Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/XCkY3bMbtqZfeWb_0zigIHhe8v8.roa
File: XCkY3bMbtqZfeWb_0zigIHhe8v8.roa (raw, json)
Hash identifier: IZnGpTJFgkGXVOxGc7FfBaA0TE2yKN0XUh0qi5eDWUI=
Subject key identifier: 5C:29:18:DD:B3:1B:B6:A6:5F:79:66:FF:D3:38:A0:20:78:5E:F2:FF
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 04A3B7A2
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/XCkY3bMbtqZfeWb_0zigIHhe8v8.roa
Signing time: Mon 20 Jun 2022 01:25:45 +0000
ROA not before: Mon 20 Jun 2022 01:25:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.139.25.0/24 maxlen: 24
185.139.26.0/24 maxlen: 24
185.139.27.0/24 maxlen: 24
185.235.32.0/24 maxlen: 24
185.100.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77838242 (0x4a3b7a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 20 01:25:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5c2918ddb31bb6a65f7966ffd338a020785ef2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1b:8c:77:cf:2d:bc:2a:34:2a:69:09:5b:50:
64:48:a2:92:67:e4:0f:3a:3d:84:c5:03:66:18:c4:
40:87:19:56:91:84:1f:cb:70:cc:c6:4f:22:99:65:
5b:09:ea:c1:2b:15:fe:a4:87:14:95:1c:a4:4d:b0:
d5:d0:43:8b:32:d5:90:19:ab:46:0c:f0:b9:ee:09:
04:8a:38:76:ba:28:8a:8d:c2:e3:0f:71:c6:10:b8:
70:56:de:35:22:2e:22:e3:d8:66:8f:fe:f7:68:46:
8b:20:ca:12:0e:f5:38:da:ac:ec:60:b5:88:cd:f6:
2d:29:20:d4:de:f1:f0:21:ff:1e:0e:5b:27:ce:9e:
c0:90:5d:73:fb:fd:99:d2:03:77:25:36:cb:70:57:
d4:d2:78:f1:d0:d2:f9:98:b2:4d:3b:1d:b3:25:27:
a3:6d:de:30:7f:c9:eb:fa:7e:b3:eb:03:04:26:f0:
85:c6:ff:88:c0:d8:af:8e:13:a1:a3:9f:4a:99:a6:
0e:43:6a:77:e2:59:c9:ca:26:c4:10:76:9e:42:d1:
f0:74:70:8d:64:6e:cd:13:93:16:0e:87:fb:23:1d:
e3:b3:d3:67:a6:a7:0d:9d:22:20:ab:6d:17:8b:3b:
a6:9d:ad:27:bc:18:a0:a9:e0:ef:dd:51:6a:43:fd:
57:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:29:18:DD:B3:1B:B6:A6:5F:79:66:FF:D3:38:A0:20:78:5E:F2:FF
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/XCkY3bMbtqZfeWb_0zigIHhe8v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.212.0/22
185.139.25.0-185.139.27.255
185.235.32.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:3a:d5:bc:45:97:0f:b2:39:38:60:e1:46:2d:82:7d:02:47:
bb:11:3d:ac:18:b9:23:2a:5d:8e:80:8b:fd:73:8c:7b:55:01:
5d:08:38:5d:69:96:ea:d2:3f:ff:75:c7:89:46:c5:d5:4c:93:
65:64:ab:3a:71:ef:f6:3a:c2:e6:41:56:15:6c:b2:e3:4c:bc:
b1:24:2b:0d:8f:68:bb:4a:b5:2f:23:cf:32:0f:cc:8d:56:5a:
76:c9:bd:29:9c:b6:83:5b:42:23:d5:1f:f2:5f:c6:15:67:73:
3f:a7:21:3c:c6:a3:00:43:d1:82:05:fb:c6:51:39:46:e4:d9:
30:ac:b2:0a:b1:64:06:57:7c:51:04:51:62:ab:f1:70:a5:b4:
76:c3:5e:42:7a:ce:2d:3a:fd:26:ce:2a:45:cf:1f:b9:ff:50:
05:19:5b:c3:6c:8e:4b:94:c1:f8:7b:15:f2:77:18:7f:e4:f4:
eb:dd:18:56:06:a2:7f:b1:5b:97:4f:7d:0f:1a:c2:f8:75:1a:
23:c7:ca:fa:63:b2:cd:a2:66:85:4f:d1:45:0b:18:a6:a7:74:
65:e1:36:d6:9c:59:d9:0e:53:f6:40:ec:ab:f9:e3:19:b6:4d:
9c:6f:fc:b6:d6:3f:b2:52:d6:cd:81:11:a0:4b:db:a2:0e:ad:
e6:81:18:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:10:13 2025 by rpki-client