Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/C01MdgZksAYuXy9TDn6H_PBOODs.roa
File: C01MdgZksAYuXy9TDn6H_PBOODs.roa (raw, json)
Hash identifier: YMfmLguR64oSr3hqjlJQDvp+oevljrpPKN3HOqZfUD8=
Subject key identifier: 0B:4D:4C:76:06:64:B0:06:2E:5F:2F:53:0E:7E:87:FC:F0:4E:38:3B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FF4EAE29C24E532B1268999AF5AAE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/C01MdgZksAYuXy9TDn6H_PBOODs.roa
Signing time: Thu 02 Jan 2025 05:49:38 +0000
ROA not before: Thu 02 Jan 2025 05:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204875
IP address blocks: 146.120.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:f4:ea:e2:9c:24:e5:32:b1:26:89:99:af:5a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b4d4c760664b0062e5f2f530e7e87fcf04e383b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:43:8d:6c:4c:78:d2:d5:fd:10:ef:e9:00:
4f:48:78:b0:5f:7d:c9:c9:d3:ca:63:12:23:39:ad:
bf:ae:43:4f:4e:9b:e9:25:ae:cc:13:0b:2a:49:45:
c2:a5:50:e3:7e:43:cb:b3:f3:f7:3e:c7:d7:dc:89:
4c:5d:19:60:41:e8:d6:b7:79:60:99:60:93:b6:f1:
e8:51:bb:b2:67:b2:4f:0b:42:13:b5:75:5d:e0:ee:
ce:b9:d2:ec:f1:19:93:e1:61:4d:b1:6d:c1:35:17:
25:a7:80:1a:40:0d:b9:dd:0f:ba:b0:df:ba:26:20:
7b:fc:9c:7d:51:ba:74:48:c2:fd:09:b3:26:e8:44:
a8:f7:b3:90:7a:fc:ba:14:64:36:ef:cb:af:a4:06:
8d:09:5e:00:af:0e:39:e7:a7:92:f5:26:c7:b2:d3:
67:2d:fc:d5:fe:cc:90:34:f5:92:4c:a6:d3:4b:a4:
87:82:da:e8:76:ff:f7:95:6c:d2:01:fa:ef:57:c8:
1e:57:65:34:67:20:c4:a4:84:4c:3b:42:b4:51:6d:
9c:46:56:79:32:1f:67:fa:ce:5e:74:c8:7e:db:41:
e9:aa:ab:7f:86:f7:32:be:27:32:6b:7b:29:a7:6b:
2e:fc:be:1a:bb:32:27:08:0a:6f:40:cd:fb:fc:80:
71:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4D:4C:76:06:64:B0:06:2E:5F:2F:53:0E:7E:87:FC:F0:4E:38:3B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/C01MdgZksAYuXy9TDn6H_PBOODs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:e7:d2:09:88:54:62:1d:b8:bd:00:78:37:aa:e3:91:1e:80:
9f:1e:10:15:6a:50:c5:d7:c0:9b:92:4a:25:54:85:fc:ce:60:
1c:a1:52:6d:08:63:01:e3:db:18:0c:a6:bc:07:24:23:71:f4:
0e:f5:86:be:23:b9:ab:af:26:39:93:50:02:c9:b4:7c:26:28:
d2:6e:5f:89:de:b9:1b:a5:13:8e:13:b9:33:52:7b:18:96:5b:
be:5c:12:67:0f:21:63:37:fe:37:96:5e:0a:21:58:8e:99:a9:
90:f9:39:4b:4e:79:33:e7:45:63:e2:80:f4:ce:7b:0f:86:07:
1b:53:9d:16:ea:d3:78:df:96:3d:b0:36:1e:45:d2:11:89:e4:
c5:9f:c4:1c:cb:70:20:90:2e:7b:31:ef:96:73:ff:8a:15:63:
d4:64:90:fc:aa:13:a6:cc:96:62:02:63:15:73:ab:ac:85:20:
79:78:e2:2b:d3:5d:5c:2e:26:98:b7:4b:fa:a4:17:c5:44:84:
b8:c0:14:b6:ad:ab:fe:61:3b:ac:9f:cd:dc:c0:6c:e9:90:4e:
ab:64:e2:dd:db:01:df:28:74:06:ef:64:14:2d:01:3a:1d:ae:
76:8e:0e:eb:62:46:d3:e2:2d:b1:32:af:ac:9d:21:58:90:05:
94:f6:04:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:10 2025 by rpki-client