Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/247EL8kt5mWDz9ckjzhYKv71hQo.roa
File: 247EL8kt5mWDz9ckjzhYKv71hQo.roa (raw, json)
Hash identifier: s2/A5NEy9VW3h9tk2EHt/YH00Qx+oUnIj1ZN3kHlAgA=
Subject key identifier: DB:8E:C4:2F:C9:2D:E6:65:83:CF:D7:24:8F:38:58:2A:FE:F5:85:0A
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCC0883575F340528039EE9F9A47D88
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/247EL8kt5mWDz9ckjzhYKv71hQo.roa
Signing time: Thu 15 Jun 2023 06:44:05 +0000
ROA not before: Thu 15 Jun 2023 06:44:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397423
IP address blocks: 85.237.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cc:08:83:57:5f:34:05:28:03:9e:e9:f9:a4:7d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:44:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db8ec42fc92de66583cfd7248f38582afef5850a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:60:cc:50:2c:fb:f4:60:b7:d1:01:62:b2:28:
1c:22:a7:18:f3:a4:1d:c6:11:59:f8:10:23:cf:b3:
84:cb:d6:23:5c:b1:f8:34:f1:82:7d:7f:e1:7a:18:
9f:8f:30:a5:b4:b4:ce:2e:7b:cc:06:97:e0:c8:09:
18:9c:c4:63:3d:56:80:f3:8f:8e:9c:bc:26:6f:37:
c8:a1:c3:8b:e6:a3:3c:b6:a5:71:24:ad:42:08:e0:
b4:3c:d2:bb:a1:e2:e5:d2:73:5b:ee:63:08:97:63:
b3:9e:4b:b7:05:8b:82:fd:95:db:5a:22:7d:33:e1:
e8:06:86:65:de:d9:b4:10:9b:84:bc:fa:1c:21:bd:
ef:90:e1:14:89:c5:a0:c3:7c:5d:f8:17:da:64:1b:
25:90:10:44:85:06:3c:dd:6a:d6:0d:50:73:7a:5d:
ac:65:da:6a:91:2f:8e:1b:91:42:bc:c4:60:e6:88:
70:c9:ad:98:39:0a:fb:6a:44:eb:02:8a:32:b1:cf:
a0:03:16:9f:9f:6d:19:7b:80:a6:22:d6:7b:8c:91:
f1:15:72:90:00:f2:a4:53:66:48:46:b7:eb:7d:4e:
00:9c:77:be:94:ff:28:21:8a:ac:c2:f3:4a:fa:5c:
a5:8c:24:08:07:21:1f:91:36:4f:04:fc:64:ed:4f:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8E:C4:2F:C9:2D:E6:65:83:CF:D7:24:8F:38:58:2A:FE:F5:85:0A
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/247EL8kt5mWDz9ckjzhYKv71hQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.203.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:bd:e1:ca:5e:97:07:a4:8c:9d:a8:9b:f9:a1:ee:e5:b9:38:
6f:08:22:ad:25:4d:d5:d0:48:98:69:fd:2b:54:61:15:ba:39:
c1:2e:c7:30:b8:e3:d4:05:02:65:43:0e:22:61:21:2f:72:91:
00:2d:d2:ec:8d:76:7f:02:83:24:6d:cc:43:51:63:01:aa:2d:
fb:67:6f:1d:2d:41:0d:3d:ad:84:3c:70:80:ef:26:ed:9c:f3:
a5:5b:e7:91:ab:64:fd:f5:c0:ae:6c:1a:9d:68:5f:cc:27:77:
20:3f:56:3d:21:b5:40:fa:3a:ce:91:5a:76:ea:e1:81:b7:84:
79:f7:e7:ee:f8:15:3a:d0:d2:00:71:2c:1a:73:8e:27:bf:34:
e8:ba:92:b1:4a:16:a8:6c:b7:f7:d7:f8:56:15:a7:71:19:6e:
63:30:d6:a2:0d:2f:00:35:01:33:c7:0b:95:42:d1:cd:c8:7e:
21:e9:40:76:16:25:68:dc:ae:5f:fa:b3:f4:14:bb:36:a9:69:
97:2a:5d:5d:a9:b2:6a:cc:d8:d2:ae:9c:0b:7f:d5:5e:d3:fe:
05:61:fc:9f:b3:c0:e1:bf:85:48:5b:4a:26:cf:ea:5f:1f:0b:
6b:44:d2:6c:8d:ef:38:dc:f9:ee:de:4d:46:e8:e5:13:78:51:
97:2d:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:07:50 2025 by rpki-client