Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HADcHCY8a8EG8bisd1CgUhwPaYQ.roa
File: HADcHCY8a8EG8bisd1CgUhwPaYQ.roa (raw, json)
Hash identifier: +pudfB8C+WxXRm58G0Z1OrCG5FrTczZSAvoD2mTLDf0=
Subject key identifier: 1C:00:DC:1C:26:3C:6B:C1:06:F1:B8:AC:77:50:A0:52:1C:0F:69:84
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FA5514B334C18B2EFF5308F7ED1A1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HADcHCY8a8EG8bisd1CgUhwPaYQ.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44405
IP address blocks: 146.120.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a5:51:4b:33:4c:18:b2:ef:f5:30:8f:7e:d1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c00dc1c263c6bc106f1b8ac7750a0521c0f6984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:f1:a3:fd:74:1a:b6:fe:d8:20:5f:09:b8:
2f:31:37:df:f7:f5:06:f8:05:0e:d5:f6:87:47:ca:
9e:fb:ad:26:78:36:56:59:37:54:13:a2:e0:ce:86:
ea:35:4f:c5:4d:79:1f:b3:38:bc:59:57:f1:1b:cc:
50:fb:8a:d8:1e:1a:c4:4e:d4:32:91:59:2c:14:3c:
29:a0:4d:03:cc:55:68:f1:0c:44:b7:a3:a9:42:f5:
61:fd:32:64:a4:b4:19:58:70:92:c2:c2:f8:0e:0b:
d8:ca:57:6b:1a:d2:f2:6f:95:b5:b2:19:86:97:f4:
16:c9:5c:69:fd:de:ec:92:27:16:8c:db:2b:79:ac:
7b:d3:ee:86:78:c7:b6:a2:47:1c:29:5d:8a:6f:95:
27:9f:95:11:f9:39:cc:c5:c4:45:63:da:aa:10:5a:
40:68:12:6a:4d:b1:fd:d7:0e:80:f4:a8:bb:d1:e2:
af:f8:c4:09:96:de:fa:fa:1d:f6:81:a9:37:29:d8:
4c:cb:8c:e4:16:b3:05:e9:53:81:0a:62:c3:d9:c8:
fd:6b:36:1f:dd:39:f0:07:74:3b:a9:48:c3:87:77:
e6:5e:af:11:c7:43:2a:d5:a4:99:7f:85:04:bf:09:
a3:8c:8a:d5:5a:93:e5:f6:b6:b8:20:b0:7b:19:0f:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:00:DC:1C:26:3C:6B:C1:06:F1:B8:AC:77:50:A0:52:1C:0F:69:84
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HADcHCY8a8EG8bisd1CgUhwPaYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.184.0/24
Signature Algorithm: sha256WithRSAEncryption
63:9d:75:f2:ec:f5:49:23:88:d8:f0:46:d5:d8:b6:da:9a:2b:
fa:1d:ea:80:8d:ba:bb:b4:61:c4:05:86:69:18:fb:86:fc:e2:
c6:25:58:fd:7b:84:79:be:8c:45:f5:b3:16:d4:3c:55:ad:9c:
b7:e9:18:a3:9f:51:af:dd:af:61:61:80:e5:23:be:e5:ab:d0:
b1:7a:0f:ef:0c:b6:de:d2:e8:09:71:42:14:89:94:52:06:96:
29:01:2e:96:8d:69:40:e6:1c:7c:b0:cc:25:45:b9:aa:3b:58:
9f:6a:0c:88:dd:06:bc:60:59:c7:89:0a:d8:c5:30:98:b5:c6:
7c:c7:4a:e3:15:66:1b:f9:c1:a7:86:74:c5:f3:8a:a3:21:13:
81:f4:3e:51:6c:49:58:d1:75:8f:cc:52:0f:60:76:ba:0c:af:
93:2c:57:9a:30:1a:5b:39:ad:e1:7d:2f:be:53:58:6d:57:73:
6a:fa:08:7a:b7:63:bf:d5:69:d2:82:c1:19:ab:95:da:52:f8:
0b:6c:d1:6d:81:86:cb:57:7b:c8:e6:f3:e1:89:52:00:f1:33:
51:9c:cd:63:e4:7a:2c:36:09:af:5d:45:da:92:49:d1:05:bd:
e7:4b:8a:3d:c8:bd:0e:13:54:ce:ca:f6:48:b7:48:9a:e8:65:
a1:e2:16:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:44 2025 by rpki-client