Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/a0V531fnpFmpyNf-RLLtWjfvjYc.roa
File: a0V531fnpFmpyNf-RLLtWjfvjYc.roa (raw, json)
Hash identifier: v41E2mRNMjdvrCgXWQ5I8Ta220aKu6VsK1cy8rsOxZA=
Subject key identifier: 6B:45:79:DF:57:E7:A4:59:A9:C8:D7:FE:44:B2:ED:5A:37:EF:8D:87
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018AE29BDD465218EB6DCD40CA737EB2B2AA
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/a0V531fnpFmpyNf-RLLtWjfvjYc.roa
Signing time: Fri 29 Sep 2023 20:22:59 +0000
ROA not before: Fri 29 Sep 2023 20:22:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 85.158.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e2:9b:dd:46:52:18:eb:6d:cd:40:ca:73:7e:b2:b2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Sep 29 20:22:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b4579df57e7a459a9c8d7fe44b2ed5a37ef8d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:24:34:5d:fd:06:70:8d:86:57:0f:fd:a5:b1:
0c:5f:19:37:d3:83:d6:0e:88:9f:3f:29:46:a5:98:
8f:e4:51:1a:0e:29:56:61:4c:02:90:da:2f:b1:9c:
d9:99:d0:55:eb:6d:cb:38:e1:11:4d:a6:01:8f:2d:
a0:38:96:eb:75:ee:52:33:2c:2b:d5:af:3b:17:cf:
af:e2:f7:c7:bf:eb:2b:73:58:6d:45:35:00:21:c8:
bb:e0:ba:1e:28:e3:9d:08:b4:6b:8d:78:fc:39:a5:
98:12:93:d5:b2:8d:b3:3a:18:75:d1:58:d8:73:9c:
28:81:bf:28:82:6c:39:bb:23:f6:03:61:7b:d5:39:
23:0e:e1:f1:09:6a:c5:5f:d9:96:0f:2b:e6:19:e8:
47:30:8d:db:70:5f:f3:2f:9a:b5:6f:0e:b6:b8:33:
03:be:5f:dd:71:ec:64:c3:c7:e6:f6:ca:93:29:7a:
6d:28:ab:8b:b3:7f:b6:99:82:72:f5:15:10:b1:c8:
9e:33:42:ba:d1:7c:52:8b:d0:75:b4:d6:81:ab:27:
41:08:b7:2c:b9:d6:54:b1:49:15:37:66:e3:af:4b:
4c:1b:f6:33:b8:de:08:d9:27:9d:dd:68:43:a8:73:
45:44:d7:bb:a2:dd:9d:2c:0b:ab:3a:47:63:9f:32:
e6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:45:79:DF:57:E7:A4:59:A9:C8:D7:FE:44:B2:ED:5A:37:EF:8D:87
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/a0V531fnpFmpyNf-RLLtWjfvjYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.59.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c1:39:7f:90:44:6b:77:5d:d2:1f:a2:d8:a8:b6:ba:f3:53:
e2:33:5e:fa:4d:07:5d:2a:06:ea:65:11:d9:e4:e8:80:d0:fe:
7e:f1:62:b6:8b:06:92:58:ea:95:e8:a3:48:90:4f:fb:6d:5b:
3a:d3:17:30:08:93:24:ee:72:cd:be:9e:01:58:56:77:2e:cf:
8f:90:4e:92:6f:8b:01:2b:ac:f7:7b:89:ad:9a:f9:4d:6c:07:
da:8d:d5:a0:88:58:b1:5b:b8:cf:c8:f4:43:02:16:df:b6:63:
5a:78:66:c5:c5:41:96:79:2a:c6:75:67:97:73:18:73:29:d2:
86:2d:e5:8b:cc:0c:e7:b7:4c:c1:b6:09:25:34:ce:ce:da:2b:
f7:e7:92:81:11:9e:c8:14:c4:19:b6:1a:6d:31:f5:fa:6a:49:
50:d3:33:e3:dc:8b:f7:96:fe:8e:7e:a2:e8:8b:c6:67:25:e7:
e7:59:a3:45:0d:de:0f:8a:3a:32:bf:18:2e:64:cc:d1:b7:b6:
0c:d2:25:b8:22:8a:12:1d:af:3c:cf:d6:68:35:f5:f3:d1:4e:
c3:de:03:db:de:8f:3f:ca:af:ac:10:5a:29:e8:e3:aa:a0:1f:
45:40:e3:59:ad:e1:79:d6:4e:7b:f1:6f:55:93:cf:96:b4:2a:
32:19:e6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:38:35 2025 by rpki-client