Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/RXBfmQqJoOiDHkmOFczXoqwyzGw.roa
File: RXBfmQqJoOiDHkmOFczXoqwyzGw.roa (raw, json)
Hash identifier: h+lpL64z7DbIsBt6uLVvn0mYN83L9NRv0CUzmWrA6TU=
Subject key identifier: 45:70:5F:99:0A:89:A0:E8:83:1E:49:8E:15:CC:D7:A2:AC:32:CC:6C
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018796A8DDBBC68E5E7102C39ABA68610E69
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/RXBfmQqJoOiDHkmOFczXoqwyzGw.roa
Signing time: Tue 18 Apr 2023 23:17:41 +0000
ROA not before: Tue 18 Apr 2023 23:17:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.100.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:96:a8:dd:bb:c6:8e:5e:71:02:c3:9a:ba:68:61:0e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Apr 18 23:17:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45705f990a89a0e8831e498e15ccd7a2ac32cc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:3a:ea:a2:01:3e:cd:40:f7:8b:ef:a1:5e:
7a:74:72:67:e5:ec:c2:f9:41:e1:54:f6:e0:d0:a7:
f8:82:9e:6b:c9:72:1f:08:96:b6:c8:60:d0:90:3c:
0f:fc:14:9f:62:c4:25:17:80:e1:2b:e1:24:16:ad:
64:4c:e3:3e:ec:b1:ee:2e:4c:b2:0d:29:82:84:14:
cd:16:7e:f1:86:fe:ac:b3:7e:52:6b:f9:5b:09:57:
c7:c0:9f:6d:e7:ad:f0:57:bc:0c:bc:c9:5f:e0:2d:
06:50:77:c3:82:a1:4b:f2:03:a1:11:43:9b:f8:e6:
48:81:33:f4:ec:2d:93:d4:24:6c:d1:ad:af:a4:37:
c9:e2:31:0d:e5:2f:15:e8:34:82:25:38:99:41:0f:
26:cb:63:ec:6d:62:89:15:2e:a1:bf:58:ad:aa:f0:
26:42:e7:0f:3a:6a:00:67:46:5a:6f:90:24:9f:89:
78:75:6b:7f:bf:85:99:a0:3b:b1:03:36:1f:92:8c:
e9:87:5e:f5:bd:42:67:3d:75:a4:72:83:c1:60:76:
bd:47:ec:b2:e4:52:80:18:69:52:a0:ea:c8:a3:3d:
e4:86:8b:f4:b3:a8:b4:9c:c0:88:58:1c:57:9f:5d:
3c:17:ed:af:58:28:80:48:ea:27:ce:8d:50:78:08:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:70:5F:99:0A:89:A0:E8:83:1E:49:8E:15:CC:D7:A2:AC:32:CC:6C
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/RXBfmQqJoOiDHkmOFczXoqwyzGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.214.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f1:33:47:e4:c7:3d:8c:1c:33:e6:aa:b3:d7:22:ff:67:ba:
cf:20:11:71:90:fc:d4:cf:17:76:77:33:9b:82:31:de:79:7e:
cb:1b:b7:e4:cd:e3:a6:ea:d1:74:c5:99:b4:a7:73:a1:02:21:
d6:74:c8:e8:a2:f1:51:98:86:7b:d5:f0:ff:1f:7c:6c:61:70:
b9:a7:2e:07:08:57:2d:24:04:c9:2b:c9:53:48:17:77:3c:80:
a8:92:ff:30:bf:78:01:c4:76:68:ed:79:2d:27:f8:d8:59:47:
76:ac:53:f3:7d:a3:46:bb:95:86:02:4a:31:62:1f:7b:bb:23:
d5:c4:72:65:e7:1b:b8:e8:73:7a:e4:18:30:93:bc:f7:5f:19:
92:bb:9d:79:84:31:28:b3:bf:14:c7:e5:c9:8f:20:d2:8a:a0:
8e:c4:a9:27:32:73:42:e1:4b:77:8f:73:76:8d:6c:9e:9e:af:
7c:86:29:d9:ad:5f:e3:35:85:0d:01:56:ff:34:3a:29:b5:cf:
08:ca:b9:b6:aa:ce:01:1e:b9:18:b9:49:42:ac:19:c6:5b:21:
f3:cd:17:fa:24:b2:48:06:f8:8b:2d:07:9e:c9:4e:b8:0f:5f:
94:0c:10:7f:fa:fd:2a:c6:a3:9b:e9:32:ed:1a:96:d7:4c:a9:
f0:e0:24:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeWqN27xo5ecQLDmrpoYQ5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YmY3ZjNhZDUzZjI5YTNjNDNmMGFkODIwMTdhMDUzNjhj
MDEwNGEwHhcNMjMwNDE4MjMxNzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTcwNWY5OTBhODlhMGU4ODMxZTQ5OGUxNWNjZDdhMmFjMzJjYzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGA66qIBPs1A94vvoV56dHJn5ezC
+UHhVPbg0Kf4gp5ryXIfCJa2yGDQkDwP/BSfYsQlF4DhK+EkFq1kTOM+7LHuLkyy
DSmChBTNFn7xhv6ss35Sa/lbCVfHwJ9t563wV7wMvMlf4C0GUHfDgqFL8gOhEUOb
+OZIgTP07C2T1CRs0a2vpDfJ4jEN5S8V6DSCJTiZQQ8my2PsbWKJFS6hv1itqvAm
QucPOmoAZ0Zab5Akn4l4dWt/v4WZoDuxAzYfkozph171vUJnPXWkcoPBYHa9R+yy
5FKAGGlSoOrIoz3khov0s6i0nMCIWBxXn108F+2vWCiASOonzo1QeAgmlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEVwX5kKiaDogx5JjhXM16KsMsxsMB8GA1UdIwQY
MBaAFFi/fzrVPymjxD8K2CAXoFNowBBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUt
OGIzZDUyN2M0OWU0LzEvUlhCZm1RcUpvT2lESGttT0ZjelhvcXd5ekd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUtOGIzZDUyN2M0OWU0
LzEvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWTWMA0G
CSqGSIb3DQEBCwUAA4IBAQAo8TNH5Mc9jBwz5qqz1yL/Z7rPIBFxkPzUzxd2dzOb
gjHeeX7LG7fkzeOm6tF0xZm0p3OhAiHWdMjoovFRmIZ71fD/H3xsYXC5py4HCFct
JATJK8lTSBd3PICokv8wv3gBxHZo7XktJ/jYWUd2rFPzfaNGu5WGAkoxYh97uyPV
xHJl5xu46HN65Bgwk7z3XxmSu515hDEos78Ux+XJjyDSiqCOxKknMnNC4Ut3j3N2
jWyenq98hinZrV/jNYUNAVb/NDoptc8Iyrm2qs4BHrkYuUlCrBnGWyHzzRf6JLJI
BviLLQeeyU64D1+UDBB/+v0qxqOb6TLtGpbXTKnw4CRR
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:46:18 2025 by rpki-client