Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/kPYfnsM_DomsdqrwbMhgyKejwbg.roa
File: kPYfnsM_DomsdqrwbMhgyKejwbg.roa (raw, json)
Hash identifier: SJEm7GuwlHpcuYaBTQjUCb81pTkbvEcETXTrybvcfdI=
Subject key identifier: 90:F6:1F:9E:C3:3F:0E:89:AC:76:AA:F0:6C:C8:60:C8:A7:A3:C1:B8
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B312C1A26A8020A06EC22DC5CD750B0F8
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/kPYfnsM_DomsdqrwbMhgyKejwbg.roa
Signing time: Sun 15 Oct 2023 02:30:55 +0000
ROA not before: Sun 15 Oct 2023 02:30:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.158.58.0/23 maxlen: 23
85.158.58.0/24 maxlen: 24
85.237.208.0/23 maxlen: 23
85.237.209.0/24 maxlen: 24
85.237.220.0/23 maxlen: 23
185.93.32.0/24 maxlen: 24
185.139.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:31:2c:1a:26:a8:02:0a:06:ec:22:dc:5c:d7:50:b0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Oct 15 02:30:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90f61f9ec33f0e89ac76aaf06cc860c8a7a3c1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5c:82:04:95:7d:d2:65:01:4e:21:98:7f:cb:
98:e2:3f:9b:4c:71:8a:f2:29:61:38:b9:41:33:b3:
36:82:39:fb:cd:c7:60:41:1f:7f:fe:b6:d9:85:f1:
06:3a:b7:ef:66:9c:b3:33:48:fb:87:9c:f4:53:e5:
38:29:6e:b6:19:bb:3e:dc:79:ab:4e:0a:5b:b9:3e:
dd:a8:f9:2e:4d:9a:d0:20:84:89:2b:b2:2e:24:31:
b6:81:02:17:3f:69:44:3a:d1:0d:a0:ed:0c:a5:7b:
90:9d:06:b9:f2:2d:c1:6f:a9:65:c9:78:a9:bc:34:
68:2e:e8:f2:a9:56:1a:74:9f:9d:08:83:14:dc:45:
bf:d1:76:e7:6e:bf:2b:c2:5c:07:91:2b:39:3a:89:
41:3e:10:27:4d:7a:22:be:a5:92:02:f6:7d:4e:ee:
48:62:95:4f:dc:dc:7f:a0:89:76:14:c6:b4:96:f4:
3f:c5:e8:80:8d:9a:46:70:65:db:54:c3:fb:c6:ae:
12:b5:05:18:45:6b:9c:ff:92:38:3b:2d:76:ab:98:
fd:70:79:90:ba:1e:45:37:12:17:c5:33:d0:6b:e1:
e2:f1:2a:cd:af:7c:70:92:83:a0:16:91:14:3e:cf:
b9:19:ac:78:d0:c8:b9:b7:5f:b2:2a:39:9c:4b:c8:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F6:1F:9E:C3:3F:0E:89:AC:76:AA:F0:6C:C8:60:C8:A7:A3:C1:B8
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/kPYfnsM_DomsdqrwbMhgyKejwbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.58.0/23
85.237.208.0/23
85.237.220.0/23
185.93.32.0/24
185.139.24.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9e:bb:25:3d:88:fa:88:70:c8:73:4a:84:c6:5b:04:6e:4b:
37:1f:56:e9:56:fe:ed:b0:82:ad:fb:a0:e6:15:24:75:1d:2f:
7f:90:fc:3e:21:65:21:e5:71:00:0d:64:bf:51:da:b4:36:55:
5f:a6:2a:f3:f9:8b:82:97:d0:b8:67:0f:89:aa:98:6d:e8:a2:
89:3e:4b:2d:3f:4e:48:dc:43:c1:af:36:f0:8f:9b:26:36:b6:
7e:68:33:00:2a:e6:1e:c8:f9:f2:91:81:bd:7e:df:3b:b5:f3:
dd:76:0e:e4:4e:ca:4a:47:dd:71:0c:6f:1f:79:f1:20:b5:a5:
75:9b:81:5a:69:38:b2:37:19:22:73:c5:f7:d9:1a:74:7f:d0:
8b:80:64:be:0b:7f:f1:2a:16:51:a2:45:94:f5:91:44:b3:fe:
68:4f:38:c4:17:20:80:c9:21:06:f7:63:5f:f2:3a:86:cf:80:
10:f9:71:e4:9a:0e:3b:d8:0a:a7:9f:c1:cd:3c:76:ba:29:c2:
3e:17:0f:e3:ac:c4:09:24:17:18:5c:74:28:eb:52:e5:f5:e1:
f8:af:74:48:f4:b5:14:dc:97:99:42:62:01:67:82:80:e5:17:
98:3a:89:9b:97:7a:18:1d:74:48:93:50:5b:38:9c:84:53:ef:
25:e2:c6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:03:09 2025 by rpki-client