Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FFFwmDvrLfMAOOYrHp4cnHYUbb4.roa
File: FFFwmDvrLfMAOOYrHp4cnHYUbb4.roa (raw, json)
Hash identifier: UwPUVroOGfcnv+X7uCzEx2BAqZRj9H5uUmKu+bhgsQY=
Subject key identifier: 14:51:70:98:3B:EB:2D:F3:00:38:E6:2B:1E:9E:1C:9C:76:14:6D:BE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2781B1F2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FFFwmDvrLfMAOOYrHp4cnHYUbb4.roa
Signing time: Sat 01 Jan 2022 16:08:12 +0000
ROA not before: Sat 01 Jan 2022 16:08:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42581
IP address blocks: 146.120.212.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662811122 (0x2781b1f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=145170983beb2df30038e62b1e9e1c9c76146dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:38:83:8e:23:f8:a5:21:b4:9a:2d:c9:c9:d3:
52:0f:4e:29:ab:26:6e:22:af:34:c1:0a:81:b1:5c:
46:6c:b0:d4:99:b1:a9:74:af:7f:d1:9c:f4:7b:94:
ce:c7:2c:2d:92:26:31:08:2e:59:2b:f7:b9:4d:1d:
95:3c:59:d9:71:7f:e4:d3:df:a9:8d:94:09:9a:7d:
a8:93:05:6d:82:12:28:68:58:46:31:ac:0b:32:9f:
85:7e:4c:f6:4e:17:18:d9:2a:e5:52:50:b8:1c:5c:
cc:2f:c3:0b:16:02:6d:98:15:93:ec:14:7a:06:b3:
d5:09:37:bb:8c:14:fa:9a:9a:b6:70:2c:fd:8a:ef:
67:e3:d3:5c:ad:5d:bd:f5:ec:64:5c:5d:a1:f3:8f:
51:4f:a5:ae:01:47:e2:46:6d:39:d7:0b:af:c3:35:
48:fb:78:94:a3:88:d5:da:c2:6a:25:64:d4:c9:c9:
d5:d1:34:eb:49:a3:77:d9:20:50:4a:f4:39:35:92:
c7:1c:a6:2b:26:e1:5e:cc:15:c7:6a:6b:d3:cb:93:
ba:f8:ae:64:85:4f:ec:0a:1d:39:ab:ac:6e:4f:e8:
9a:45:e7:b9:3a:e4:9a:19:07:5a:bd:ac:fe:46:7b:
0e:af:1a:51:57:02:4e:55:e0:18:41:1a:19:ba:9b:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:51:70:98:3B:EB:2D:F3:00:38:E6:2B:1E:9E:1C:9C:76:14:6D:BE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FFFwmDvrLfMAOOYrHp4cnHYUbb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.212.0/23
Signature Algorithm: sha256WithRSAEncryption
93:8f:63:65:60:25:65:f5:bf:5f:92:de:ad:ba:26:6d:96:68:
cf:08:08:0c:d8:9d:66:fa:f8:42:c2:62:de:bd:2c:eb:9a:2d:
29:84:e1:ad:77:7e:5d:9b:83:50:8d:44:a6:4b:df:5a:60:87:
d7:e5:e8:a3:7f:d8:81:a8:96:f3:47:b0:f4:fd:26:ec:ad:89:
21:79:ef:b9:db:43:37:01:fd:37:1a:07:a8:31:f2:47:f7:db:
58:fe:4e:00:5a:67:c5:e5:73:cb:8d:66:79:c2:8a:91:c8:ab:
e9:2b:2b:27:22:03:85:b0:39:a6:74:c0:e3:f1:dc:6e:50:7b:
17:f1:f3:97:e9:d0:fb:28:e5:8a:98:cb:cd:b4:53:41:32:27:
83:45:fd:97:eb:10:89:9f:6d:72:c6:eb:7c:51:91:e3:58:8a:
44:6a:7e:1e:2a:81:54:4f:80:ec:5c:d2:e5:79:c6:f9:4a:e8:
e2:ad:82:8a:1b:ed:13:6c:8e:df:ec:43:f8:a3:ab:ef:1c:35:
6c:29:99:fa:1f:e1:b6:0f:7c:a5:25:bf:16:84:71:cd:87:bc:
9a:05:c1:d6:a6:7b:0b:1b:35:b3:23:81:61:52:85:f6:c8:d8:
61:80:a5:6a:de:c6:52:15:cc:12:b0:7c:8d:40:8f:42:e9:f0:
59:ca:c3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:44 2025 by rpki-client