Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4fNJNG1P5BCCRjo8Y4Rf_m-rCYA.roa
File: 4fNJNG1P5BCCRjo8Y4Rf_m-rCYA.roa (raw, json)
Hash identifier: 5CKICyvmPJeJP/MZ890vZpOYd+1nzKyN3ebVxj+DsAo=
Subject key identifier: E1:F3:49:34:6D:4F:E4:10:82:46:3A:3C:63:84:5F:FE:6F:AB:09:80
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F9B72677647464D7D1E979D93F8EF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4fNJNG1P5BCCRjo8Y4Rf_m-rCYA.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42518
IP address blocks: 146.120.64.0/20 maxlen: 24
146.120.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9b:72:67:76:47:46:4d:7d:1e:97:9d:93:f8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1f349346d4fe41082463a3c63845ffe6fab0980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:ff:69:26:3a:34:55:1a:7b:63:62:00:bc:
b9:02:4b:6c:22:d0:e6:a1:08:38:f2:18:1c:24:aa:
70:1e:68:c9:79:d5:5a:61:68:3d:f0:19:93:e9:6b:
e1:d3:51:98:1d:e9:9d:20:a8:ae:a7:d3:81:9b:8b:
3e:63:23:d6:69:b5:52:57:a0:55:68:5c:e0:c1:5f:
70:10:ac:7c:bb:6b:16:9d:06:16:38:6e:1f:d4:77:
fc:d5:e0:6e:2a:7b:53:3a:b8:94:b4:4c:78:c7:73:
b2:78:4a:cb:82:83:13:20:63:26:4f:19:a7:36:6d:
bc:20:7b:d5:e0:bc:c9:37:10:86:07:1b:d5:43:ce:
01:05:c2:c3:92:25:2e:5e:e4:9d:49:75:ad:d5:36:
6b:a0:ac:c2:07:c5:a8:8c:50:6b:52:d7:d2:e9:c5:
a7:90:ab:77:35:1d:0b:b2:c6:33:69:db:90:cc:6a:
1f:c0:4f:e4:52:43:b8:1b:6a:42:c8:13:0f:ab:2e:
85:08:64:7e:50:99:f5:38:2b:6d:c7:48:89:0e:d2:
c6:90:78:87:45:7e:74:0c:d4:c7:50:d4:f1:a6:78:
36:66:d0:da:15:a9:4b:03:a8:ab:17:de:de:cd:72:
0d:74:40:8f:31:58:b2:6f:49:a1:7f:50:34:2c:03:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F3:49:34:6D:4F:E4:10:82:46:3A:3C:63:84:5F:FE:6F:AB:09:80
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4fNJNG1P5BCCRjo8Y4Rf_m-rCYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.64.0-146.120.87.255
Signature Algorithm: sha256WithRSAEncryption
24:0d:a5:e3:f5:e7:cb:32:61:58:20:09:aa:2b:83:cb:91:26:
4e:f6:54:4d:1d:18:6a:e3:4b:5e:44:85:cf:d5:14:de:e3:65:
e7:92:60:62:0e:21:e5:0d:a7:9b:d8:81:a2:d2:78:bb:f5:af:
e3:00:bc:b0:35:c1:83:e8:09:d3:f0:00:81:fb:95:d3:82:39:
da:6d:49:62:78:bc:1e:02:57:3b:05:ca:4c:a7:28:8c:da:ef:
3a:e2:25:19:f1:06:6b:7e:7f:07:1a:2c:44:a2:c2:a7:ec:74:
b2:40:e1:2f:4b:33:93:3a:ab:5a:bc:46:08:b0:8a:6b:3f:c8:
48:0b:d5:50:dd:df:1f:0f:2e:8d:a8:b7:3e:56:27:53:3f:d8:
75:31:fe:b0:1c:5f:59:70:37:4b:3a:3f:36:a8:87:a9:0f:54:
2a:4b:b0:1e:3f:52:8e:09:e8:98:d5:e4:5f:b2:80:14:e0:9f:
c8:56:50:15:99:7c:50:cb:5b:17:0c:e1:27:bc:7c:b3:bc:29:
f7:f7:a8:27:21:88:d7:7f:5d:ad:24:78:5b:51:af:57:6f:0a:
6c:ce:de:b5:f3:ac:66:7e:82:91:3c:71:79:f4:bd:ec:95:6d:
87:e7:d4:76:d0:5d:29:44:19:20:28:d9:75:7e:10:d3:1b:af:
7a:95:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:28 2025 by rpki-client