Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WG0FBLt7WNjFeIfHkZSTfLCtfos.roa
File: WG0FBLt7WNjFeIfHkZSTfLCtfos.roa (raw, json)
Hash identifier: msGJF14ReUNHojwYSmBriual7lT3cu5cFTDtagae7VY=
Subject key identifier: 58:6D:05:04:BB:7B:58:D8:C5:78:87:C7:91:94:93:7C:B0:AD:7E:8B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0184C884E0A9D186FAB839EC40F443CA224F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WG0FBLt7WNjFeIfHkZSTfLCtfos.roa
Signing time: Wed 30 Nov 2022 12:31:02 +0000
ROA not before: Wed 30 Nov 2022 12:31:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39523
IP address blocks: 146.120.216.0/22 maxlen: 24
146.120.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c8:84:e0:a9:d1:86:fa:b8:39:ec:40:f4:43:ca:22:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Nov 30 12:31:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=586d0504bb7b58d8c57887c79194937cb0ad7e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3c:6d:38:68:40:ad:50:91:36:27:be:a1:19:
75:56:8a:d6:c0:c4:8b:51:84:cb:48:fe:ec:e4:da:
d9:dd:0d:1b:3c:db:e1:c4:0e:54:d1:7f:de:b5:34:
0d:b7:d2:17:1b:bb:64:e1:c9:14:bd:4b:aa:64:8d:
ae:ad:1c:d7:d0:64:a0:16:a5:24:e6:20:c6:36:84:
e9:b2:9e:4d:29:cc:f1:8d:68:d8:f3:2e:49:54:4b:
d9:b8:cc:17:aa:68:7b:a1:36:77:b8:9d:cc:46:f0:
b6:18:e6:07:51:c7:46:ef:70:90:fd:99:08:f3:74:
15:41:f0:af:1b:7f:a5:5c:3e:8b:9b:6c:a3:07:fe:
dc:48:cf:32:7d:5a:44:ea:c4:29:19:21:f0:c1:a6:
53:b4:e1:31:5c:18:aa:ee:2b:64:90:20:38:35:4b:
64:19:ba:92:9e:7e:ae:6f:fe:b4:95:bf:fa:63:b6:
e4:a6:a4:d3:b0:eb:96:87:8f:6e:61:b8:30:9a:ae:
e1:1e:b4:ac:e9:54:e0:32:b2:89:2f:3d:aa:96:28:
1a:f5:b9:30:ad:c1:58:bf:05:2c:de:cf:41:45:e9:
c4:65:f3:89:56:d3:97:13:e6:e7:6e:5c:fa:b9:98:
e6:e3:58:8a:14:f9:e6:ce:80:e8:15:bd:7f:63:b5:
05:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6D:05:04:BB:7B:58:D8:C5:78:87:C7:91:94:93:7C:B0:AD:7E:8B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WG0FBLt7WNjFeIfHkZSTfLCtfos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.215.0-146.120.219.255
Signature Algorithm: sha256WithRSAEncryption
2a:e5:be:ed:0d:9b:aa:d5:92:a8:1f:60:65:14:46:be:4d:a2:
3e:07:27:ed:0b:30:d3:22:08:eb:32:9a:83:48:88:14:83:c7:
30:c9:b5:7c:ba:37:e0:c4:97:54:a4:ff:1f:15:0b:7a:bf:dd:
aa:74:a6:81:c9:a9:54:1e:65:8f:51:ec:37:a2:11:41:b2:1f:
35:01:93:af:31:cd:57:a2:43:d9:ab:c1:cc:d1:a0:22:ea:09:
8f:ff:fe:0a:f5:e9:0c:3b:bc:97:5e:f4:d0:ad:73:a9:00:1f:
8f:7a:18:53:bd:1a:9d:17:44:d9:a5:df:cf:bb:c6:12:34:ed:
4b:5e:2b:a8:e4:c4:f4:62:f0:a0:c6:d7:95:c1:b9:66:22:2a:
2c:70:0e:7c:d8:e0:89:ef:9c:d7:09:6d:c5:9c:d5:86:a3:48:
c7:eb:72:8b:99:c3:af:14:f0:77:bb:fa:4c:ab:44:c0:45:c6:
bc:b2:47:bf:0b:5f:58:fc:b3:b8:a9:b5:5e:dc:31:a1:51:42:
27:95:ab:58:5d:7b:6d:a6:5d:8b:ed:f8:53:8a:28:40:3d:2d:
18:94:dd:83:59:7c:74:86:ac:96:e4:b5:8d:18:a8:c0:c9:72:
3d:1b:00:b3:dc:bb:89:0f:57:ad:f5:82:ce:6d:62:fd:2f:ac:
b9:08:9a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:56 2025 by rpki-client