Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9O2xoE5bcsVq5igqJH-iZnFh8TU.roa
File: 9O2xoE5bcsVq5igqJH-iZnFh8TU.roa (raw, json)
Hash identifier: w0sFbTUquBoY7ZN//k/wp0HcqWfg+ZlF1ycWdonRPyM=
Subject key identifier: F4:ED:B1:A0:4E:5B:72:C5:6A:E6:28:2A:24:7F:A2:66:71:61:F1:35
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2790A1FF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9O2xoE5bcsVq5igqJH-iZnFh8TU.roa
Signing time: Sat 01 Jan 2022 16:08:19 +0000
ROA not before: Sat 01 Jan 2022 16:08:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44321
IP address blocks: 146.120.56.0/21 maxlen: 24
146.120.97.0/24 maxlen: 24
95.47.48.0/22 maxlen: 24
146.120.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663790079 (0x2790a1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f4edb1a04e5b72c56ae6282a247fa2667161f135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:6b:82:f0:5c:e4:d7:08:54:ec:5d:3b:e3:
ef:73:08:dd:d9:51:8d:23:57:0c:68:45:c7:bd:84:
d2:2f:a1:b2:dc:24:57:ca:94:64:4f:bf:4a:7d:c2:
1a:72:b0:8a:a3:d3:73:9c:8c:00:93:de:eb:a5:81:
d1:51:8e:75:c4:d6:7c:c4:1d:92:fe:c6:13:a8:1c:
3e:7d:35:a4:a5:ff:ec:f5:de:c7:fb:74:94:64:88:
94:ae:5c:ef:80:1d:20:fd:4d:3a:85:e3:b5:b1:ab:
41:c9:c1:1d:b8:5a:29:2b:94:e1:22:2f:d5:8a:3d:
45:5d:cc:14:f8:c1:84:bc:5d:ca:1d:ac:92:56:8b:
c3:e3:f2:9e:63:ad:e9:1d:36:d6:aa:d2:b1:f0:0f:
46:b9:80:6a:ad:b9:2b:fe:b2:18:83:ac:ad:56:0a:
00:fa:a2:84:80:86:24:f3:4f:ad:e1:17:4a:1e:5d:
d5:0a:f0:da:79:5c:57:a4:ac:e7:c4:73:ab:c1:9b:
65:28:a8:68:8d:4c:dc:a7:36:41:63:a4:52:60:56:
23:cc:08:d0:47:33:d3:6e:0c:f3:40:bf:49:ab:b7:
4c:01:83:11:f3:2a:45:b9:8b:ff:1e:e3:e0:4a:df:
62:1f:db:92:c7:1e:c1:f9:62:0b:c9:be:22:8b:19:
f3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:ED:B1:A0:4E:5B:72:C5:6A:E6:28:2A:24:7F:A2:66:71:61:F1:35
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9O2xoE5bcsVq5igqJH-iZnFh8TU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.48.0/22
146.120.12.0/24
146.120.56.0/21
146.120.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:00:fd:75:7b:7e:12:74:2b:1a:9e:c2:23:5c:59:4c:60:db:
de:bc:98:bc:be:58:0d:15:cd:dd:9f:f0:96:83:8d:d7:3f:62:
fb:27:bb:dd:36:57:63:f8:21:c9:43:3a:75:b7:0c:74:a4:f3:
89:47:46:8e:c1:c1:bb:cd:d3:86:a7:87:2b:3f:e5:fd:3e:5f:
0d:ad:37:f5:4e:3f:8f:50:b7:f5:13:4c:e6:f2:4a:74:a8:be:
e2:9d:30:cd:d7:1e:08:83:fa:41:d7:69:28:11:2e:fb:55:0d:
0b:92:9c:cf:ad:3a:87:87:65:25:ef:9e:4d:3d:68:b8:3d:a4:
eb:8a:7e:5c:96:08:4a:66:1b:bf:cf:a7:1c:f0:c1:db:47:0b:
72:a0:32:70:20:f3:b3:82:c5:ec:ac:00:2c:77:26:8d:04:77:
75:c6:ad:79:04:2e:9e:19:a1:1b:e4:ef:b4:36:f0:46:45:79:
b7:a0:18:6b:be:ce:0c:f6:0a:9d:23:67:dc:9b:60:6a:07:b3:
5b:71:8d:e3:40:8e:64:06:7d:2f:f0:ff:46:b0:8a:66:ce:fa:
63:da:9c:89:be:aa:66:40:9b:5b:d3:d2:12:67:be:dc:a2:88:
fe:f1:d3:c7:d6:01:d5:36:e9:dc:55:7f:72:5b:ed:53:e6:fe:
1c:2e:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:54 2025 by rpki-client