Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/GsWSBNzv988JIATL2hLeFJWT77g.roa
File: GsWSBNzv988JIATL2hLeFJWT77g.roa (raw, json)
Hash identifier: Ly0cVrt55lxuS7TrsXNQWpKEZ4VseFVE3p+bnlbkQgs=
Subject key identifier: 1A:C5:92:04:DC:EF:F7:CF:09:20:04:CB:DA:12:DE:14:95:93:EF:B8
Certificate issuer: /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial: 0194206864109F7ECD75EBE71BDC23A7113D
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/GsWSBNzv988JIATL2hLeFJWT77g.roa
Signing time: Wed 01 Jan 2025 05:48:19 +0000
ROA not before: Wed 01 Jan 2025 05:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.229.146.0/24 maxlen: 24
185.229.147.0/24 maxlen: 24
2a0d:d600::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:64:10:9f:7e:cd:75:eb:e7:1b:dc:23:a7:11:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
Validity
Not Before: Jan 1 05:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ac59204dceff7cf092004cbda12de149593efb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:4e:02:e9:a7:51:5e:42:b2:86:ae:0e:28:
4a:f0:41:ec:8b:19:33:1e:c4:7c:a4:e3:92:a8:c4:
4e:f5:7d:9c:52:b2:6a:b7:a9:81:0c:02:26:8e:6a:
2b:cb:ab:a8:1b:1c:38:4b:d3:cc:cb:ac:e2:13:9f:
80:0c:a8:cf:ff:5c:b7:e7:95:0b:cb:45:c4:48:f4:
cf:d5:6b:10:1b:4d:c6:68:46:8f:ee:a6:5f:e6:c5:
7e:fc:55:3f:52:91:d8:40:e7:36:98:bf:8e:af:79:
b5:e9:19:2a:b4:ca:c8:35:70:c4:c2:f1:d4:8c:32:
27:2f:85:30:bd:f6:ce:27:54:94:f8:ef:53:be:ff:
3a:07:b8:1b:d5:d0:61:f3:db:2e:6f:7e:0f:97:fb:
37:c1:5f:9a:55:83:c2:87:29:6a:94:05:e0:78:56:
5b:f1:89:3f:b2:1a:62:ba:29:5e:7c:ee:7c:54:6f:
6b:48:e2:50:13:6b:22:44:98:30:97:23:27:97:a3:
55:d9:72:80:bd:f5:7f:7e:12:37:e7:e9:5a:f7:51:
e0:ae:10:e0:2c:0c:fe:a0:5e:c8:bb:ef:7c:19:7d:
0b:b7:87:e7:10:05:e4:14:34:3a:29:cf:c4:7f:49:
56:ea:83:97:3f:51:f6:e1:a9:ec:75:4b:2b:6c:5d:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C5:92:04:DC:EF:F7:CF:09:20:04:CB:DA:12:DE:14:95:93:EF:B8
X509v3 Authority Key Identifier:
keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/GsWSBNzv988JIATL2hLeFJWT77g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.146.0/23
IPv6:
2a0d:d600::/32
Signature Algorithm: sha256WithRSAEncryption
32:f8:78:37:dd:02:a4:b4:1c:c0:63:50:18:32:50:f3:61:c3:
f9:b4:9b:a1:6d:fd:79:b0:9b:ed:93:ab:13:e6:36:eb:d2:29:
52:6f:c9:39:0d:e1:a5:8b:14:b8:9b:a0:fe:ef:82:2c:71:12:
1c:49:3d:56:9d:0b:f4:71:c4:69:fb:49:26:63:d9:75:13:59:
c5:c7:ed:85:b6:a1:70:e1:3f:78:4b:90:e4:99:da:d4:f9:00:
de:02:41:45:fa:19:e1:92:90:da:84:68:32:e2:38:28:4b:46:
8d:00:e6:d4:e8:c8:02:70:6a:cf:76:c5:a7:fd:ec:e9:4f:dc:
17:1a:98:ad:d4:44:9c:44:cb:18:6c:bb:13:25:7f:3a:07:02:
74:15:54:21:42:00:6e:b4:d1:9a:15:a6:a9:bc:98:f1:54:49:
e6:94:c2:be:4a:4d:e3:a4:a1:86:b3:9d:f6:57:74:a7:5f:c9:
bf:48:63:69:c4:d2:27:e1:5f:ac:01:55:72:53:54:d5:ee:d6:
33:2b:e5:9b:c5:77:b7:fa:53:98:8c:1c:11:a1:ef:76:d7:71:
1d:a9:69:c5:c9:28:a6:d2:c8:fb:71:b9:18:f6:20:cf:e0:0c:
61:22:54:f8:37:8f:8f:90:68:a3:cb:61:77:ce:41:60:f1:a8:
8c:fe:33:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:55 2025 by rpki-client