Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Etmx0gmW7po57oXCw_Brrin6fng.roa
File: Etmx0gmW7po57oXCw_Brrin6fng.roa (raw, json)
Hash identifier: D8b9+7117xbNKq64kwiUj6aQWltPmB/ovUjqdSwZoCs=
Subject key identifier: 12:D9:B1:D2:09:96:EE:9A:39:EE:85:C2:C3:F0:6B:AE:29:FA:7E:78
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 282A0379
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Etmx0gmW7po57oXCw_Brrin6fng.roa
Signing time: Sat 01 Jan 2022 16:09:44 +0000
ROA not before: Sat 01 Jan 2022 16:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202668
IP address blocks: 146.158.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673842041 (0x282a0379)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12d9b1d20996ee9a39ee85c2c3f06bae29fa7e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:d0:ea:c6:d8:fe:73:73:8f:f2:88:0f:c3:
b3:0f:d2:ba:e6:65:57:d4:a2:a9:e0:3c:a2:12:d9:
52:c9:64:85:68:7a:89:e2:6b:82:5e:52:85:09:4d:
d1:45:d0:c8:2f:d4:04:ca:c7:ef:7f:cb:83:28:8f:
47:08:53:83:3d:46:37:30:b1:ab:b1:53:6e:6e:a7:
f5:05:6c:26:4f:b5:85:f2:2c:f1:46:9b:58:17:3a:
02:88:b4:3d:59:3f:04:6b:aa:82:f8:90:86:db:91:
2c:cb:78:48:4a:d1:7d:12:f2:96:98:c6:ea:d9:24:
0b:0b:28:34:7a:67:9d:7f:91:72:0b:c5:99:92:7a:
37:3b:d1:84:f0:87:35:77:86:df:2d:c6:40:4c:e9:
5e:61:56:f5:60:e2:95:1a:71:16:fe:55:84:71:eb:
c9:33:99:52:48:cd:21:c5:9e:6d:0d:2e:6b:0a:9e:
34:e4:3c:5e:49:da:b9:d6:ba:ef:60:9a:67:b2:b1:
31:db:03:0d:28:9e:5a:71:ca:6d:98:0f:e3:47:d1:
99:d7:41:9d:bf:41:98:5c:8f:91:f8:f7:27:b9:c7:
fd:87:d6:15:87:07:e2:ce:dc:ec:06:ff:88:6f:6d:
2c:2c:32:ba:90:0f:4c:10:78:43:59:d5:d2:a8:27:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D9:B1:D2:09:96:EE:9A:39:EE:85:C2:C3:F0:6B:AE:29:FA:7E:78
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Etmx0gmW7po57oXCw_Brrin6fng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.30.0/24
Signature Algorithm: sha256WithRSAEncryption
79:87:db:8e:d0:fb:3a:cb:c1:bc:a7:2d:37:50:d3:13:b3:63:
08:c5:c7:ba:47:ea:a5:61:87:1e:5d:2a:e9:99:25:51:7e:52:
43:5e:62:fc:54:90:26:19:c8:49:83:5d:de:fc:85:47:a0:f5:
78:0d:cf:de:a4:2c:3d:2f:b7:9f:69:c1:de:72:a3:e2:5f:38:
ed:65:f3:5b:e7:8b:0f:da:9e:9b:b6:74:b2:76:1c:8d:a1:2a:
d5:1d:06:a9:80:5c:73:c1:6a:4c:ec:1d:58:d2:63:23:46:56:
60:9b:97:e5:d8:9e:13:a0:3e:30:59:69:95:3a:b7:bf:d3:75:
dc:ce:58:45:bd:5b:26:0e:26:bd:42:c3:df:78:fe:68:94:2c:
d7:29:ce:1b:80:f4:d7:97:94:46:dc:ca:07:ec:d7:07:39:7f:
36:11:42:ed:c5:53:bb:59:a9:2b:2a:27:12:e2:41:5d:95:34:
5b:16:4f:cc:a9:80:02:b0:52:d6:b2:d3:38:d7:65:28:90:77:
5d:24:39:39:0f:b3:3b:5a:45:4a:a3:8f:37:34:4c:cf:98:c8:
3f:cf:0e:31:ec:6f:35:e5:f3:0a:17:a0:0c:7e:67:71:52:21:
e1:9e:96:33:0c:fe:72:07:98:78:ab:91:c4:34:83:d1:92:e3:
56:9f:07:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:13 2025 by rpki-client