Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Jc0Tm79NZHWVtliuAGkHPXUr2MM.roa
File: Jc0Tm79NZHWVtliuAGkHPXUr2MM.roa (raw, json)
Hash identifier: itOalZblhPyzeEgsWG51QzEl5q3wZxDQYb6Uq2N/7IQ=
Subject key identifier: 25:CD:13:9B:BF:4D:64:75:95:B6:58:AE:00:69:07:3D:75:2B:D8:C3
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F89C0BB33A6E758ACB57DE7ED4AD3
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Jc0Tm79NZHWVtliuAGkHPXUr2MM.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8641
IP address blocks: 146.158.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:89:c0:bb:33:a6:e7:58:ac:b5:7d:e7:ed:4a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25cd139bbf4d647595b658ae0069073d752bd8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:60:be:94:27:ef:80:28:12:62:17:67:35:
17:d8:9f:9a:40:a9:67:07:49:47:a5:08:16:da:56:
19:1f:e3:f0:cd:b9:5c:bb:76:24:b3:d4:99:a5:bd:
cd:04:7d:f1:c6:77:85:50:6b:30:ec:47:49:44:4c:
34:aa:44:a1:d5:e7:f5:b7:2c:6c:9d:84:bc:84:49:
68:d6:85:2f:55:06:55:a9:c6:8f:96:c3:96:aa:f5:
9d:b2:ce:81:b9:f9:68:ae:52:37:8a:c5:62:0b:23:
ae:c6:41:43:bd:5a:e4:71:9b:4c:28:da:df:f5:05:
63:be:8a:79:ce:5b:30:57:fb:18:72:c3:03:b2:3f:
d9:12:56:4e:4a:de:f4:e0:93:43:4c:e8:74:88:8f:
c7:34:e8:1f:c3:70:e6:35:7d:90:f8:07:2b:0a:a6:
34:74:b2:05:72:14:d3:dc:f9:fb:55:1a:b7:8d:f5:
60:ba:5b:fa:de:85:52:22:5f:ce:52:05:60:9f:1d:
c3:00:ef:72:63:07:38:92:cd:e4:16:24:50:2c:4b:
a2:ec:b4:48:35:a2:4e:78:0a:31:14:1f:51:df:fa:
cf:06:3e:3c:a4:9b:5e:64:9f:b1:8e:44:5a:35:05:
2b:9f:64:93:b2:27:56:cc:5c:f7:4e:fe:26:ff:0a:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CD:13:9B:BF:4D:64:75:95:B6:58:AE:00:69:07:3D:75:2B:D8:C3
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Jc0Tm79NZHWVtliuAGkHPXUr2MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.92.0/23
Signature Algorithm: sha256WithRSAEncryption
85:96:7c:9f:ca:7f:ce:7f:83:d5:c1:7d:7c:7b:06:b1:7d:83:
09:b7:ee:96:5b:0d:8b:61:68:58:cd:92:4a:ff:ae:99:aa:b7:
9c:36:2a:01:b7:fb:8a:58:51:bf:bf:9d:64:e2:e0:13:8c:f8:
9b:c0:ba:79:3c:4c:77:e7:2b:54:e4:0a:a5:fa:f7:0a:eb:d6:
cf:0c:d5:9c:d3:1c:fc:c4:40:5c:c8:71:9b:7b:f4:94:d5:8d:
f5:31:a0:c5:ad:83:d7:cc:cb:ec:64:e0:f2:9e:6a:5a:15:86:
18:68:3b:58:8b:8c:f3:0b:3a:b2:e2:0e:44:8a:a3:c2:27:e4:
70:dd:d9:c1:4c:69:5d:1b:6b:fc:f1:a8:be:4a:4a:89:0b:b6:
18:d9:e9:de:34:7b:8e:13:5f:39:6b:fd:aa:fc:ad:fc:d3:2d:
73:62:65:c8:e3:fb:a8:80:b4:d5:6a:68:7e:4a:f3:77:6a:70:
03:d5:49:de:20:88:99:f4:70:b6:b2:4d:96:44:49:dc:16:19:
55:70:52:a5:c8:23:bd:6f:2f:77:a4:f9:54:0a:93:22:85:40:
e2:55:42:9b:ef:5b:8c:85:4a:11:64:37:b9:33:b8:78:d5:3f:
06:e7:d9:65:9c:86:05:7c:4c:97:60:a5:92:e7:38:68:27:20:
d9:d1:51:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj4nAuzOm51istX3n7UrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWNkMTM5YmJmNGQ2NDc1OTViNjU4YWUwMDY5MDczZDc1MmJkOGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeRgvpQn74AoEmIXZzUX2J+aQKln
B0lHpQgW2lYZH+Pwzblcu3Yks9SZpb3NBH3xxneFUGsw7EdJREw0qkSh1ef1tyxs
nYS8hElo1oUvVQZVqcaPlsOWqvWdss6BuflorlI3isViCyOuxkFDvVrkcZtMKNrf
9QVjvop5zlswV/sYcsMDsj/ZElZOSt704JNDTOh0iI/HNOgfw3DmNX2Q+AcrCqY0
dLIFchTT3Pn7VRq3jfVgulv63oVSIl/OUgVgnx3DAO9yYwc4ks3kFiRQLEui7LRI
NaJOeAoxFB9R3/rPBj48pJteZJ+xjkRaNQUrn2STsidWzFz3Tv4m/wphxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCXNE5u/TWR1lbZYrgBpBz11K9jDMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvSmMwVG03OU5aSFdWdGxpdUFHa0hQWFVyMk1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkp5cMA0G
CSqGSIb3DQEBCwUAA4IBAQCFlnyfyn/Of4PVwX18ewaxfYMJt+6WWw2LYWhYzZJK
/66ZqrecNioBt/uKWFG/v51k4uATjPibwLp5PEx35ytU5Aql+vcK69bPDNWc0xz8
xEBcyHGbe/SU1Y31MaDFrYPXzMvsZODynmpaFYYYaDtYi4zzCzqy4g5EiqPCJ+Rw
3dnBTGldG2v88ai+SkqJC7YY2eneNHuOE185a/2q/K380y1zYmXI4/uogLTVamh+
SvN3anAD1UneIIiZ9HC2sk2WREncFhlVcFKlyCO9by93pPlUCpMihUDiVUKb71uM
hUoRZDe5M7h41T8G59llnIYFfEyXYKWS5zhoJyDZ0VGQ
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:00 2025 by rpki-client