Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/tlf9oSMp8TzUZONOp46fwSuU-74.roa
File: tlf9oSMp8TzUZONOp46fwSuU-74.roa (raw, json)
Hash identifier: tz1ZE1MMVeABX8b00HeP006nFUvuqxLU3E9LdFbheeM=
Subject key identifier: B6:57:FD:A1:23:29:F1:3C:D4:64:E3:4E:A7:8E:9F:C1:2B:94:FB:BE
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCC02751E7F065D274DAB2B2E86A32E
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/tlf9oSMp8TzUZONOp46fwSuU-74.roa
Signing time: Thu 15 Jun 2023 06:44:03 +0000
ROA not before: Thu 15 Jun 2023 06:44:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.237.206.0/24 maxlen: 24
85.237.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cc:02:75:1e:7f:06:5d:27:4d:ab:2b:2e:86:a3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:44:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b657fda12329f13cd464e34ea78e9fc12b94fbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:06:03:92:f6:3b:08:31:88:97:6a:97:be:81:
e7:3b:75:a7:38:dc:ce:f3:49:0f:70:86:53:8c:78:
6c:c7:d4:b1:57:c8:94:fd:22:d1:b6:9a:42:73:e4:
f0:50:b7:c6:c7:48:e4:19:37:80:00:26:1e:b3:c6:
12:83:7c:e2:c2:a0:db:8e:42:10:71:b4:70:c3:c8:
ed:ba:6b:1a:5b:77:60:1b:99:4f:95:57:da:df:71:
e8:74:b2:76:4e:e7:09:b4:97:8f:4c:35:ef:65:b9:
c7:3b:30:f2:70:50:e0:fd:71:78:cd:16:22:40:2e:
1a:64:7b:d2:1a:ca:b9:6e:19:ba:34:14:44:25:ea:
ca:d1:32:3f:49:7f:39:cd:78:2b:5a:d3:71:74:f3:
21:4e:42:a6:40:60:1b:8c:cc:dc:3b:1f:e8:d7:b1:
65:14:ec:4e:ee:39:8f:2d:82:ed:ed:0f:fb:2d:b3:
9e:38:d3:ae:8f:ed:57:e4:20:15:23:ed:5a:d2:4a:
6d:d1:5d:cd:ea:df:d6:82:32:56:2f:62:7b:83:06:
5c:fd:2d:31:04:f0:b0:0c:7b:34:b5:78:9f:b3:3e:
c4:ee:d1:f2:e5:e5:87:3b:0d:dc:c9:27:48:85:b5:
33:8f:d1:73:05:d9:f5:96:6c:43:76:df:11:7d:c8:
6d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:57:FD:A1:23:29:F1:3C:D4:64:E3:4E:A7:8E:9F:C1:2B:94:FB:BE
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/tlf9oSMp8TzUZONOp46fwSuU-74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.206.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:29:8b:21:28:c2:cb:ec:e5:be:e0:7a:0a:9b:35:e8:cf:55:
44:8b:52:f9:d0:3e:15:01:31:e5:33:23:7e:15:50:f5:9d:48:
35:05:37:d7:e9:35:8c:89:86:de:0d:eb:36:49:a8:91:65:7b:
e4:0e:14:b2:6a:8a:62:cf:01:08:be:da:62:89:e3:1f:a4:7d:
f2:e4:f2:37:b9:cf:81:21:01:e3:83:38:1f:4e:c9:6a:3f:3c:
35:7c:22:6d:b7:f7:16:fd:db:06:c6:c9:f6:ae:14:3c:e9:1a:
c0:9f:2f:47:b1:78:5a:ad:6d:ef:22:45:3a:4b:75:7a:98:f5:
31:70:cb:e8:45:ac:ed:70:4e:b5:b9:6a:9b:60:dc:d1:11:44:
46:c1:bd:74:94:74:07:42:dd:39:1b:7a:ce:4a:a5:93:73:ca:
c3:55:c6:a2:a9:57:85:45:61:bc:79:81:6d:a6:52:5d:02:fe:
a4:e4:82:40:ec:7e:bd:d9:7f:bc:57:87:6d:d9:cc:55:4d:10:
02:ab:81:80:18:9b:c5:16:3c:11:33:1d:97:59:d7:11:0a:e8:
c6:e5:51:b4:10:e8:eb:07:78:02:fc:49:21:e2:98:46:1d:38:
b8:a1:27:b2:d4:b3:16:2f:a1:ab:40:2d:4a:1e:e0:37:6a:d3:
cd:c5:d0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:52:57 2025 by rpki-client