Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2M1g5Pi7gqLmlFmL_21RzXDR6xA.roa
File: 2M1g5Pi7gqLmlFmL_21RzXDR6xA.roa (raw, json)
Hash identifier: e5kyUQ90uP9f/h/Vhh6REKfej2NLtclRxGMwkuK6VfE=
Subject key identifier: D8:CD:60:E4:F8:BB:82:A2:E6:94:59:8B:FF:6D:51:CD:70:D1:EB:10
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709589ED9B10267CEDBE4E558860434B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2M1g5Pi7gqLmlFmL_21RzXDR6xA.roa
Signing time: Mon 02 Jan 2023 03:45:26 +0000
ROA not before: Mon 02 Jan 2023 03:45:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197433
IP address blocks: 146.120.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:89:ed:9b:10:26:7c:ed:be:4e:55:88:60:43:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8cd60e4f8bb82a2e694598bff6d51cd70d1eb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f6:13:4d:1b:c2:14:a2:51:c9:dc:ff:58:5d:
b2:38:ca:cd:6f:5f:ed:65:76:2e:88:9a:ac:69:5e:
fb:c3:fc:8d:14:03:8c:c3:bd:bd:58:96:c7:f2:0d:
ae:77:b6:5c:a7:cc:f0:b9:fa:13:28:cf:59:a7:d4:
cc:4a:95:24:64:1d:84:39:1a:ba:39:08:b1:39:dc:
57:6a:3d:e3:e7:52:61:47:44:16:dd:57:89:47:48:
48:54:c5:df:6c:6f:aa:c7:07:5d:c3:8f:60:3c:ac:
fb:61:85:de:32:e0:8d:86:cc:2d:ea:f3:27:63:0d:
e8:b5:47:d1:3d:45:3d:88:76:64:62:45:d1:5b:18:
ec:27:65:aa:33:be:4d:07:24:e0:1f:18:fa:23:76:
09:e5:db:2f:46:05:ef:51:c8:4c:29:42:ed:01:ea:
00:f3:31:19:cd:ea:da:c4:5c:31:59:fc:54:71:7d:
1b:d0:37:4a:28:90:c0:98:b8:7e:38:5c:0f:82:5c:
d9:87:8c:32:02:ff:90:fc:3c:88:64:db:91:c0:da:
35:70:90:05:3c:46:23:c7:fb:7c:8e:ed:32:0c:83:
49:9d:b7:7a:d6:7f:7e:10:f4:2f:43:ff:5b:0e:38:
65:28:97:d5:b7:06:6d:69:a9:7c:7e:19:8a:9b:9f:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CD:60:E4:F8:BB:82:A2:E6:94:59:8B:FF:6D:51:CD:70:D1:EB:10
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2M1g5Pi7gqLmlFmL_21RzXDR6xA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.124.0/22
Signature Algorithm: sha256WithRSAEncryption
54:95:7b:3a:13:f2:cf:23:91:14:ca:c2:2d:15:65:8b:c3:e4:
58:bc:99:e0:38:7c:a8:d6:11:46:31:55:e2:37:94:f4:6c:ca:
76:80:d1:78:9a:e0:3c:bd:ca:35:af:86:2c:f1:5b:b4:d9:86:
fd:b7:69:10:a7:ac:8c:59:3d:0e:e6:a6:e4:c4:3d:2d:f5:1b:
65:bc:32:01:f3:5a:80:ea:58:a8:74:c2:f5:b1:25:e4:f9:0b:
63:4c:45:10:3b:cb:10:a4:26:df:98:ab:4d:2c:2e:82:0a:d6:
b4:00:78:16:e4:dc:0b:b8:22:28:f5:3e:c7:f0:4b:3a:de:d0:
bc:6a:ec:58:4a:ef:58:c4:03:35:ae:f5:b0:d2:78:70:16:66:
91:49:6c:55:28:c6:70:17:55:02:c3:1e:4a:e5:3b:1b:f8:18:
32:6d:12:d2:64:f0:0f:20:f9:cd:d9:2a:1a:78:25:22:58:0e:
f8:61:c0:ee:b8:f4:56:8b:fd:3e:d3:34:01:b7:e0:cd:ef:a5:
f2:8a:f6:41:2f:43:98:1c:c8:7a:2b:66:2d:4f:53:aa:fb:81:
d4:00:61:34:cb:45:07:87:4b:93:69:48:20:31:0d:50:c7:4b:
4a:30:26:2b:23:e6:a9:d6:87:4d:9d:cb:6c:be:95:07:5b:3c:
90:82:2f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:07 2025 by rpki-client