Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/AqPNy1SWEgjXpuEuVWWrE7l52SU.roa
File: AqPNy1SWEgjXpuEuVWWrE7l52SU.roa (raw, json)
Hash identifier: nTTiJxo5e4hmoFwPR8LX3k3KQ3VCBmOOW6xckd7HHNo=
Subject key identifier: 02:A3:CD:CB:54:96:12:08:D7:A6:E1:2E:55:65:AB:13:B9:79:D9:25
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018AD963223845D15C527BD8BCFE27458AF3
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/AqPNy1SWEgjXpuEuVWWrE7l52SU.roa
Signing time: Thu 28 Sep 2023 01:24:27 +0000
ROA not before: Thu 28 Sep 2023 01:24:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 85.237.200.0/24 maxlen: 24
85.158.56.0/24 maxlen: 24
85.237.213.0/24 maxlen: 24
185.89.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d9:63:22:38:45:d1:5c:52:7b:d8:bc:fe:27:45:8a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Sep 28 01:24:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02a3cdcb54961208d7a6e12e5565ab13b979d925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:d6:9f:0e:b2:a6:19:87:60:e7:30:f6:46:
a0:33:d1:65:ff:40:8e:b2:fd:e4:0a:97:a5:0b:18:
70:4b:14:b2:19:63:2b:b5:fb:42:76:79:44:cc:7d:
95:dc:b5:f8:2b:bc:d2:fa:85:6a:a8:59:28:9e:83:
86:2a:fc:3a:eb:3f:11:67:a1:e0:a3:39:a0:37:a4:
7f:6f:a4:2d:93:a4:aa:2f:60:a8:fe:a3:e7:d1:7d:
a0:4e:fb:13:3f:5a:88:d3:5d:38:0f:30:01:16:43:
df:e9:23:e4:ce:70:0f:79:50:81:1a:cc:70:11:cd:
a2:69:60:ba:2f:da:67:fe:48:92:8a:77:f4:12:31:
5f:0e:62:6d:bd:7d:37:bb:47:8c:6b:61:6b:ae:d6:
e8:f9:65:9d:5b:de:d7:92:06:63:c4:12:60:fe:28:
4a:e0:70:69:68:3b:eb:6c:ec:fd:c3:d1:b1:35:33:
aa:83:76:11:8d:ad:50:3b:f1:ae:9d:4f:9b:c2:84:
6b:18:2f:73:99:f4:82:e0:b6:7a:42:52:f4:4d:e1:
be:cf:23:21:39:6e:34:13:ec:ff:de:56:73:c5:ca:
e9:91:77:3b:69:91:f4:3d:63:5b:f2:25:0b:3d:d8:
98:84:4c:c0:b0:8c:28:c4:1f:2f:a9:69:59:b9:2a:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A3:CD:CB:54:96:12:08:D7:A6:E1:2E:55:65:AB:13:B9:79:D9:25
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/AqPNy1SWEgjXpuEuVWWrE7l52SU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.56.0/24
85.237.200.0/24
85.237.213.0/24
185.89.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:7f:fa:da:04:6b:49:ba:5b:c2:fe:16:e4:33:63:93:0b:17:
a3:3d:0f:15:16:30:79:55:11:55:e9:cf:70:58:01:94:48:bf:
ad:3b:f5:7a:de:0c:d9:32:b9:cd:fa:54:52:aa:7d:88:76:a0:
64:c0:00:bd:78:f2:fe:10:60:1f:11:ad:85:ab:b7:e6:3e:72:
cc:9f:8e:21:a3:63:3c:fb:b1:2d:ba:ea:e9:eb:63:08:5f:eb:
73:40:81:8d:03:81:d2:fe:32:f6:80:5f:ea:4e:37:89:fc:40:
57:9d:ae:0c:5a:9d:b0:2a:06:8b:22:46:d0:f8:f7:62:cc:ce:
dc:55:56:91:b4:cf:20:87:ce:5d:07:b4:47:87:f9:ad:37:0d:
aa:0e:c3:d6:95:4f:24:c4:c9:e6:69:13:6f:1e:35:76:4c:f5:
70:c0:b7:64:ef:b1:a2:13:a8:9e:67:bb:5e:98:37:49:19:5f:
ed:fc:5a:76:50:06:18:15:ff:bf:d0:ed:ef:d2:ce:80:9d:19:
16:62:90:92:35:58:0e:4d:a6:f1:b6:f1:3c:1c:96:b5:38:df:
c3:3f:05:d5:4d:12:d3:3a:08:60:e5:09:40:e1:bd:0b:d6:70:
f3:4d:f0:49:dc:2a:72:db:04:bb:e1:f6:1a:2f:92:b8:0f:7b:
3a:9b:2f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:31:38 2025 by rpki-client