Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0xGQ72H99w5JJ4r035hNI9ecSiw.roa
File: 0xGQ72H99w5JJ4r035hNI9ecSiw.roa (raw, json)
Hash identifier: TmIMq9WnskItkWkHTNkL16Es+u/Lif4lojlXGuCRP9c=
Subject key identifier: D3:11:90:EF:61:FD:F7:0E:49:27:8A:F4:DF:98:4D:23:D7:9C:4A:2C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0189D5974C4516D6067455E3EF5D0D7AA8FA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0xGQ72H99w5JJ4r035hNI9ecSiw.roa
Signing time: Tue 08 Aug 2023 14:40:09 +0000
ROA not before: Tue 08 Aug 2023 14:40:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41177
IP address blocks: 146.120.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:97:4c:45:16:d6:06:74:55:e3:ef:5d:0d:7a:a8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 8 14:40:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d31190ef61fdf70e49278af4df984d23d79c4a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:56:5e:3d:34:4f:9b:2c:6f:56:b7:4b:9b:
af:ce:66:51:bb:d1:35:7b:81:00:f6:1d:98:ea:98:
3c:b5:c4:1f:09:38:7b:cd:03:fe:cc:05:49:5b:bb:
4a:5f:b0:ef:75:44:7f:4e:f8:14:ec:57:2e:b3:5b:
2d:7e:81:d0:4b:f7:41:09:d3:a5:27:1a:87:49:6f:
3c:5b:aa:81:9f:8c:56:75:31:a5:7e:49:60:f6:67:
3d:7f:f7:58:78:a6:df:d2:4e:19:0a:c2:e9:b9:46:
1a:46:e3:7a:48:eb:be:15:e4:1b:e6:56:c3:54:e8:
26:32:1b:1c:dd:30:c2:13:8d:9f:62:53:b5:a1:de:
e9:4f:9e:6b:87:e3:53:24:e2:08:25:74:e1:e2:ba:
4c:d9:c2:5a:58:09:37:36:7c:e6:1c:9c:17:2a:ad:
a6:61:37:fd:14:09:68:23:87:8c:4c:d8:c7:95:dc:
14:75:9a:e9:27:79:e4:3f:14:e3:be:b5:fa:d9:76:
06:2d:9c:f1:75:0f:4e:ea:ff:1d:46:c2:ca:ea:97:
7e:59:76:55:e5:a1:c4:d6:db:ac:d2:98:cb:aa:bd:
16:d4:89:ab:65:16:ef:1b:44:f1:ff:f2:3b:a8:df:
a4:9f:81:e7:85:d2:72:9a:4f:53:bd:f9:59:9c:3e:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:11:90:EF:61:FD:F7:0E:49:27:8A:F4:DF:98:4D:23:D7:9C:4A:2C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0xGQ72H99w5JJ4r035hNI9ecSiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.102.0/23
Signature Algorithm: sha256WithRSAEncryption
10:c4:dd:f9:b7:1f:f6:4a:30:e9:39:59:1a:1d:37:f1:62:42:
7c:24:ee:de:d6:86:ea:3f:cf:a8:23:da:4d:fb:dd:3d:4b:6d:
80:23:cd:08:db:00:ab:46:7a:d7:e3:78:24:7e:ea:c6:5f:8a:
9b:ea:03:17:48:67:06:54:20:6c:60:04:73:8a:cc:23:37:69:
17:e9:6e:71:8e:62:11:22:ab:16:8e:5e:01:8e:15:66:42:ba:
0c:d6:8f:c1:a6:23:74:b7:9e:e5:8a:e7:08:ce:14:26:32:8f:
02:0a:c9:4d:0b:e6:86:fb:4c:7f:68:39:87:64:cf:9d:a4:eb:
01:c0:b9:48:88:fe:a1:66:08:4b:86:59:fa:98:41:78:31:05:
35:b9:c4:e1:78:75:8d:c5:ed:d8:ca:ef:02:e7:15:d4:e2:91:
ef:c7:24:0e:1a:bc:c5:d9:d8:cd:6a:98:0d:04:5c:ba:f5:ce:
53:5f:aa:43:30:29:4a:64:82:bf:28:14:38:dc:01:30:a5:db:
d6:5d:41:75:c1:75:dc:d3:b0:82:fe:98:e5:2e:97:eb:c1:d8:
ff:4a:54:4d:3b:54:cf:61:c8:93:14:00:a4:ef:e3:c8:ee:5c:
30:27:01:ea:85:7e:e3:09:7f:3b:a0:2f:92:fa:f3:f3:9e:33:
3a:1b:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:12 2025 by rpki-client