Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/cj4q0gKmksQ-EKNlTb0DB8EzutA.roa
File: cj4q0gKmksQ-EKNlTb0DB8EzutA.roa (raw, json)
Hash identifier: xexhr61Zj3joH570kQ7AhM8b6+DApj/Q7SBf+viPHRA=
Subject key identifier: 72:3E:2A:D2:02:A6:92:C4:3E:10:A3:65:4D:BD:03:07:C1:33:BA:D0
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCC08E6EBD37AD86066B53097641F4E
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/cj4q0gKmksQ-EKNlTb0DB8EzutA.roa
Signing time: Thu 15 Jun 2023 06:44:05 +0000
ROA not before: Thu 15 Jun 2023 06:44:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397630
IP address blocks: 185.100.215.0/24 maxlen: 24
185.93.32.0/24 maxlen: 24
185.139.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cc:08:e6:eb:d3:7a:d8:60:66:b5:30:97:64:1f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:44:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=723e2ad202a692c43e10a3654dbd0307c133bad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:08:c6:d3:4c:ed:9c:02:ac:3f:a3:25:21:ee:
66:a6:a3:72:0d:6d:81:92:66:a5:88:80:68:85:1b:
86:68:89:ea:e1:ce:45:c6:2c:14:1e:08:f6:26:83:
6e:8c:ab:63:1a:90:d8:f0:8b:22:57:4f:39:17:5f:
c9:ae:aa:1e:fd:c2:70:ea:0d:85:c9:6a:32:c0:be:
ea:0f:5a:7d:e8:5b:52:1a:61:81:ce:2c:fe:a7:96:
13:35:10:be:75:8f:6a:42:87:2a:5a:e9:26:c1:4c:
79:e3:cf:73:28:ea:6d:78:e0:cd:33:62:13:aa:83:
09:35:5a:f7:9d:76:52:85:ca:62:a9:03:bf:d3:34:
ba:0b:7d:4a:5f:54:7f:03:3f:3d:83:05:1f:ff:0a:
f7:59:c4:39:4a:bf:6e:f6:68:f2:ce:14:30:e5:be:
12:e9:f5:c3:ce:28:79:11:c2:02:58:b3:7f:0e:1a:
10:bc:cf:d1:a4:c7:5e:64:fb:11:9b:98:57:ef:09:
ea:01:92:89:68:5e:57:6c:f4:9b:70:5c:9b:e6:04:
35:e2:ba:c8:5d:37:b6:ef:8f:16:97:3e:5b:e7:b7:
69:5f:3a:80:05:05:b1:23:08:97:2b:c2:83:44:dd:
cc:f8:a4:d6:0d:92:3c:64:9f:1f:ec:51:ec:ad:7f:
3d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3E:2A:D2:02:A6:92:C4:3E:10:A3:65:4D:BD:03:07:C1:33:BA:D0
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/cj4q0gKmksQ-EKNlTb0DB8EzutA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.32.0/24
185.100.215.0/24
185.139.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:1c:71:ca:10:ac:77:72:b2:d5:8f:ce:c1:f3:fe:ea:4f:b1:
b1:35:36:04:4c:46:6d:aa:d8:0c:e3:a3:5f:c9:0f:b6:3e:9f:
d8:9e:a7:90:8e:27:2a:72:7f:d2:a3:fc:a2:76:db:a4:b2:68:
46:68:5c:35:09:18:9d:98:3d:9c:05:eb:bc:01:03:ae:32:3e:
e5:ae:67:25:71:cf:9a:71:70:21:86:d0:3f:bf:92:83:91:d6:
95:1e:b0:22:6e:73:48:e8:51:a1:af:5a:b4:90:ec:3c:33:e4:
b3:de:71:e8:f5:d8:dd:0b:8a:7a:19:63:a7:de:2c:59:ce:b6:
40:db:91:9a:cc:67:08:ee:de:e3:d9:42:5f:9c:23:22:46:f0:
95:88:56:5b:75:7d:b8:67:b4:91:5b:6a:0b:9d:75:de:49:f4:
43:7d:3c:c5:ee:ed:b3:dd:00:51:d7:80:cf:a9:5c:57:93:8b:
b6:55:27:2c:e6:d1:c1:13:6f:4e:97:6d:17:62:f6:1f:66:52:
cb:d1:10:e0:e0:01:55:5f:f7:a4:26:9f:2d:08:a9:3e:98:1d:
d7:ea:b3:53:78:f9:3d:00:05:4e:a0:d4:3b:cf:c1:52:b0:70:
f2:f0:22:0f:32:a0:29:f4:12:bd:25:7c:fc:38:cd:1c:6e:ec:
29:a9:6d:b7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYi9zAjm69N62GBmtTCXZB9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YmY3ZjNhZDUzZjI5YTNjNDNmMGFkODIwMTdhMDUzNjhj
MDEwNGEwHhcNMjMwNjE1MDY0NDA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjNlMmFkMjAyYTY5MmM0M2UxMGEzNjU0ZGJkMDMwN2MxMzNiYWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AjG00ztnAKsP6MlIe5mpqNyDW2B
kmaliIBohRuGaInq4c5FxiwUHgj2JoNujKtjGpDY8IsiV085F1/Jrqoe/cJw6g2F
yWoywL7qD1p96FtSGmGBziz+p5YTNRC+dY9qQocqWukmwUx5489zKOpteODNM2IT
qoMJNVr3nXZShcpiqQO/0zS6C31KX1R/Az89gwUf/wr3WcQ5Sr9u9mjyzhQw5b4S
6fXDzih5EcICWLN/DhoQvM/RpMdeZPsRm5hX7wnqAZKJaF5XbPSbcFyb5gQ14rrI
XTe2748Wlz5b57dpXzqABQWxIwiXK8KDRN3M+KTWDZI8ZJ8f7FHsrX89RwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHI+KtICppLEPhCjZU29AwfBM7rQMB8GA1UdIwQY
MBaAFFi/fzrVPymjxD8K2CAXoFNowBBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUt
OGIzZDUyN2M0OWU0LzEvY2o0cTBnS21rc1EtRUtObFRiMERCOEV6dXRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUtOGIzZDUyN2M0OWU0
LzEvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuV0gAwQA
uWTXAwQAuYsbMA0GCSqGSIb3DQEBCwUAA4IBAQC0HHHKEKx3crLVj87B8/7qT7Gx
NTYETEZtqtgM46NfyQ+2Pp/YnqeQjicqcn/So/yidtuksmhGaFw1CRidmD2cBeu8
AQOuMj7lrmclcc+acXAhhtA/v5KDkdaVHrAibnNI6FGhr1q0kOw8M+Sz3nHo9djd
C4p6GWOn3ixZzrZA25GazGcI7t7j2UJfnCMiRvCViFZbdX24Z7SRW2oLnXXeSfRD
fTzF7u2z3QBR14DPqVxXk4u2VScs5tHBE29Ol20XYvYfZlLL0RDg4AFVX/ekJp8t
CKk+mB3X6rNTePk9AAVOoNQ7z8FSsHDy8CIPMqAp9BK9JXz8OM0cbuwpqW23
-----END CERTIFICATE-----
Generated at Wed Apr 30 12:01:14 2025 by rpki-client