Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/PmMri-DT5G66R3yXQRwAMSRvFeA.roa
File: PmMri-DT5G66R3yXQRwAMSRvFeA.roa (raw, json)
Hash identifier: g8XdELxeQbLfR5xQRVjw6PqvjOCCnJH4e9rwMKMN90Y=
Subject key identifier: 3E:63:2B:8B:E0:D3:E4:6E:BA:47:7C:97:41:1C:00:31:24:6F:15:E0
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B6EB1502D139D228E8E60624E2638EC9E
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/PmMri-DT5G66R3yXQRwAMSRvFeA.roa
Signing time: Fri 27 Oct 2023 01:13:15 +0000
ROA not before: Fri 27 Oct 2023 01:13:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200088
IP address blocks: 85.237.199.0/24 maxlen: 24
85.237.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6e:b1:50:2d:13:9d:22:8e:8e:60:62:4e:26:38:ec:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Oct 27 01:13:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e632b8be0d3e46eba477c97411c0031246f15e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:16:f4:67:f3:51:ff:ea:81:e0:1f:ee:41:
b8:8d:83:9a:4b:1c:f6:9f:65:46:7d:76:00:47:cb:
91:a9:93:a8:ec:68:cf:75:04:c8:e5:67:cb:34:12:
5f:29:42:60:65:fe:16:ce:fe:29:65:16:98:0f:fc:
39:a5:ea:51:dc:c7:2b:ff:8e:5b:d4:66:05:63:38:
d3:0a:97:92:60:4e:0c:95:30:e2:f1:62:cf:e5:22:
24:1b:66:a5:fa:44:10:09:92:19:de:68:0a:aa:65:
68:b2:dd:51:c9:f2:09:db:e3:35:ca:c4:85:a0:f2:
c2:fb:9c:7c:b9:42:71:10:0d:25:27:5e:29:b3:61:
a9:81:cd:82:f9:97:b9:b2:13:97:32:58:10:da:6d:
89:24:35:c5:38:eb:fd:6c:32:2b:4f:ce:fc:3d:e5:
50:9e:fe:a4:0c:3d:fc:2e:af:66:a0:8c:2e:1f:f2:
93:1a:27:e6:60:44:49:f0:0d:55:1c:2f:c4:40:c3:
32:9e:f1:6c:e8:da:b5:09:47:ea:ef:34:ec:95:8a:
9e:8e:df:4b:89:7a:6b:24:8c:98:ab:9e:df:ee:05:
57:25:bb:ce:ce:82:e1:04:dd:16:4a:73:3f:63:5f:
d8:41:cd:6b:dc:94:47:4c:01:8c:7a:e7:29:8e:21:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:63:2B:8B:E0:D3:E4:6E:BA:47:7C:97:41:1C:00:31:24:6F:15:E0
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/PmMri-DT5G66R3yXQRwAMSRvFeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.198.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:77:79:82:d1:2d:09:22:a9:42:32:30:28:51:2e:45:8d:af:
d0:22:62:8b:94:05:9f:15:9c:78:01:3c:29:11:28:60:f8:3e:
cb:43:68:25:fb:8a:d9:ae:9d:0a:0c:74:fc:ad:46:61:cc:3a:
e8:f5:0b:52:38:2b:07:87:2f:e4:46:cc:d2:c6:cf:0f:81:de:
44:45:e8:4c:e5:60:57:3b:fb:92:b3:08:25:3b:fe:45:0b:37:
e9:6b:7e:54:44:f2:40:82:94:6f:e1:a1:4d:ff:12:7a:23:8b:
5c:5c:8c:3f:e2:c0:34:a2:38:2b:2f:d6:62:83:38:c6:75:9d:
60:08:ae:34:07:d5:b8:2b:8a:8f:41:20:cb:69:f9:19:6a:f6:
29:7d:5a:b7:a1:32:d5:e2:84:73:1c:b4:ac:50:67:bd:f5:fb:
d6:ec:21:4b:73:1d:f9:74:5d:30:c9:8e:10:6d:b4:66:18:48:
26:61:af:95:04:c3:a8:57:37:d2:94:72:e6:73:dc:68:73:c7:
82:73:26:36:07:2e:76:c9:b1:0c:0b:de:1f:b7:ea:89:a6:2c:
01:3e:0c:04:1b:60:34:ab:1a:82:98:00:0f:11:80:4f:98:19:
23:38:b6:13:f8:4a:97:30:8f:57:09:7c:0f:5f:5b:f4:08:94:
02:81:03:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtusVAtE50ijo5gYk4mOOyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YmY3ZjNhZDUzZjI5YTNjNDNmMGFkODIwMTdhMDUzNjhj
MDEwNGEwHhcNMjMxMDI3MDExMzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTYzMmI4YmUwZDNlNDZlYmE0NzdjOTc0MTFjMDAzMTI0NmYxNWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU0W9GfzUf/qgeAf7kG4jYOaSxz2
n2VGfXYAR8uRqZOo7GjPdQTI5WfLNBJfKUJgZf4Wzv4pZRaYD/w5pepR3Mcr/45b
1GYFYzjTCpeSYE4MlTDi8WLP5SIkG2al+kQQCZIZ3mgKqmVost1RyfIJ2+M1ysSF
oPLC+5x8uUJxEA0lJ14ps2Gpgc2C+Ze5shOXMlgQ2m2JJDXFOOv9bDIrT878PeVQ
nv6kDD38Lq9moIwuH/KTGifmYERJ8A1VHC/EQMMynvFs6Nq1CUfq7zTslYqejt9L
iXprJIyYq57f7gVXJbvOzoLhBN0WSnM/Y1/YQc1r3JRHTAGMeucpjiGrfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD5jK4vg0+Ruukd8l0EcADEkbxXgMB8GA1UdIwQY
MBaAFFi/fzrVPymjxD8K2CAXoFNowBBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUt
OGIzZDUyN2M0OWU0LzEvUG1NcmktRFQ1RzY2UjN5WFFSd0FNU1J2RmVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUtOGIzZDUyN2M0OWU0
LzEvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVe3GMA0G
CSqGSIb3DQEBCwUAA4IBAQArd3mC0S0JIqlCMjAoUS5Fja/QImKLlAWfFZx4ATwp
EShg+D7LQ2gl+4rZrp0KDHT8rUZhzDro9QtSOCsHhy/kRszSxs8Pgd5ERehM5WBX
O/uSswglO/5FCzfpa35URPJAgpRv4aFN/xJ6I4tcXIw/4sA0ojgrL9ZigzjGdZ1g
CK40B9W4K4qPQSDLafkZavYpfVq3oTLV4oRzHLSsUGe99fvW7CFLcx35dF0wyY4Q
bbRmGEgmYa+VBMOoVzfSlHLmc9xoc8eCcyY2By52ybEMC94ft+qJpiwBPgwEG2A0
qxqCmAAPEYBPmBkjOLYT+EqXMI9XCXwPX1v0CJQCgQMl
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:53:05 2025 by rpki-client