Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/wWgy6tPrmX20hsp3Ge2zZ1vE9pY.roa
File: wWgy6tPrmX20hsp3Ge2zZ1vE9pY.roa (raw, json)
Hash identifier: 7dXM0qHqqZLlmDBaz+dlllsWhhU1hYVxBNrpj8n8yBg=
Subject key identifier: C1:68:32:EA:D3:EB:99:7D:B4:86:CA:77:19:ED:B3:67:5B:C4:F6:96
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 0188BDCC06900C737401FA0462F278D78341
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/wWgy6tPrmX20hsp3Ge2zZ1vE9pY.roa
Signing time: Thu 15 Jun 2023 06:44:04 +0000
ROA not before: Thu 15 Jun 2023 06:44:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 85.237.209.0/24 maxlen: 24
85.158.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:cc:06:90:0c:73:74:01:fa:04:62:f2:78:d7:83:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jun 15 06:44:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c16832ead3eb997db486ca7719edb3675bc4f696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fa:01:b9:a0:15:38:a5:3e:9a:9f:fd:ea:69:
ba:5c:c0:98:00:7b:8f:55:0c:c5:1e:aa:48:35:ba:
cb:63:c5:cd:98:64:a0:a6:bc:a9:80:4d:ae:16:cd:
33:3e:37:b7:6c:ab:2b:23:9c:8f:50:02:0a:57:07:
74:3f:7b:b2:fb:7e:40:9f:01:83:17:46:97:a4:f6:
a1:ae:77:d7:35:41:80:73:93:fe:86:c7:40:54:be:
dd:20:51:91:66:1b:eb:a7:bb:c5:d0:ea:4b:6e:28:
e9:c3:66:fd:b9:58:c5:7c:ed:c4:07:1c:a1:d9:8f:
b4:0b:b9:eb:f1:3d:19:71:e6:01:dd:fe:87:4d:9b:
c5:a5:79:cf:42:39:b2:bb:f0:2c:2e:ba:a4:50:b5:
b0:b0:6d:6a:0a:4c:e5:7a:2e:b5:9f:4d:ee:05:0b:
4b:d8:20:1d:74:ea:d0:81:c5:1a:1d:92:c2:e0:d6:
8f:9e:0f:4d:9a:24:6f:55:01:9c:5c:aa:09:14:e5:
30:54:4a:22:4c:ca:1d:39:7f:5c:22:a4:71:9a:f3:
11:cc:95:aa:e0:26:a3:4e:b7:ca:15:f6:f7:42:1b:
7f:c8:fa:2f:1f:35:6b:2b:04:e9:55:29:eb:db:9e:
4d:63:8a:95:fb:56:52:99:03:3a:39:e3:55:c8:05:
e0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:32:EA:D3:EB:99:7D:B4:86:CA:77:19:ED:B3:67:5B:C4:F6:96
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/wWgy6tPrmX20hsp3Ge2zZ1vE9pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.59.0/24
85.237.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:27:db:52:4a:42:f3:ba:50:04:60:13:02:1e:01:39:2f:e4:
6c:2f:b4:93:72:4d:2f:9e:0e:45:63:9a:5a:c9:0a:6a:5d:27:
25:53:82:8b:a5:a6:e9:fd:d2:c4:9f:bc:47:26:a6:e1:59:50:
8b:21:8a:4c:a3:8c:d9:e1:5b:c2:26:c0:44:76:d0:bc:41:2f:
31:64:c4:23:9b:59:56:9a:61:89:60:fa:88:a5:be:a4:64:b9:
84:d6:49:54:81:23:9c:2e:b8:86:2c:aa:6f:f0:5e:b9:91:62:
70:4c:cb:69:0b:f7:09:c8:b4:f9:d1:5b:96:44:0b:03:fa:e4:
6e:8c:6f:2d:0a:60:98:d3:03:23:5a:9d:62:c6:10:19:dc:f9:
29:9d:5c:30:24:7a:d4:36:eb:67:08:86:7e:12:0c:94:2e:0c:
84:ec:71:70:57:49:38:9b:df:bf:a1:7e:5a:5e:32:56:02:26:
4c:e2:84:23:ae:29:9d:10:56:09:c2:07:aa:ad:fc:88:d1:4c:
27:30:84:6e:8d:dd:2d:f5:6b:d3:df:5d:27:8e:44:36:42:ef:
d3:f0:80:b7:d7:16:7c:7a:03:a3:6e:d0:a4:52:98:ac:84:a2:
41:1b:92:de:58:0c:8e:5d:b6:8f:37:2d:80:3f:8b:82:8c:30:
05:0a:f7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:57:10 2025 by rpki-client