Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Ux8sE1D7j_EXaS4PYEmrRJ8IYoM.roa
File: Ux8sE1D7j_EXaS4PYEmrRJ8IYoM.roa (raw, json)
Hash identifier: Wkk9Cq+Y+eF/EXrmeC90S2Iikp/eC7n/my7kTAuF0N8=
Subject key identifier: 53:1F:2C:13:50:FB:8F:F1:17:69:2E:0F:60:49:AB:44:9F:08:62:83
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018AF820F430D2585B1A0D8F8F6B6EF4AF74
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Ux8sE1D7j_EXaS4PYEmrRJ8IYoM.roa
Signing time: Wed 04 Oct 2023 00:40:23 +0000
ROA not before: Wed 04 Oct 2023 00:40:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 185.100.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f8:20:f4:30:d2:58:5b:1a:0d:8f:8f:6b:6e:f4:af:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Oct 4 00:40:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=531f2c1350fb8ff117692e0f6049ab449f086283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a1:98:bb:fe:94:a9:ac:4f:b8:0d:50:3f:fe:
6a:cb:e1:bf:d1:84:9f:7e:b1:e9:ba:a3:12:a8:8f:
97:db:2c:31:00:65:39:c2:00:dd:07:6a:8a:8e:91:
5a:ee:19:0a:93:5d:ba:14:83:3a:4d:e3:65:9d:ce:
8c:37:0c:58:f0:46:9b:ee:1a:66:ea:29:9c:fa:80:
77:67:17:f9:0a:2e:78:96:e6:c2:33:4f:e4:08:16:
5b:35:7b:e3:2f:b8:3b:fe:e5:2b:3d:e8:d9:6b:46:
3e:5a:61:c6:3c:76:c3:06:83:e2:7e:7e:ea:a2:a1:
2d:91:40:1f:d8:35:43:4a:ad:c2:60:c5:f9:ac:88:
c6:31:c6:49:13:dd:37:d3:29:27:65:65:a6:d5:22:
f1:c7:e1:59:9b:a7:38:fd:98:f5:f5:9c:e1:08:78:
de:01:aa:f8:14:ef:56:40:01:d1:9a:79:1f:b8:36:
85:bb:0c:e0:5b:2a:dd:f4:f5:44:9c:9a:32:70:71:
3b:d4:84:31:63:cc:0a:2f:ef:89:02:14:3a:9c:60:
14:10:e4:89:19:99:2f:a5:95:cb:5f:f9:9e:8b:2b:
77:9e:70:73:ff:68:c3:12:93:94:e1:54:29:db:96:
a9:e2:f0:5b:de:d6:e9:46:4e:7e:12:5d:57:01:28:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1F:2C:13:50:FB:8F:F1:17:69:2E:0F:60:49:AB:44:9F:08:62:83
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Ux8sE1D7j_EXaS4PYEmrRJ8IYoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.214.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:f2:a9:3b:d8:a5:f5:ae:79:c9:28:b2:51:a1:ef:f3:9d:0c:
e7:01:d2:d6:4b:53:cd:9a:1c:f3:3b:d6:f6:57:70:e1:7b:a2:
8e:40:db:02:33:16:fe:28:15:09:37:d4:d9:02:f8:de:81:33:
31:ca:60:1b:aa:0b:df:f5:55:e4:40:06:5a:ea:4e:27:50:25:
cd:c9:ee:27:37:da:a7:b5:c3:1f:aa:95:e7:5e:7c:d6:8d:a0:
ee:2e:a4:13:27:3f:ac:d6:e1:45:08:c8:40:92:bf:1f:4e:61:
8b:ff:58:b5:48:1a:10:11:97:5b:12:3f:53:8b:35:c0:16:81:
57:05:6b:18:ad:0d:a8:0a:73:75:4c:c1:4a:ed:7a:8b:52:a6:
f4:3e:f4:b8:85:6a:1e:b3:35:a7:07:6d:0b:fa:3e:21:a6:ef:
51:b8:88:c7:dc:24:7a:ef:93:f1:b0:e4:fa:c8:e6:d6:51:ff:
a5:84:b0:db:63:26:38:b4:18:f1:c2:2b:c6:a1:f0:1c:36:5b:
22:02:45:32:29:2a:d4:04:9d:7b:6b:0b:f5:c1:e2:ab:55:1e:
30:04:b1:3c:39:34:1a:d2:a9:d5:6a:2e:16:50:6d:a5:48:8b:
15:1e:2e:19:d2:00:0b:5f:dd:52:83:80:f2:ed:8e:71:ec:b4:
15:a9:56:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:34:00 2025 by rpki-client