Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WMvaClH37JwAtT8-CQ9dDcVn5Xw.roa
File: WMvaClH37JwAtT8-CQ9dDcVn5Xw.roa (raw, json)
Hash identifier: oqfY4AN5nJgd+amfb6wXaMSbQLM9Lz98RjqMWBvpRIo=
Subject key identifier: 58:CB:DA:0A:51:F7:EC:9C:00:B5:3F:3E:09:0F:5D:0D:C5:67:E5:7C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01942590084AFB7BCAA5C743F9486D279028
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WMvaClH37JwAtT8-CQ9dDcVn5Xw.roa
Signing time: Thu 02 Jan 2025 05:49:43 +0000
ROA not before: Thu 02 Jan 2025 05:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210616
IP address blocks: 93.171.184.0/22 maxlen: 24
146.158.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:08:4a:fb:7b:ca:a5:c7:43:f9:48:6d:27:90:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58cbda0a51f7ec9c00b53f3e090f5d0dc567e57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:25:39:e7:b5:26:6c:db:c3:05:0c:4a:7c:a3:
9e:04:4b:3b:16:a0:b0:9d:b2:84:3c:3c:39:4e:d5:
32:fc:e3:c4:fa:fa:00:55:e2:83:56:c2:c2:30:46:
31:a6:48:9d:24:5e:01:84:78:68:3d:f0:dc:e8:4b:
98:fb:2e:a6:8c:83:7f:5b:ce:23:29:de:be:3a:9e:
10:5b:11:f7:ac:0a:c2:e0:41:d7:d9:bb:10:a4:24:
3c:09:cf:b9:5d:67:3f:4b:46:1c:d0:2e:7b:61:3c:
d5:eb:f5:9e:c1:ef:00:44:a3:21:a1:0d:46:86:14:
a0:4d:99:99:e4:28:4f:16:b4:72:e8:9d:c9:4b:ac:
1f:e8:a3:e1:4d:17:65:85:2f:2b:19:d4:29:8c:b6:
87:a9:e5:d4:11:6e:81:89:04:c2:6f:89:12:76:57:
30:59:1b:27:09:5b:c7:10:4c:4d:56:7c:63:45:a6:
20:89:bf:08:6c:b4:37:74:0d:8b:68:58:b8:30:81:
58:fd:ad:6a:e5:3d:3b:cb:1b:2a:4e:3f:af:2e:cb:
e6:33:a7:cd:56:5b:80:e3:f8:e8:8a:fd:48:ec:d4:
5d:3f:af:7a:5f:2e:7f:c2:77:a4:ed:03:40:60:3c:
3a:fa:a9:98:c4:17:e8:e2:1a:5f:56:86:3f:03:2f:
40:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CB:DA:0A:51:F7:EC:9C:00:B5:3F:3E:09:0F:5D:0D:C5:67:E5:7C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WMvaClH37JwAtT8-CQ9dDcVn5Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.184.0/22
146.158.96.0/19
Signature Algorithm: sha256WithRSAEncryption
22:eb:9f:43:a5:63:9e:13:d3:6f:d3:5b:ed:4b:5c:8e:06:e4:
34:af:dd:45:cd:e3:ce:5d:0e:9f:00:92:07:d6:87:2d:72:be:
e5:00:a3:40:62:e4:e6:c7:b7:35:b9:a3:a3:5e:bf:74:32:55:
f5:0e:71:b1:c6:0b:f4:d5:52:6d:38:e9:8a:fd:6b:85:0a:6d:
01:69:72:6e:10:85:5e:cd:77:1a:23:69:09:b4:90:12:8f:7f:
cf:b2:d3:4c:1b:88:03:49:db:6f:81:ae:d9:7c:12:2b:17:e7:
11:47:a0:5d:72:5f:b9:b8:d6:fe:b1:82:76:b5:c5:f5:16:2a:
49:5d:12:6f:1c:e3:75:0e:01:a1:56:e0:bd:fc:f7:28:1a:dc:
da:53:03:f3:d0:75:ee:16:da:23:17:69:65:55:81:ac:76:77:
0f:e2:32:e8:47:df:ad:97:09:4a:e4:d4:c1:54:d7:18:82:06:
2b:4a:fe:81:1d:e3:ea:9a:3a:62:f8:08:ba:83:21:70:bb:8f:
5e:68:91:d1:ed:71:e2:b8:a9:9d:7b:e0:df:d7:32:39:27:6c:
3e:4c:70:f3:07:ec:3e:6e:53:df:5b:80:72:fa:88:e2:ea:77:
b4:3a:b2:f9:18:cb:de:01:b8:d1:f1:8a:bf:97:ad:8f:05:7c:
5c:e9:d3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:26 2025 by rpki-client