Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Aln5EeMgCuasr_YqoztvzcaI1aI.roa
File: Aln5EeMgCuasr_YqoztvzcaI1aI.roa (raw, json)
Hash identifier: isq4EY3lU0085Ts7x8FQJFEFPlICbZSLBZiTpmql3Io=
Subject key identifier: 02:59:F9:11:E3:20:0A:E6:AC:AF:F6:2A:A3:3B:6F:CD:C6:88:D5:A2
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 01892473689F706C65856CDF9867D79B16FF
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Aln5EeMgCuasr_YqoztvzcaI1aI.roa
Signing time: Wed 05 Jul 2023 05:08:10 +0000
ROA not before: Wed 05 Jul 2023 05:08:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 85.237.196.0/24 maxlen: 24
85.237.208.0/24 maxlen: 24
85.237.215.0/24 maxlen: 24
85.237.214.0/24 maxlen: 24
85.237.216.0/24 maxlen: 24
185.139.25.0/24 maxlen: 24
185.139.27.0/24 maxlen: 24
185.235.32.0/24 maxlen: 24
85.158.58.0/24 maxlen: 24
85.158.57.0/24 maxlen: 24
85.158.61.0/24 maxlen: 24
85.158.63.0/24 maxlen: 24
85.158.62.0/24 maxlen: 24
85.158.60.0/24 maxlen: 24
185.93.34.0/24 maxlen: 24
185.93.35.0/24 maxlen: 24
185.100.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:24:73:68:9f:70:6c:65:85:6c:df:98:67:d7:9b:16:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jul 5 05:08:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0259f911e3200ae6acaff62aa33b6fcdc688d5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:c8:36:c6:e9:7c:47:2d:26:11:19:bb:06:
ef:20:9a:34:71:06:41:32:28:f0:9d:1f:ef:32:76:
94:dc:7f:bf:e3:e6:b5:a1:84:f9:42:cd:4b:53:42:
5e:8b:17:4a:c6:81:f2:34:7d:71:be:20:c7:e2:dc:
f4:2f:e6:54:5c:7e:9d:e5:70:50:86:c6:59:c7:b4:
74:ac:8f:6e:c0:db:39:ac:3b:61:93:f0:c0:e1:da:
8f:eb:14:c8:52:e4:83:ab:d9:5e:71:42:0d:3f:f1:
4d:18:7d:f2:c9:f6:3d:8c:c0:8c:1c:2f:6d:ad:58:
ce:da:56:fe:1a:e9:e0:f6:83:0a:4d:51:ca:7e:c1:
06:96:85:a0:31:34:39:61:e6:97:c1:d3:0d:b4:31:
93:0c:b9:2a:d7:ab:ee:8b:20:e4:87:e5:46:55:f2:
cc:51:ef:dc:2b:1a:b7:e0:40:a4:d3:9b:3a:97:ec:
88:20:14:6b:06:b3:aa:f3:e4:fd:20:23:95:f8:e6:
82:5e:c4:a4:e4:3d:bb:cf:0e:58:87:18:3f:22:a7:
34:b8:19:68:dd:62:5b:2b:91:56:e1:2e:77:62:7c:
4b:fa:78:a9:67:c8:da:53:c9:04:70:e0:42:67:d2:
d8:82:d9:09:a0:cd:e1:57:24:fd:e7:5c:0d:ca:c9:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:59:F9:11:E3:20:0A:E6:AC:AF:F6:2A:A3:3B:6F:CD:C6:88:D5:A2
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/Aln5EeMgCuasr_YqoztvzcaI1aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.57.0-85.158.58.255
85.158.60.0/22
85.237.196.0/24
85.237.208.0/24
85.237.214.0-85.237.216.255
185.93.34.0/23
185.100.212.0/22
185.139.25.0/24
185.139.27.0/24
185.235.32.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:b2:f0:e1:20:47:ae:f5:9e:90:c7:f0:0a:ff:7f:9c:26:06:
f2:e8:86:e6:22:fc:cb:ca:6b:af:42:85:33:c1:12:db:cd:f4:
8c:44:ae:9c:e1:0f:e4:0a:ec:9c:81:1c:24:be:9c:69:fa:f6:
ca:4e:f3:78:fd:b0:00:49:b3:48:7c:fb:9b:9a:13:cf:85:10:
85:9b:90:65:b9:5c:13:5a:18:7b:a6:9f:1a:b2:0c:2d:c6:59:
dd:e0:70:14:2a:7f:fe:48:b0:42:56:7a:a0:15:ca:1d:fa:03:
ad:e7:43:df:d7:d6:54:b7:5a:25:0d:3f:22:55:10:3c:5b:ba:
fa:1f:7f:02:58:f5:ff:a1:07:8c:f6:f5:b1:cb:01:59:bf:fd:
56:ca:df:d0:70:3a:12:27:38:63:c7:37:f1:9a:88:c0:4a:b4:
9a:3a:31:06:07:c6:6c:dd:13:74:d2:ae:85:33:3c:8b:fc:b2:
c0:a1:ff:72:a4:3a:33:3a:d3:40:03:2f:06:a2:82:20:84:3f:
c3:db:5d:b4:8a:23:4b:d8:1b:be:c8:84:e8:de:1b:de:d9:a0:
6a:4e:15:0d:c6:35:d5:34:64:78:92:1e:7b:bc:04:9d:52:8d:
e8:de:cb:88:7b:14:90:fe:14:70:37:5e:94:28:e1:ed:8e:7d:
c3:e2:01:19
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAYkkc2ifcGxlhWzfmGfXmxb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YmY3ZjNhZDUzZjI5YTNjNDNmMGFkODIwMTdhMDUzNjhj
MDEwNGEwHhcNMjMwNzA1MDUwODEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjU5ZjkxMWUzMjAwYWU2YWNhZmY2MmFhMzNiNmZjZGM2ODhkNWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX7INsbpfEctJhEZuwbvIJo0cQZB
MijwnR/vMnaU3H+/4+a1oYT5Qs1LU0JeixdKxoHyNH1xviDH4tz0L+ZUXH6d5XBQ
hsZZx7R0rI9uwNs5rDthk/DA4dqP6xTIUuSDq9lecUINP/FNGH3yyfY9jMCMHC9t
rVjO2lb+Gung9oMKTVHKfsEGloWgMTQ5YeaXwdMNtDGTDLkq16vuiyDkh+VGVfLM
Ue/cKxq34ECk05s6l+yIIBRrBrOq8+T9ICOV+OaCXsSk5D27zw5Yhxg/Iqc0uBlo
3WJbK5FW4S53YnxL+nipZ8jaU8kEcOBCZ9LYgtkJoM3hVyT951wNysk3pwIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFAJZ+RHjIArmrK/2KqM7b83GiNWiMB8GA1UdIwQY
MBaAFFi/fzrVPymjxD8K2CAXoFNowBBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUt
OGIzZDUyN2M0OWU0LzEvQWxuNUVlTWdDdWFzcl9ZcW96dHZ6Y2FJMWFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUtOGIzZDUyN2M0OWU0
LzEvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMMAwDBABVnjkD
BABVnjoDBAJVnjwDBABV7cQDBABV7dAwDAMEAVXt1gMEAFXt2AMEAbldIgMEArlk
1AMEALmLGQMEALmLGwMEALnrIDANBgkqhkiG9w0BAQsFAAOCAQEAS7Lw4SBHrvWe
kMfwCv9/nCYG8uiG5iL8y8prr0KFM8ES2830jESunOEP5ArsnIEcJL6cafr2yk7z
eP2wAEmzSHz7m5oTz4UQhZuQZblcE1oYe6afGrIMLcZZ3eBwFCp//kiwQlZ6oBXK
HfoDredD39fWVLdaJQ0/IlUQPFu6+h9/Alj1/6EHjPb1scsBWb/9Vsrf0HA6Eic4
Y8c38ZqIwEq0mjoxBgfGbN0TdNKuhTM8i/yywKH/cqQ6MzrTQAMvBqKCIIQ/w9td
tIojS9gbvsiE6N4b3tmgak4VDcY11TRkeJIee7wEnVKN6N7LiHsUkP4UcDdelCjh
7Y59w+IBGQ==
-----END CERTIFICATE-----
Generated at Wed May 7 22:47:17 2025 by rpki-client