Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/xrVeG41ji8nYWux3NHVbwHHL6gA.roa
File: xrVeG41ji8nYWux3NHVbwHHL6gA.roa (raw, json)
Hash identifier: Zn0/w/JqB3qiD7afw6Mf0TeYStR3IfO/tgf49pz518o=
Subject key identifier: C6:B5:5E:1B:8D:63:8B:C9:D8:5A:EC:77:34:75:5B:C0:71:CB:EA:00
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 01856FCBA554246A78B95F349AF2D7091A09
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/xrVeG41ji8nYWux3NHVbwHHL6gA.roa
Signing time: Mon 02 Jan 2023 00:04:55 +0000
ROA not before: Mon 02 Jan 2023 00:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 185.100.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:a5:54:24:6a:78:b9:5f:34:9a:f2:d7:09:1a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jan 2 00:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6b55e1b8d638bc9d85aec7734755bc071cbea00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:f2:63:c7:60:37:7a:5c:ab:95:e5:b7:a4:
ae:66:82:f4:e7:00:91:be:f9:8d:8f:59:95:2a:45:
90:37:04:33:8e:32:06:89:92:be:c1:12:07:be:fb:
98:ac:82:ce:c5:1b:0c:0e:94:7b:02:f4:ae:55:5b:
45:0b:19:67:ff:c2:02:cf:95:02:f6:31:cd:48:78:
ad:43:2d:af:23:c5:c7:2f:94:fa:9e:71:41:d5:06:
2f:65:be:4b:87:32:96:00:76:87:3a:4b:2f:ac:a4:
35:90:22:52:8d:82:ba:33:1b:e9:4a:57:63:b0:2f:
52:74:e7:a0:db:ae:55:70:4e:3b:e9:21:52:89:bb:
f8:0e:a7:30:19:8e:c2:f8:74:1a:97:1c:e9:34:f1:
04:40:f9:90:70:67:83:38:43:ef:41:16:f0:69:3b:
71:e0:a1:49:fc:ce:ab:87:62:cf:00:27:bc:fc:6a:
8c:1e:ce:17:8b:f5:34:1a:25:31:8e:75:67:9a:8c:
0d:fa:ff:c0:6d:51:21:f1:e5:fd:df:cd:3b:ba:90:
3b:45:19:11:2e:a2:26:f3:b6:c3:4c:7e:08:0d:75:
47:f5:a5:67:24:a1:ed:1c:8b:78:03:14:21:39:6f:
66:31:d1:ec:c6:42:ab:0f:0c:f1:df:53:66:a7:e8:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B5:5E:1B:8D:63:8B:C9:D8:5A:EC:77:34:75:5B:C0:71:CB:EA:00
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/xrVeG41ji8nYWux3NHVbwHHL6gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.213.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ea:ca:d6:e6:92:03:7d:de:db:11:90:e7:d6:a0:1c:94:b3:
55:b7:b5:1f:1c:12:cd:aa:a1:b6:d6:f0:dc:c5:38:ab:8e:72:
36:c7:b6:ac:9d:9b:1c:dc:f1:4d:aa:e2:3e:fa:46:4d:ad:c0:
9d:5b:b2:c2:87:f6:c5:96:08:25:49:14:38:ab:04:32:c0:27:
5e:18:7b:df:f2:e5:cf:d8:77:3b:d0:8a:d8:14:27:c0:46:90:
20:e3:e1:bc:73:99:2e:ee:de:45:9e:8d:16:4c:9d:f2:7b:de:
47:3b:98:cc:d9:62:ce:5c:06:64:9b:0c:a0:04:3a:13:d8:c1:
b2:f8:c6:9b:39:28:ea:d3:1f:a9:9c:1e:de:07:4f:f1:c0:69:
07:40:00:c7:82:25:8c:e8:c1:ec:bc:e7:9c:0f:3b:70:8d:15:
72:1c:a4:a6:d8:3d:e4:e0:b8:7f:d4:3c:88:48:24:d7:01:04:
01:fc:8c:b0:5e:c4:82:26:a5:67:75:61:15:45:54:76:ec:a2:
fe:94:56:ec:cc:2a:c4:17:36:4e:86:bc:bf:1d:2d:8f:6c:8f:
06:36:82:05:c8:72:e4:09:a1:c7:1a:ae:8c:be:d9:5e:d1:e5:
df:22:09:f3:a3:d2:71:43:d9:94:05:79:3e:0b:c9:3b:32:c5:
47:45:23:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:14 2024 by rpki-client on console-ams.rpki-client.org