Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/GLmcqC7AFCgiN8STCjByIVn2swc.roa
File: GLmcqC7AFCgiN8STCjByIVn2swc.roa (raw, json)
Hash identifier: KxIst2U1PzlEnDyIklAwk/CYIBngWDQLcQGbb+ZSGQk=
Subject key identifier: 18:B9:9C:A8:2E:C0:14:28:22:37:C4:93:0A:30:72:21:59:F6:B3:07
Certificate issuer: /CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Certificate serial: 032B8F69
Authority key identifier: 58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/GLmcqC7AFCgiN8STCjByIVn2swc.roa
Signing time: Sat 01 Jan 2022 11:04:28 +0000
ROA not before: Sat 01 Jan 2022 11:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139660
IP address blocks: 185.139.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53186409 (0x32b8f69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58bf7f3ad53f29a3c43f0ad82017a05368c0104a
Validity
Not Before: Jan 1 11:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18b99ca82ec014282237c4930a30722159f6b307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:d0:55:c5:d9:d0:29:09:20:f2:b2:5c:4e:
ff:07:0f:d2:f0:0e:ae:71:32:f5:01:4f:7b:a2:c2:
dd:df:f4:2d:5f:17:18:8b:50:66:68:32:7a:f2:a2:
b1:d9:c8:39:95:2a:e5:cf:ef:d9:db:5d:64:05:d2:
2f:3b:6e:e1:32:7c:9e:e6:53:7e:62:58:20:9b:cb:
42:fa:a0:98:1a:6b:7f:b0:ec:35:04:be:f4:9c:c7:
44:f0:92:de:25:f8:3b:2c:60:48:71:80:ce:ca:81:
f5:12:ff:c5:e6:0f:3b:69:c0:07:21:cd:98:72:fa:
ad:c8:85:89:63:15:2e:b8:1a:c0:b6:fa:4e:71:2e:
a1:19:d6:19:b1:31:e1:74:bd:78:2d:98:40:47:d8:
a9:7f:5b:a7:89:60:da:50:5e:07:3c:01:44:96:39:
55:fd:91:30:4c:d7:12:01:67:c3:11:2a:e3:5f:40:
ad:2f:63:85:38:d0:98:12:5d:b5:c3:91:03:2e:74:
5b:69:14:a4:ff:dd:27:ea:86:e4:66:d1:4d:a8:49:
84:d4:60:be:d5:22:c5:8a:7c:63:f8:b0:bb:4c:c6:
71:bd:73:34:15:85:bd:bd:84:be:79:da:9c:04:ca:
e8:a1:26:e6:c7:ef:1d:58:b2:76:1b:bf:a1:15:d6:
39:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B9:9C:A8:2E:C0:14:28:22:37:C4:93:0A:30:72:21:59:F6:B3:07
X509v3 Authority Key Identifier:
keyid:58:BF:7F:3A:D5:3F:29:A3:C4:3F:0A:D8:20:17:A0:53:68:C0:10:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL9_OtU_KaPEPwrYIBegU2jAEEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/GLmcqC7AFCgiN8STCjByIVn2swc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/364b94-6ca4-4f9a-88a5-8b3d527c49e4/1/WL9_OtU_KaPEPwrYIBegU2jAEEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.139.24.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:58:0c:86:11:fb:24:04:0c:40:02:3b:21:5c:1f:d4:6e:2a:
83:6c:78:0f:51:25:ae:42:81:0a:05:72:b2:9f:c8:fe:37:5d:
ad:ec:6c:aa:04:71:06:be:95:e4:3a:1e:05:e4:df:21:7f:c0:
dd:19:15:a5:a9:3d:76:28:52:4f:d2:f8:31:88:91:eb:a9:35:
77:d1:0d:31:5a:f3:41:38:68:c3:8e:07:14:f0:81:d6:48:91:
c5:2d:67:a8:c6:45:ca:f0:5a:4c:30:d3:40:74:96:b5:7e:f4:
5e:8c:d4:f3:b4:10:51:63:77:9b:9f:34:c9:ec:a5:d4:ed:ff:
63:d2:1d:a0:7c:6b:a6:ea:83:ed:0f:6b:2b:4a:8e:92:c1:67:
88:c6:62:a6:91:af:25:8e:75:25:1a:ed:c2:44:0e:36:ba:ce:
d7:02:09:a4:17:db:f0:80:f1:45:08:8c:17:b4:fa:a1:1b:27:
0a:4e:24:57:32:13:45:52:c3:ef:1b:34:67:f1:73:6f:cc:1d:
1d:e7:a9:58:d1:37:b3:db:53:3f:80:4d:43:b7:7b:1c:56:85:
a2:18:c2:52:9b:9d:14:8f:28:e2:e7:31:12:23:1b:42:ef:7e:
f8:a1:5e:d0:2e:23:12:e3:74:13:30:70:4e:f9:31:b1:3f:85:
bf:7e:85:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:38:51 2025 by rpki-client