Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6XoMAIokspTfNDnnYNr3ghXyfak.roa
File: 6XoMAIokspTfNDnnYNr3ghXyfak.roa (raw, json)
Hash identifier: mWM4TyofvRxQl5rnHdGoFWPtznUErjAok/abdb3VPyE=
Subject key identifier: E9:7A:0C:00:8A:24:B2:94:DF:34:39:E7:60:DA:F7:82:15:F2:7D:A9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709521F47855E8C3E883F5DC83BB35B8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6XoMAIokspTfNDnnYNr3ghXyfak.roa
Signing time: Mon 02 Jan 2023 03:44:59 +0000
ROA not before: Mon 02 Jan 2023 03:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42581
IP address blocks: 146.158.74.0/23 maxlen: 24
146.120.212.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:21:f4:78:55:e8:c3:e8:83:f5:dc:83:bb:35:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e97a0c008a24b294df3439e760daf78215f27da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0d:a3:68:83:96:a0:30:03:28:4e:90:c0:cf:
86:7f:ee:8c:56:a1:18:37:1b:e4:eb:ee:a8:7d:89:
33:0d:a6:fa:a9:6b:09:af:d6:ee:b1:2c:aa:c0:c5:
81:bf:27:60:5f:c3:d3:2e:8d:af:b3:50:37:0b:7c:
3d:eb:4b:56:a6:d1:47:92:14:04:ad:47:4a:4c:4d:
f0:90:4a:6b:7c:c2:cf:8a:c0:8c:de:2d:aa:90:97:
30:bc:6a:c9:c6:60:c5:ad:d4:13:30:53:d0:49:f5:
bf:2d:ed:ee:76:c0:ab:71:7d:56:aa:bc:dd:3b:93:
3f:b7:68:9c:4a:99:f5:2a:e2:55:32:f3:37:3c:14:
f4:64:aa:cb:5d:29:22:5b:0c:79:c8:aa:d0:73:d9:
65:1a:b1:eb:e3:54:02:1b:8b:8a:c3:d7:3e:0f:5e:
0a:6c:ef:36:80:61:0d:38:46:7a:5f:83:a7:32:c2:
31:38:75:a5:28:da:84:8f:52:2e:95:ee:85:f9:59:
41:d3:b4:7d:62:52:a1:b7:59:05:33:77:32:60:ea:
cc:18:9b:56:d8:98:55:1d:cf:ea:63:6a:31:09:29:
d1:73:cd:8e:b7:ff:45:91:01:a7:ef:00:e5:7c:9d:
8b:3b:41:74:c3:aa:72:6d:76:c4:7e:6a:0e:f3:2f:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7A:0C:00:8A:24:B2:94:DF:34:39:E7:60:DA:F7:82:15:F2:7D:A9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6XoMAIokspTfNDnnYNr3ghXyfak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.212.0/23
146.158.74.0/23
Signature Algorithm: sha256WithRSAEncryption
86:b9:95:21:4c:13:7d:81:b6:a4:8b:8f:37:29:99:32:34:be:
7d:a4:ff:04:73:38:66:24:d2:27:28:b1:4b:97:e9:ee:96:50:
4c:e7:6c:0f:79:e1:50:87:af:e6:9b:00:81:cf:2e:8f:7a:90:
94:18:a4:e2:3f:7c:53:cd:67:fc:a2:db:5d:74:d3:35:e2:07:
45:0f:53:86:58:8c:55:b3:0d:bc:e2:57:1e:63:84:50:e7:33:
26:08:f9:1a:db:4f:03:a2:06:46:5e:9e:48:c5:ed:aa:43:de:
e1:67:a4:bb:60:a0:03:36:d9:50:80:6c:0c:31:ed:87:5f:79:
95:fb:01:85:ca:57:c2:44:ce:ee:84:3a:b1:b7:7e:75:6a:0d:
77:7b:1e:3d:4d:8b:a8:67:94:fa:19:ed:b2:ad:93:82:04:6b:
87:67:05:f4:68:30:16:f4:21:03:3c:0a:ac:13:0d:ce:46:ab:
35:1c:2d:34:8b:bf:c9:e8:f6:b8:16:ae:91:7e:04:bc:eb:6c:
b6:98:a9:fd:23:28:c6:bb:31:8c:18:f7:0b:fb:6e:6f:de:ea:
8d:c4:ef:16:6d:e6:ae:c0:42:af:c2:e2:6f:a4:f3:88:b3:9e:
88:8a:c2:05:ee:1e:55:c2:5c:26:45:c5:f5:1c:32:f3:d9:3b:
19:d5:22:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:03 2025 by rpki-client