Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/aae9db-e0c9-478e-bb58-24da551c68ab/1/rz6bfKwgQy2yxXWv_H6kFgFz_5M.roa
File: rz6bfKwgQy2yxXWv_H6kFgFz_5M.roa (raw, json)
Hash identifier: +8HYdmhI2SjvBsg0XvwSjhrN8yCzwhLvmbl4nMEPK7s=
Subject key identifier: AF:3E:9B:7C:AC:20:43:2D:B2:C5:75:AF:FC:7E:A4:16:01:73:FF:93
Certificate issuer: /CN=58bdb1bd75727519e400bfe88a75123d6184de14
Certificate serial: 0185734CBE3146211767CCF50C08A2D41EB4
Authority key identifier: 58:BD:B1:BD:75:72:75:19:E4:00:BF:E8:8A:75:12:3D:61:84:DE:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL2xvXVydRnkAL_oinUSPWGE3hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/aae9db-e0c9-478e-bb58-24da551c68ab/1/rz6bfKwgQy2yxXWv_H6kFgFz_5M.roa
Signing time: Mon 02 Jan 2023 16:24:47 +0000
ROA not before: Mon 02 Jan 2023 16:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206801
IP address blocks: 185.170.138.0/24 maxlen: 24
185.170.136.0/22 maxlen: 22
185.170.136.0/23 maxlen: 23
185.170.136.0/24 maxlen: 24
185.170.138.0/23 maxlen: 23
185.170.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:4c:be:31:46:21:17:67:cc:f5:0c:08:a2:d4:1e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bdb1bd75727519e400bfe88a75123d6184de14
Validity
Not Before: Jan 2 16:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af3e9b7cac20432db2c575affc7ea4160173ff93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:fa:9c:14:19:58:16:e4:9a:09:3d:8f:87:
54:56:00:60:3a:82:1d:b5:f9:69:83:62:d2:b5:05:
89:e7:fc:97:5f:e2:6a:3f:c5:28:7a:d9:61:f4:45:
a4:aa:c8:eb:52:d4:82:0a:7f:e3:59:38:89:14:07:
86:b5:54:84:14:91:59:2b:e8:d4:64:90:6d:b0:43:
3a:99:d0:46:55:3b:9c:d4:e3:58:79:1c:27:a4:1f:
b4:ff:4b:98:6f:1a:82:81:9f:fb:39:1c:05:cf:d5:
18:a4:10:35:94:6b:27:c9:a9:e0:ab:fe:b6:76:24:
75:be:f6:aa:a9:81:b6:21:24:da:f7:e8:64:db:14:
55:e1:19:54:54:11:1a:a6:ed:2c:55:10:2f:69:2e:
86:0f:3b:aa:f7:bc:9c:c9:ee:53:f8:3e:ca:f3:00:
4d:75:b8:9d:bc:ab:75:a4:fa:c8:21:0c:7d:80:34:
8f:09:31:0b:d9:7e:b3:2b:25:c0:6e:a7:c2:c6:fa:
fc:ae:4d:a0:18:02:6e:52:83:3f:06:71:ca:94:38:
3d:ff:00:71:49:71:44:41:a4:50:ee:06:0d:80:b9:
e4:cc:a9:f6:a7:45:cc:2f:94:f9:18:32:27:c0:f5:
b0:68:6b:a9:58:1b:42:a3:d7:dd:5d:36:5f:e0:82:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3E:9B:7C:AC:20:43:2D:B2:C5:75:AF:FC:7E:A4:16:01:73:FF:93
X509v3 Authority Key Identifier:
keyid:58:BD:B1:BD:75:72:75:19:E4:00:BF:E8:8A:75:12:3D:61:84:DE:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL2xvXVydRnkAL_oinUSPWGE3hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/aae9db-e0c9-478e-bb58-24da551c68ab/1/rz6bfKwgQy2yxXWv_H6kFgFz_5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/aae9db-e0c9-478e-bb58-24da551c68ab/1/WL2xvXVydRnkAL_oinUSPWGE3hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.136.0/22
Signature Algorithm: sha256WithRSAEncryption
10:02:91:63:b4:2d:fd:76:25:cc:c0:26:ae:ac:20:52:1a:e8:
3a:4a:d7:55:0a:43:46:8f:ba:8d:38:db:84:c1:1b:50:d9:8d:
60:fe:92:5f:86:49:50:a7:8d:96:d2:64:99:a4:a3:fb:40:9e:
7c:2c:12:0d:4a:f2:a8:1b:bc:2a:a3:b4:7f:3b:02:10:39:29:
60:9a:f8:52:16:09:ef:6d:d1:6e:b3:99:42:c4:65:11:bd:af:
f4:68:07:b9:18:8e:21:72:1b:13:38:49:bc:1c:91:17:e3:b3:
89:59:e7:a9:4a:75:9d:d9:5e:f9:f0:7a:51:f0:b0:35:c8:b9:
00:d3:e8:0e:3a:7f:93:6b:2d:3a:d9:b2:21:fa:d2:f6:81:cd:
22:e4:da:9b:28:e3:8f:82:49:ca:3e:fe:e3:19:28:30:0e:9a:
0a:3b:b2:b9:09:98:95:08:ac:42:cd:0e:3a:ad:0a:cf:48:a3:
39:54:f5:51:49:e3:11:c5:02:7c:dc:a3:25:a3:b5:91:dd:44:
9d:61:da:b4:80:31:84:d5:61:08:8d:b4:43:d0:3c:c4:19:aa:
8f:11:1b:ff:40:84:01:e5:ab:d9:2b:83:a3:bb:22:35:d8:09:
84:55:0b:41:3b:2b:5e:65:b7:66:a6:74:80:2a:76:5c:a1:04:
20:a8:5b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:27:31 2025 by rpki-client