Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4vPPJUdqHiA1gxM3eOogzhvtOz4.roa
File: 4vPPJUdqHiA1gxM3eOogzhvtOz4.roa (raw, json)
Hash identifier: gIfCC4BSlvyCpZ4RrCQLcTJ4qGJGEAm8acZ31X9qmzk=
Subject key identifier: E2:F3:CF:25:47:6A:1E:20:35:83:13:37:78:EA:20:CE:1B:ED:3B:3E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FE3C1073899374BCEB1086004D5C1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4vPPJUdqHiA1gxM3eOogzhvtOz4.roa
Signing time: Thu 02 Jan 2025 05:49:34 +0000
ROA not before: Thu 02 Jan 2025 05:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64461
IP address blocks: 146.120.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:e3:c1:07:38:99:37:4b:ce:b1:08:60:04:d5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2f3cf25476a1e203583133778ea20ce1bed3b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:be:32:7d:42:66:d2:0c:f1:a9:c0:db:7d:
32:75:2f:61:ac:25:da:8b:ba:b5:c3:49:6c:0f:4a:
cd:1d:b0:d1:22:4b:27:e7:31:30:c3:41:ed:9e:cf:
cb:1e:ba:1b:11:33:66:b7:bf:09:18:b4:96:33:77:
c7:00:bd:c6:9c:07:64:92:0c:19:b1:7f:9c:a0:4d:
31:1e:c0:fc:51:3c:c0:71:5d:87:3d:55:df:e6:11:
6f:7d:35:2e:00:d7:b4:db:86:a0:2c:f9:2c:ce:fb:
94:05:5a:f0:ca:c0:5e:53:f0:ba:43:c7:a3:f8:40:
11:cb:13:32:96:38:a5:73:73:6f:05:35:0a:15:1b:
4e:ff:56:4f:dd:94:dd:54:cf:a4:96:b3:fb:c6:6c:
50:99:80:50:55:6f:3c:45:11:7d:10:bc:db:10:60:
da:84:23:95:c5:c1:9b:0e:22:68:dd:65:4e:5e:63:
f1:01:8a:ee:0d:1a:68:7e:ed:f7:cc:cc:5e:9a:65:
e4:f4:36:76:52:f7:96:41:c7:75:3c:85:6d:01:91:
5b:dd:d5:46:3a:4f:4c:d7:62:f1:c7:7e:28:9b:a7:
ba:e3:ca:9d:96:74:32:8e:18:5a:9e:ba:d0:20:09:
92:34:69:be:a4:b3:1e:e5:af:80:27:39:f2:77:0c:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F3:CF:25:47:6A:1E:20:35:83:13:37:78:EA:20:CE:1B:ED:3B:3E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4vPPJUdqHiA1gxM3eOogzhvtOz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.94.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c8:ee:93:46:29:ea:6d:a6:44:32:d2:fe:1c:cd:c8:13:80:
9d:b5:e0:c2:d7:19:d6:29:aa:c9:51:8f:45:d8:f8:51:75:56:
51:1f:92:33:ac:f0:4f:f7:5b:75:0a:c1:cb:7d:5a:c8:9b:34:
99:01:08:48:e5:14:23:b0:23:85:87:a8:f3:b9:95:50:91:c6:
19:72:88:f6:29:93:7a:93:bf:d3:e7:47:73:b6:9e:36:c5:57:
ac:c2:aa:3a:0b:88:16:45:8e:de:8e:cc:cd:0f:41:e7:56:c5:
2b:6e:4b:8e:75:98:aa:5a:d3:41:7b:0d:f3:5a:62:f7:2a:ed:
94:e3:cd:f2:38:87:e4:c4:dd:d5:0c:8c:7c:65:46:43:0a:6f:
14:d9:37:79:c9:54:01:5c:5b:38:be:8b:13:d9:da:fe:17:8b:
ff:09:ac:3d:30:d4:86:af:1c:ca:0a:82:87:ec:df:20:aa:96:
0e:c4:31:9d:53:5f:d8:07:8a:64:4e:9a:fe:71:23:ef:86:bd:
ca:36:df:74:f5:73:38:80:af:87:d8:ba:43:67:f7:b7:a0:04:
36:72:75:3a:e5:6f:2a:5a:35:3b:a3:f4:ed:a2:25:8c:38:35:
e9:a9:63:7a:95:67:a5:18:ee:81:88:a4:f9:5a:f8:f1:1f:d4:
79:a1:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:28 2025 by rpki-client