Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/xZ5vA97nCPe_BgJdnrVwlXf6O7A.roa
File: xZ5vA97nCPe_BgJdnrVwlXf6O7A.roa (raw, json)
Hash identifier: 2mgk8LxSvHkesd7AJxCwux7Rftts+qUCW6OpaPPx7w4=
Subject key identifier: C5:9E:6F:03:DE:E7:08:F7:BF:06:02:5D:9E:B5:70:95:77:FA:3B:B0
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 01856FCBA4699F454F5EEDB20DF703C61A5A
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/xZ5vA97nCPe_BgJdnrVwlXf6O7A.roa
Signing time: Mon 02 Jan 2023 00:04:54 +0000
ROA not before: Mon 02 Jan 2023 00:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140641
IP address blocks: 185.100.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:a4:69:9f:45:4f:5e:ed:b2:0d:f7:03:c6:1a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jan 2 00:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c59e6f03dee708f7bf06025d9eb5709577fa3bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:63:08:fb:b3:6d:cf:aa:ea:a2:a9:7c:d1:
bd:6f:f4:d9:d9:8a:b3:e0:0b:4e:73:ae:00:0d:b7:
d7:3d:f6:f4:13:bd:02:79:d0:6e:ae:f8:20:f5:18:
40:ee:3c:c2:72:56:01:3e:e7:01:5c:1e:47:99:49:
30:b1:42:46:17:d3:bf:46:de:0c:f3:16:de:4a:a9:
d5:56:e6:1d:03:f6:b6:6f:0e:16:37:75:c0:c4:30:
12:43:c6:b8:c5:2a:57:c2:3d:c4:cb:e2:89:c3:b0:
40:fc:fe:ea:dd:19:c3:ac:ae:e9:72:09:42:5b:b6:
06:8a:35:2c:91:c1:05:e8:9c:e4:68:7e:f9:f8:1b:
0f:bb:1e:b4:97:16:da:12:9b:a1:db:a5:d7:72:a3:
39:c1:d2:15:a0:23:0d:4a:30:2d:5b:d3:05:ce:cb:
af:03:d8:71:33:ec:c6:41:0a:d5:1e:c8:4d:04:ed:
35:12:16:da:77:53:1d:c6:74:12:b1:fd:85:ea:cb:
f5:24:c7:fe:80:27:1c:f4:21:23:97:71:3b:a5:ab:
f8:6d:50:c6:74:86:d9:ab:a4:c3:f3:b8:31:36:18:
00:d4:89:32:a6:7d:9d:dd:a9:5f:31:76:6a:c2:13:
2f:5f:de:70:ed:c6:f9:28:f8:f2:69:c2:e6:e4:04:
00:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9E:6F:03:DE:E7:08:F7:BF:06:02:5D:9E:B5:70:95:77:FA:3B:B0
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/xZ5vA97nCPe_BgJdnrVwlXf6O7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.212.0/24
Signature Algorithm: sha256WithRSAEncryption
95:79:f4:5d:76:24:3c:1f:c4:f4:a8:df:cf:ed:eb:6b:e4:0a:
ee:94:ba:0a:ad:4e:82:21:c0:25:3c:3f:52:e4:2b:4f:9d:88:
e8:86:e8:e5:50:a5:cd:34:2f:bb:5b:7a:a0:b9:72:73:1e:41:
d9:f8:e4:61:6c:cc:54:c1:6e:21:c6:4a:bf:c5:5c:79:d5:04:
cd:5d:3a:b8:40:09:5b:06:0e:f6:26:a4:c6:53:16:e3:70:59:
9b:93:6e:aa:07:a5:0a:2b:a2:54:f7:4d:73:4c:a8:61:89:c2:
6f:94:13:56:59:6e:74:5f:24:f2:71:70:60:34:a5:c8:62:a5:
cb:e9:f9:61:e4:f0:17:2d:70:9f:7c:82:ae:2b:7a:1a:97:73:
8f:ba:ee:b0:61:52:cd:46:43:e9:48:2a:1e:6c:e6:68:04:10:
3e:50:54:16:59:3a:0a:94:bd:3d:18:a5:ef:11:4e:5a:98:59:
1b:ba:fe:59:af:fa:4e:de:43:2b:06:3a:4b:50:28:2f:60:9d:
12:83:93:0a:c9:b9:a1:33:b8:b0:b7:68:bc:fc:52:cd:23:d3:
e4:ae:57:ae:2f:f6:66:8b:2a:10:ed:d7:d7:c8:77:94:b2:cc:
4c:d9:96:35:7c:d6:26:f5:05:af:1e:a4:ec:57:54:9b:ac:74:
d2:2d:43:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:17 2025 by rpki-client