
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/7E-axSnMP7wC_J9-cJrkeOQPU7U.roa
File: 7E-axSnMP7wC_J9-cJrkeOQPU7U.roa (raw, json)
Hash identifier: vD08iXoiQiP0DTbmZI1mK/oWM1RGk81B5T8y0T0eVNE=
Subject key identifier: EC:4F:9A:C5:29:CC:3F:BC:02:FC:9F:7E:70:9A:E4:78:E4:0F:53:B5
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188C85093ABD9A53190AE267EAA93869880
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/7E-axSnMP7wC_J9-cJrkeOQPU7U.roa
Signing time: Sat 17 Jun 2023 07:45:03 +0000
ROA not before: Sat 17 Jun 2023 07:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.109.198.0/24 maxlen: 24
85.237.206.0/24 maxlen: 24
85.237.206.0/23 maxlen: 23
85.237.202.0/24 maxlen: 24
85.237.217.0/24 maxlen: 24
85.237.220.0/23 maxlen: 23
85.237.220.0/24 maxlen: 24
85.237.221.0/24 maxlen: 24
185.93.33.0/24 maxlen: 24
185.139.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c8:50:93:ab:d9:a5:31:90:ae:26:7e:aa:93:86:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 17 07:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec4f9ac529cc3fbc02fc9f7e709ae478e40f53b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:e1:1d:5b:93:ac:83:ac:ad:f3:f3:0a:24:
ae:9e:f2:7b:c7:36:ec:66:94:e2:aa:41:80:89:54:
ad:b0:5f:16:92:8b:f1:a7:9e:4f:e8:2a:a6:8c:9c:
6a:fc:0e:e7:49:2a:7c:d8:b2:d4:b0:e3:de:cf:d3:
79:85:4d:0c:a6:f5:69:2d:4c:e2:04:0f:97:3f:84:
56:68:81:af:96:79:ef:1a:b9:56:b4:fd:26:8c:c2:
0a:3a:a7:5b:cc:04:0e:66:8d:92:34:61:2b:17:46:
e9:09:9d:8b:80:fe:06:95:e6:29:6c:47:e5:6d:dd:
e3:ae:cc:c0:74:60:36:09:6d:67:d4:d6:e7:c0:e5:
65:0e:e1:36:43:13:2c:1d:c9:62:12:6f:dc:5c:68:
08:70:f4:6a:21:4c:da:13:dd:9c:e6:2a:56:3b:ea:
d7:24:2b:9b:4f:ba:2b:69:ef:66:dc:66:40:70:cb:
a6:78:0c:f8:33:66:eb:84:23:60:d3:72:b9:ce:a2:
8b:a7:67:0c:04:fb:98:86:6e:b7:0a:dc:4b:77:57:
62:42:d1:93:1f:45:96:05:e0:33:9f:90:7d:1e:a9:
97:4c:f2:ee:86:e0:b2:b7:87:1f:2c:dd:ca:c8:25:
25:c4:65:92:97:71:41:ce:8c:df:0e:fc:90:67:32:
05:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4F:9A:C5:29:CC:3F:BC:02:FC:9F:7E:70:9A:E4:78:E4:0F:53:B5
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/7E-axSnMP7wC_J9-cJrkeOQPU7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.202.0/24
85.237.206.0/23
85.237.217.0/24
85.237.220.0/23
185.93.33.0/24
185.139.26.0/24
193.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b1:37:57:54:ef:ee:3e:c3:db:fc:65:ba:8d:16:63:c4:46:
96:3c:7c:d5:74:bf:73:bd:16:28:ef:b2:7a:94:ea:f4:0b:de:
7d:f0:2e:51:1a:b1:64:4c:93:4c:b3:b2:d7:a1:0f:f1:27:b6:
33:de:d4:b3:f5:02:2a:a8:9b:60:b2:0e:1a:5f:19:ed:ab:5e:
0e:09:5a:92:c0:aa:de:0d:7f:5e:b9:ce:b7:ec:97:e4:24:bd:
ec:af:57:a8:bd:6f:02:98:d2:1a:f1:2f:29:00:67:3d:d8:ae:
ea:de:b6:8e:73:2c:5e:09:49:a8:fd:02:73:c9:a0:5c:3f:67:
59:bb:11:7f:6e:34:54:a3:f1:3e:90:25:e0:c3:94:f9:3a:3c:
98:6b:a9:9c:16:8d:7d:c3:23:ec:23:65:6a:85:15:a5:47:95:
ff:1a:5f:df:2a:ad:07:5a:e3:6e:0e:e4:20:74:89:c9:42:1b:
2c:7c:e2:ba:e6:37:b4:17:c4:df:65:7a:e1:ce:15:b8:97:04:
2f:ed:eb:65:bf:a6:fd:a6:89:64:19:9c:d3:72:27:2d:57:15:
e4:38:03:a9:0c:bd:32:78:2d:bd:7e:be:d4:b8:9e:e6:f7:0f:
0c:f2:c9:52:d5:a4:be:42:e3:fe:1b:15:a9:59:09:10:3b:6a:
2a:52:09:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 15:43:21 2025 by rpki-client