Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/d9McrCerpLOzukjSkuaE0D4pXYA.roa
File: d9McrCerpLOzukjSkuaE0D4pXYA.roa (raw, json)
Hash identifier: 7Ygv+WSLRn/2ZqekKklbNFS+C4TFmIbUKEsk5hzYNVY=
Subject key identifier: 77:D3:1C:AC:27:AB:A4:B3:B3:BA:48:D2:92:E6:84:D0:3E:29:5D:80
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018AC2ABDB29ECD63FC4869C53379608C5E5
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/d9McrCerpLOzukjSkuaE0D4pXYA.roa
Signing time: Sat 23 Sep 2023 15:32:37 +0000
ROA not before: Sat 23 Sep 2023 15:32:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
85.237.206.0/24 maxlen: 24
85.237.202.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.158.58.0/23 maxlen: 23
85.158.58.0/24 maxlen: 24
85.237.208.0/23 maxlen: 23
85.237.208.0/24 maxlen: 24
85.237.209.0/24 maxlen: 24
85.158.59.0/24 maxlen: 24
85.237.220.0/23 maxlen: 23
185.139.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c2:ab:db:29:ec:d6:3f:c4:86:9c:53:37:96:08:c5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Sep 23 15:32:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77d31cac27aba4b3b3ba48d292e684d03e295d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:87:09:09:a8:4c:aa:02:8c:11:17:be:ba:
5d:f7:83:91:14:fe:8b:e3:54:cc:43:8a:78:aa:c5:
11:a6:ac:4b:cd:c7:74:fd:12:51:41:9d:c8:87:8f:
7a:14:b3:33:49:27:2f:9c:a1:97:a7:0b:26:3d:9f:
1f:de:b1:7c:01:63:dc:32:63:94:8c:85:33:1c:ec:
c0:c2:4d:90:48:63:ec:bd:b2:ac:cb:40:30:23:58:
a9:85:6b:f5:f5:4c:12:71:2f:1a:8a:aa:f3:27:98:
82:cc:fe:25:96:58:d9:cc:af:83:a1:a9:33:0a:6a:
7a:97:74:25:60:4f:47:a1:7f:f4:dd:21:20:40:53:
15:be:fd:ae:e6:f0:8f:8c:21:31:8d:37:68:c0:ae:
bc:7c:31:ba:73:66:6e:06:f1:8e:61:15:21:44:b6:
73:da:ff:df:a1:11:d3:2b:33:3a:4e:26:b1:28:8d:
78:93:f2:47:37:99:65:4f:7f:a2:aa:ec:fc:e2:e6:
67:1a:2b:46:60:20:82:de:1d:e9:ff:44:88:f7:ad:
55:8c:24:bf:c9:55:57:13:a8:9c:39:2a:d3:5b:98:
ff:29:96:49:53:19:7a:c6:97:36:e1:c1:5d:03:f0:
26:2e:92:f0:a9:57:1c:eb:b3:d0:76:1e:12:87:c9:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D3:1C:AC:27:AB:A4:B3:B3:BA:48:D2:92:E6:84:D0:3E:29:5D:80
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/d9McrCerpLOzukjSkuaE0D4pXYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0-85.158.59.255
85.237.202.0/24
85.237.206.0/24
85.237.208.0/23
85.237.220.0/23
185.139.26.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
91:88:12:74:0b:df:57:59:ad:4d:00:e2:12:17:25:4f:76:83:
13:21:0b:a8:e5:20:1d:76:b5:a6:47:7e:3d:45:97:46:be:65:
80:24:38:2a:10:bc:4b:f5:c3:9f:79:10:5e:47:30:de:0b:3d:
a1:09:a2:33:40:c0:c9:7b:94:26:bf:79:fa:ff:29:4e:3f:37:
ff:2d:a3:2d:17:4e:d4:f7:a2:5a:4e:8b:34:bb:fb:1f:97:dd:
90:19:db:9f:af:a1:99:d8:51:25:66:db:2c:4f:f5:a0:b0:dd:
e4:8c:61:69:be:69:4d:62:b7:57:9d:8b:4c:93:cc:f1:2e:2b:
51:25:55:a7:4c:8f:c0:4c:05:b2:04:2c:e9:8e:29:66:93:d3:
1e:68:db:54:0b:c3:70:8a:c3:6c:22:d4:74:2b:d3:d0:3c:cc:
ec:cd:1d:43:fa:1f:a6:2f:e3:bc:e9:73:07:04:04:d5:26:f5:
b3:b0:6d:38:ac:3a:20:32:a1:a6:9c:3c:b7:e4:2b:57:ea:41:
df:51:0e:7c:90:f1:e4:66:4b:c4:28:31:cd:5b:72:ed:e5:aa:
f3:d7:bb:26:29:6c:8c:d3:9f:82:54:48:2e:46:fd:fa:22:8d:
39:ea:f4:c8:6f:f2:60:fc:c5:3c:d4:27:6e:9f:64:27:b0:bd:
da:31:34:9d
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYrCq9sp7NY/xIacUzeWCMXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YmY3ZjNhZDUzZjI5YTNjNDNmMGFkODIwMTdhMDUzNjhj
MDEwNGEwHhcNMjMwOTIzMTUzMjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2QzMWNhYzI3YWJhNGIzYjNiYTQ4ZDI5MmU2ODRkMDNlMjk1ZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE+HCQmoTKoCjBEXvrpd94ORFP6L
41TMQ4p4qsURpqxLzcd0/RJRQZ3Ih496FLMzSScvnKGXpwsmPZ8f3rF8AWPcMmOU
jIUzHOzAwk2QSGPsvbKsy0AwI1iphWv19UwScS8aiqrzJ5iCzP4llljZzK+Doakz
Cmp6l3QlYE9HoX/03SEgQFMVvv2u5vCPjCExjTdowK68fDG6c2ZuBvGOYRUhRLZz
2v/foRHTKzM6TiaxKI14k/JHN5llT3+iquz84uZnGitGYCCC3h3p/0SI961VjCS/
yVVXE6icOSrTW5j/KZZJUxl6xpc24cFdA/AmLpLwqVcc67PQdh4Sh8lB4QIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFHfTHKwnq6Szs7pI0pLmhNA+KV2AMB8GA1UdIwQY
MBaAFFi/fzrVPymjxD8K2CAXoFNowBBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUt
OGIzZDUyN2M0OWU0LzEvZDlNY3JDZXJwTE96dWtqU2t1YUUwRDRwWFlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUtOGIzZDUyN2M0OWU0
LzEvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBABVnjkD
BAJVnjgDBABV7coDBABV7c4DBAFV7dADBAFV7dwDBAC5ixoDBADBbcYwDQYJKoZI
hvcNAQELBQADggEBAJGIEnQL31dZrU0A4hIXJU92gxMhC6jlIB12taZHfj1Fl0a+
ZYAkOCoQvEv1w595EF5HMN4LPaEJojNAwMl7lCa/efr/KU4/N/8toy0XTtT3olpO
izS7+x+X3ZAZ25+voZnYUSVm2yxP9aCw3eSMYWm+aU1it1edi0yTzPEuK1ElVadM
j8BMBbIELOmOKWaT0x5o21QLw3CKw2wi1HQr09A8zOzNHUP6H6Yv47zpcwcEBNUm
9bOwbTisOiAyoaacPLfkK1fqQd9RDnyQ8eRmS8QoMc1bcu3lqvPXuyYpbIzTn4JU
SC5G/foijTnq9Mhv8mD8xTzUJ26fZCewvdoxNJ0=
-----END CERTIFICATE-----
Generated at Thu May 1 08:26:13 2025 by rpki-client