Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/eGpgvaFgV-JBkNdbql3hGNw2pAA.roa
File: eGpgvaFgV-JBkNdbql3hGNw2pAA.roa (raw, json)
Hash identifier: fd7vq530VSn96DGgKwoRre+/UxURYOEX1F4yrNOzgTY=
Subject key identifier: 78:6A:60:BD:A1:60:57:E2:41:90:D7:5B:AA:5D:E1:18:DC:36:A4:00
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 018B9E1B629D355403F7BD71AB6ADDFC8074
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/eGpgvaFgV-JBkNdbql3hGNw2pAA.roa
Signing time: Sun 05 Nov 2023 06:11:16 +0000
ROA not before: Sun 05 Nov 2023 06:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 185.93.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9e:1b:62:9d:35:54:03:f7:bd:71:ab:6a:dd:fc:80:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Nov 5 06:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=786a60bda16057e24190d75baa5de118dc36a400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:80:6b:1f:c0:d9:ab:44:73:45:03:f4:9e:1e:
3b:f9:e5:07:55:00:dd:9c:a8:f8:f0:02:37:f5:d9:
5b:3e:bb:74:83:4c:67:d3:d3:2e:6e:b9:00:e3:b9:
91:8e:ab:dd:43:05:7a:10:f9:c4:65:e9:d8:ef:6c:
f9:1f:2d:2b:da:4e:3b:ca:23:35:be:5d:31:65:07:
09:47:01:1d:d1:e1:65:f4:b5:4d:77:06:ee:11:5f:
76:8e:15:d5:f8:71:56:c7:16:dc:7f:58:c3:a6:77:
98:e4:5c:59:f5:b4:c1:14:f2:a0:20:67:48:3d:e1:
ff:44:cb:7e:bd:46:62:20:2f:dc:1d:09:1f:46:42:
2d:10:17:11:74:49:ac:c7:fa:be:05:2a:2a:8f:d8:
7c:3e:d7:db:82:2b:8f:54:d0:86:85:26:80:8f:b3:
47:8a:72:67:9e:02:bb:c4:39:39:dc:e1:37:f1:81:
5e:de:7e:bf:75:f5:2d:95:4d:f4:89:ed:63:fe:1e:
a1:41:65:28:95:c5:d2:d2:03:c8:08:c1:ec:2d:a5:
84:a9:68:3c:ad:17:f3:0f:3f:e6:58:79:38:67:fe:
c9:db:b1:5f:d3:3a:d9:29:b8:a5:13:e6:62:c2:f6:
38:db:20:e1:00:3f:07:af:47:a6:da:d0:e1:92:dd:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6A:60:BD:A1:60:57:E2:41:90:D7:5B:AA:5D:E1:18:DC:36:A4:00
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/eGpgvaFgV-JBkNdbql3hGNw2pAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.32.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:0c:fa:97:84:a7:8d:4b:1e:c3:60:75:97:3d:a7:76:c9:c7:
1c:d8:e3:c9:29:e4:ef:5e:2b:66:34:34:8a:83:57:5a:12:81:
2c:f8:4c:11:81:bc:28:f1:b8:79:9a:c5:04:23:58:9b:8f:06:
ce:aa:fd:1a:c5:20:3a:cd:5d:86:09:fe:47:74:b5:3d:9a:1c:
66:fe:e6:ec:52:80:36:87:10:ab:b3:8d:ef:40:d9:83:d4:ac:
f0:76:0c:5d:4d:6e:b8:83:75:57:29:59:a4:72:b0:4a:65:28:
f4:fb:7c:31:f4:5c:aa:f4:2e:c4:06:00:99:e8:ce:34:79:b9:
b0:34:42:90:29:64:1b:23:9a:0b:2e:ab:1b:c5:ad:cf:7c:06:
27:36:c4:29:df:7b:ba:f0:f7:66:29:61:8a:59:fa:0d:e6:7b:
a5:82:9a:a3:66:ad:14:42:0c:7e:2f:6f:93:f3:e1:01:d8:6a:
7b:59:4c:a9:b5:44:2d:6c:5b:c4:83:07:88:d7:5e:db:4e:d4:
33:b2:25:fa:1d:04:6b:b7:0a:b6:ff:a5:39:0f:04:27:70:aa:
15:05:05:c2:e5:f4:c1:5f:52:29:dc:e0:3e:8b:63:0f:0f:38:
17:3f:3c:a4:11:c1:bd:91:6d:79:4b:2f:e7:6f:a4:7f:27:31:
e8:29:9a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:55:11 2025 by rpki-client