8QbkqxpPXvOX61S8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.58.0/23
85.237.208.0/23
85.237.220.0/23
185.93.32.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:4d:5b:1a:bc:4c:16:60:43:12:f2:f5:2e:e9:8f:ba:f0:11:
ce:e5:41:cc:1f:0f:51:a4:03:88:01:90:e3:64:29:d8:ef:67:
7f:5b:8d:be:b4:4f:c4:36:66:2f:52:2d:21:bf:52:59:0a:17:
a3:09:20:da:da:c8:01:73:da:12:17:cb:c4:7a:3e:61:33:dd:
0e:a8:f3:80:01:15:c1:54:f1:31:54:a5:a0:40:cd:1d:e2:aa:
2c:fd:9f:ed:a8:c1:e3:ff:4e:b6:25:f5:28:24:10:c1:1f:b2:
0f:75:3d:64:74:fd:e2:36:15:91:2a:26:35:97:1b:1b:c0:39:
0e:e5:8b:4e:ec:0a:d7:8b:1b:f9:9e:b0:6c:fb:c7:98:fb:c2:
33:60:bf:92:d3:15:23:78:5e:86:1c:9a:9a:73:54:23:e8:12:
85:d3:f1:07:a5:15:89:71:b9:8d:90:25:bc:b9:ec:a3:72:32:
31:46:48:df:4f:45:13:72:66:25:b7:3d:75:d1:b7:2e:fc:53:
3e:4e:35:77:7c:10:06:40:57:66:13:7e:b9:c7:50:c8:25:4c:
4a:a2:c5:a3:36:4f:b8:27:a4:3a:71:84:88:1c:28:ce:61:c9:
d8:fd:27:34:33:29:82:09:a9:56:f1:41:a0:61:c4:89:d3:0e:
cb:32:27:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:06 2025 by rpki-client