Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WBKKZ_A6sJRkECeOUkNfw5mSfmo.roa
File: WBKKZ_A6sJRkECeOUkNfw5mSfmo.roa (raw, json)
Hash identifier: RwzRzT4UXVl33hepmHCiFO2Qo/E0SKzq3+R7vq7a6qA=
Subject key identifier: 58:12:8A:67:F0:3A:B0:94:64:10:27:8E:52:43:5F:C3:99:92:7E:6A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD2BD122039C6BF83075701C07E84
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WBKKZ_A6sJRkECeOUkNfw5mSfmo.roa
Signing time: Thu 02 Jan 2025 05:49:30 +0000
ROA not before: Thu 02 Jan 2025 05:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60573
IP address blocks: 93.170.2.0/24 maxlen: 24
95.46.77.0/24 maxlen: 24
146.120.172.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d2:bd:12:20:39:c6:bf:83:07:57:01:c0:7e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58128a67f03ab0946410278e52435fc399927e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:f1:2f:6b:93:69:b5:58:3e:da:af:b5:07:
a7:77:16:68:67:9d:9b:81:bf:6e:3f:52:b7:2a:9c:
e8:24:2b:af:32:d8:c2:66:0e:da:1b:31:9d:b2:93:
43:eb:47:b7:da:06:d1:5c:2f:f1:94:bf:1f:41:f0:
4d:11:a0:59:a6:7c:62:12:ad:d0:66:3f:57:96:12:
b4:57:18:81:8d:c3:ee:a5:86:58:0f:31:d7:c9:eb:
4c:6b:e7:08:55:d8:02:a8:d6:3b:28:be:30:9c:6f:
24:38:6f:39:cd:b4:83:a8:f4:7e:10:84:6e:35:be:
33:37:4d:f5:19:f1:fb:79:f1:df:d3:67:88:ce:0a:
94:fb:55:6a:65:c8:fa:e0:bc:dd:bc:23:db:2d:1c:
72:35:1f:62:69:32:db:9b:07:21:19:01:21:0a:cc:
1e:16:7c:9d:cd:75:97:5c:fe:27:6d:a1:62:c9:88:
41:53:43:13:5c:31:38:fa:fa:6b:b8:cc:51:a9:c3:
07:58:f4:a1:7d:0f:94:90:89:ab:09:b0:e9:cc:14:
92:d4:9e:70:bf:0a:b6:35:0f:ca:15:af:aa:47:cd:
5b:c1:14:77:41:da:47:c1:e3:9d:a9:37:c7:3f:ed:
b4:bf:85:ed:ca:d7:0e:0a:0b:fa:b7:56:d5:e9:f4:
dd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:12:8A:67:F0:3A:B0:94:64:10:27:8E:52:43:5F:C3:99:92:7E:6A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WBKKZ_A6sJRkECeOUkNfw5mSfmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.2.0/24
95.46.77.0/24
146.120.172.0/23
Signature Algorithm: sha256WithRSAEncryption
97:55:b2:62:60:fd:38:93:9d:1e:4d:a3:c3:e4:1e:42:d3:df:
5e:ad:43:2f:09:a4:46:e2:e0:38:f8:88:a2:6b:96:1c:fc:eb:
a0:6d:9e:c1:31:ef:04:a2:b8:71:c5:45:02:58:68:a2:88:8d:
03:1b:3f:74:06:ea:2a:8f:13:5a:3b:9b:79:61:19:ff:9c:ef:
6d:fc:8e:04:9d:2a:e0:66:e5:e0:03:1f:c8:ee:7e:08:16:bd:
fc:b8:c7:52:f3:45:a1:5e:81:f9:83:59:fb:0d:78:9d:dc:e8:
54:b7:23:4b:3e:57:01:4e:05:d2:ce:e2:0f:72:25:24:f5:c2:
d3:8b:61:97:30:9c:43:3f:69:e6:8c:50:e8:dd:d9:12:0e:12:
bd:a9:c4:ac:ef:9e:e8:e1:e2:55:66:dd:59:fb:b8:c6:12:c7:
c3:f0:37:55:0e:ca:c5:0e:7d:ab:dc:e6:1f:6e:15:e2:6f:7c:
49:9b:45:70:b7:cd:7f:42:e0:24:41:c8:c3:84:44:39:3f:d0:
54:34:89:13:95:ac:4c:24:be:e3:cc:aa:c9:6f:b8:48:6f:8d:
52:46:c4:84:bd:06:82:d1:a9:a7:0f:23:ca:15:9c:f0:94:ef:
9a:ba:33:52:d8:4c:02:ca:5c:74:53:9c:d5:35:a9:a4:ef:2a:
c0:79:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:26 2025 by rpki-client on console.sobornost.net