Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/RmUoKVpmhxDnWqguFZlckyTw95g.roa
File: RmUoKVpmhxDnWqguFZlckyTw95g.roa (raw, json)
Hash identifier: 3EoTAMcCqSdVuGb3hFI+cP3HxhC1pue+Lg0WsF7Iz3k=
Subject key identifier: 46:65:28:29:5A:66:87:10:E7:5A:A8:2E:15:99:5C:93:24:F0:F7:98
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCB18CD2710CC2D0CF9241CCE3C4BDE
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/RmUoKVpmhxDnWqguFZlckyTw95g.roa
Signing time: Thu 15 Jun 2023 06:43:03 +0000
ROA not before: Thu 15 Jun 2023 06:43:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.237.217.0/24 maxlen: 24
85.237.220.0/24 maxlen: 24
185.139.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cb:18:cd:27:10:cc:2d:0c:f9:24:1c:ce:3c:4b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:43:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=466528295a668710e75aa82e15995c9324f0f798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:74:8f:cb:91:79:0b:79:6f:44:14:4e:d1:
15:66:90:1c:20:90:b0:5d:d1:16:31:e6:34:da:da:
bf:2d:77:7b:e4:5e:d1:c9:0a:e0:a5:0b:1f:2a:c7:
2c:33:7d:ff:06:b1:f1:b6:e7:75:38:84:c8:07:a3:
19:72:b0:f5:13:0c:0f:c6:24:a0:7b:63:67:18:9d:
27:30:78:e2:c3:44:60:b0:df:f7:b1:fe:3a:10:da:
46:1e:d1:d9:bc:6b:b1:bf:4d:14:43:2f:d0:e3:3c:
2c:6a:50:93:4c:a9:1c:eb:bf:6c:57:60:8b:3b:22:
39:0d:3a:b1:99:6f:0d:e2:af:d5:a4:26:16:f4:11:
9d:c1:c2:83:72:6a:28:2b:ee:87:a9:2e:74:99:6b:
24:7c:5b:aa:6a:97:a4:d4:f3:80:79:b5:e9:3e:57:
5a:23:c1:9f:01:07:47:6a:31:fa:90:46:b5:b7:bf:
c3:2b:b2:4e:d8:00:e0:44:4c:33:b4:39:13:6d:90:
f9:cf:41:9f:24:ab:fc:c3:74:a0:3e:8d:95:22:ce:
69:76:6c:cf:e3:c1:d2:c6:5b:01:68:30:22:45:43:
4b:6e:39:c1:b7:d6:17:c7:28:9d:bc:4b:8f:93:f3:
1c:4a:79:a0:12:e6:f6:a4:a6:44:e5:5c:97:cb:0c:
e6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:65:28:29:5A:66:87:10:E7:5A:A8:2E:15:99:5C:93:24:F0:F7:98
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/RmUoKVpmhxDnWqguFZlckyTw95g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.217.0/24
85.237.220.0/24
185.139.26.0/24
Signature Algorithm: sha256WithRSAEncryption
47:25:a6:85:9d:e3:1a:e8:cc:2a:98:24:6c:ed:19:37:f7:16:
d5:50:9c:47:92:a8:12:ed:79:bc:85:8a:ce:82:ae:19:74:89:
bd:73:50:0c:6f:6a:45:06:d6:90:56:7c:24:d9:45:e0:d2:e6:
01:80:c2:0d:26:df:47:df:a0:c5:c5:b3:b6:22:dc:9b:66:40:
b2:5e:70:bc:46:79:92:ee:4f:74:eb:ea:9b:d3:51:61:e5:cf:
0d:71:2a:92:cc:d0:2b:97:9e:b5:1a:c4:45:ee:2c:26:01:84:
8c:ce:44:a8:ef:2d:3e:5e:a2:a8:8a:43:86:34:42:21:ca:4c:
fe:33:ed:31:5c:25:64:fa:9b:5a:01:77:62:e3:7d:6d:46:ff:
18:78:73:1b:af:0d:a6:0d:57:35:36:a9:4e:08:3c:58:23:30:
fd:04:ad:c0:c9:22:12:03:28:13:4b:82:e2:cc:d3:d1:5e:b8:
75:f3:d3:fd:83:29:93:25:d5:50:61:74:1d:9c:92:45:e7:91:
ee:49:90:86:a8:90:13:81:0f:4d:ba:78:df:6d:11:7e:77:12:
41:ff:ab:c4:14:e9:23:b9:2f:8a:8b:e5:77:05:a8:c4:c1:7a:
73:89:2c:34:9e:76:f7:6f:75:f5:3d:12:8d:f9:52:e6:af:90:
8f:77:7e:40
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYi9yxjNJxDMLQz5JBzOPEveMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YmY3ZjNhZDUzZjI5YTNjNDNmMGFkODIwMTdhMDUzNjhj
MDEwNGEwHhcNMjMwNjE1MDY0MzAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjY1MjgyOTVhNjY4NzEwZTc1YWE4MmUxNTk5NWM5MzI0ZjBmNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKx0j8uReQt5b0QUTtEVZpAcIJCw
XdEWMeY02tq/LXd75F7RyQrgpQsfKscsM33/BrHxtud1OITIB6MZcrD1EwwPxiSg
e2NnGJ0nMHjiw0RgsN/3sf46ENpGHtHZvGuxv00UQy/Q4zwsalCTTKkc679sV2CL
OyI5DTqxmW8N4q/VpCYW9BGdwcKDcmooK+6HqS50mWskfFuqapek1POAebXpPlda
I8GfAQdHajH6kEa1t7/DK7JO2ADgREwztDkTbZD5z0GfJKv8w3SgPo2VIs5pdmzP
48HSxlsBaDAiRUNLbjnBt9YXxyidvEuPk/McSnmgEub2pKZE5VyXywzmWQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEZlKClaZocQ51qoLhWZXJMk8PeYMB8GA1UdIwQY
MBaAFFi/fzrVPymjxD8K2CAXoFNowBBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUt
OGIzZDUyN2M0OWU0LzEvUm1Vb0tWcG1oeERuV3FndUZabGNreVR3OTVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNjRiOTQtNmNhNC00ZjlhLTg4YTUtOGIzZDUyN2M0OWU0
LzEvV0w5X090VV9LYVBFUHdyWUlCZWdVMmpBRUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVe3ZAwQA
Ve3cAwQAuYsaMA0GCSqGSIb3DQEBCwUAA4IBAQBHJaaFneMa6MwqmCRs7Rk39xbV
UJxHkqgS7Xm8hYrOgq4ZdIm9c1AMb2pFBtaQVnwk2UXg0uYBgMINJt9H36DFxbO2
ItybZkCyXnC8RnmS7k906+qb01Fh5c8NcSqSzNArl561GsRF7iwmAYSMzkSo7y0+
XqKoikOGNEIhykz+M+0xXCVk+ptaAXdi431tRv8YeHMbrw2mDVc1NqlOCDxYIzD9
BK3AySISAygTS4LizNPRXrh189P9gymTJdVQYXQdnJJF55HuSZCGqJATgQ9Nunjf
bRF+dxJB/6vEFOkjuS+Ki+V3BajEwXpziSw0nnb3b3X1PRKN+VLmr5CPd35A
-----END CERTIFICATE-----
Generated at Fri May 9 09:44:11 2025 by rpki-client