Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/ZxHXhYYenmHFQmjElFIwadeVrHo.roa
File: ZxHXhYYenmHFQmjElFIwadeVrHo.roa (raw, json)
Hash identifier: iu1GQdze/mKra0OxfgTiR5/qqoRzvlo9HdppNAziIts=
Subject key identifier: 67:11:D7:85:86:1E:9E:61:C5:42:68:C4:94:52:30:69:D7:95:AC:7A
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCC0215C8286ADB36F683CA81B30AD3
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/ZxHXhYYenmHFQmjElFIwadeVrHo.roa
Signing time: Thu 15 Jun 2023 06:44:03 +0000
ROA not before: Thu 15 Jun 2023 06:44:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 85.237.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cc:02:15:c8:28:6a:db:36:f6:83:ca:81:b3:0a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:44:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6711d785861e9e61c54268c494523069d795ac7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:46:22:be:7e:a9:d5:b4:ce:57:32:33:2d:
8e:3e:51:e6:2b:1d:98:4c:5b:7e:83:69:64:48:d5:
7d:64:50:d2:42:f2:08:93:e6:02:bc:d1:0e:fd:aa:
51:9d:7f:97:09:dc:8d:ce:a1:74:3f:e4:b2:b1:f5:
4a:24:e0:71:6e:04:f1:9d:69:86:82:79:33:e1:1b:
ee:9a:b2:0f:a9:7b:55:e1:d9:2a:8f:d3:bf:cf:10:
93:7d:60:8b:ba:f8:df:7e:18:28:39:30:1b:fc:37:
bc:65:1c:82:c7:99:bd:cf:ea:38:ee:7a:9d:52:76:
d8:39:9b:ee:7c:c5:e7:20:d3:b6:f7:a5:72:ba:b4:
27:d4:9a:c0:9e:c4:38:56:30:f8:ca:3d:e7:e2:e7:
c0:2a:17:4e:33:a5:a1:72:e7:a7:9d:bf:5f:63:bd:
2f:c1:b1:b1:25:aa:6e:10:06:00:cf:3c:cb:18:09:
32:ca:7e:87:66:b6:e6:75:92:5d:bd:da:07:d6:85:
04:87:1d:7d:bd:00:b4:ac:52:f0:fe:00:39:57:0a:
b1:d4:2b:41:b1:65:82:ed:9d:ac:33:2f:f2:66:7e:
10:23:7c:bc:01:d8:13:7a:a1:78:49:aa:01:ae:73:
e7:68:ab:cc:ba:0e:29:c9:4d:dc:ef:c7:da:ec:f5:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:11:D7:85:86:1E:9E:61:C5:42:68:C4:94:52:30:69:D7:95:AC:7A
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/ZxHXhYYenmHFQmjElFIwadeVrHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.201.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b2:49:28:75:d4:7c:99:cf:69:a1:3b:f5:db:a9:2f:e7:6b:
d5:84:cf:eb:93:1e:98:00:6f:11:0e:b0:01:0f:f5:49:4a:d0:
ad:4e:f9:b7:b9:26:28:80:9b:03:e1:29:05:ef:01:27:2f:a5:
33:1e:3a:ec:19:37:12:48:bd:e2:8f:de:9e:e6:31:53:19:63:
86:f3:e5:ad:1b:26:36:09:7a:79:f4:79:0d:e8:45:94:52:00:
bb:3c:3d:75:c5:52:cb:46:d3:ab:d3:ae:8d:c2:c4:38:d4:08:
8d:00:91:84:0d:24:c1:df:4e:58:26:b5:62:1c:bb:cc:51:bc:
d8:be:b7:dd:8b:21:a9:36:eb:16:6c:8e:23:a0:8a:fb:88:de:
4a:d9:36:26:36:05:66:08:28:6d:0a:bb:96:b1:ea:ce:11:86:
55:b3:0b:88:f2:9c:61:e8:ff:99:cd:4b:1b:8b:a4:12:51:06:
bf:fd:f0:a2:f4:e5:0f:a3:b0:f9:a2:ee:a6:19:32:f9:b7:76:
20:11:fa:10:c4:e0:c7:a4:05:23:cf:85:c7:ab:b3:74:3a:1e:
bd:5d:50:a6:e5:66:be:61:73:bc:68:f7:60:32:46:a6:bc:e6:
50:26:e6:82:d4:b7:58:05:d7:28:59:71:47:1a:36:2b:b7:41:
9d:1b:1a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:09:07 2025 by rpki-client