Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JfqWB8p6WB3Qbv-WFB2ONhlHYes.roa
File: JfqWB8p6WB3Qbv-WFB2ONhlHYes.roa (raw, json)
Hash identifier: /wyRWb7l8nLa67tAZewQCZKlJiFV4d9OpStW00LTkU4=
Subject key identifier: 25:FA:96:07:CA:7A:58:1D:D0:6E:FF:96:14:1D:8E:36:19:47:61:EB
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 279136D4
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JfqWB8p6WB3Qbv-WFB2ONhlHYes.roa
Signing time: Sat 01 Jan 2022 16:08:20 +0000
ROA not before: Sat 01 Jan 2022 16:08:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44340
IP address blocks: 146.120.174.0/24 maxlen: 24
146.120.174.0/23 maxlen: 23
146.120.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 663828180 (0x279136d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25fa9607ca7a581dd06eff96141d8e36194761eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:a3:3a:9a:7a:ef:ad:7b:0d:b0:7c:d0:54:
fd:46:3b:34:83:fa:0c:71:2a:13:82:ea:39:dc:f9:
c7:fb:6f:67:57:62:fd:22:9a:4f:64:40:91:98:57:
b5:f2:be:5b:eb:be:a6:f6:4c:66:99:75:d1:bc:18:
48:a2:e3:1c:1b:3c:87:3a:ff:76:a4:fd:d9:cb:40:
44:cd:8c:36:d5:42:d1:9e:67:95:88:99:da:19:52:
7a:3d:ef:ca:4e:2b:14:5e:24:0f:2f:c9:29:60:9a:
a3:62:dc:ae:c1:a3:b4:63:da:70:1d:5d:45:d7:1c:
16:6c:bb:e2:a9:17:59:7f:6a:3e:bd:d5:b7:fd:44:
b0:ef:3d:f2:a2:37:30:83:b0:97:2a:f8:a7:26:c1:
17:17:e2:48:ab:0d:00:ac:73:ae:cf:02:a4:80:f2:
a9:15:e5:63:76:69:2a:3b:61:db:75:07:78:56:70:
19:e8:7f:84:bd:58:34:90:f0:d9:d9:10:a0:5d:24:
12:19:c4:db:91:19:4c:1d:50:77:d1:46:62:2f:27:
31:23:61:d4:3b:51:da:f5:dc:ef:9f:78:69:94:d5:
d5:c9:85:ac:60:80:dd:33:c2:2e:86:55:21:0b:ed:
19:54:59:d7:31:61:1e:0f:03:e3:29:13:16:21:44:
59:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FA:96:07:CA:7A:58:1D:D0:6E:FF:96:14:1D:8E:36:19:47:61:EB
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JfqWB8p6WB3Qbv-WFB2ONhlHYes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.174.0/23
Signature Algorithm: sha256WithRSAEncryption
86:1c:5c:42:ef:00:da:24:c5:1a:76:5a:92:7e:52:70:b8:43:
03:1e:30:ee:eb:69:70:9e:e7:fa:b5:be:65:d3:36:b8:21:48:
aa:cb:20:8f:93:fd:79:d2:8f:b4:b7:46:91:eb:f5:8d:9a:0a:
58:8f:22:80:f4:96:89:e9:db:2d:49:99:ec:10:83:61:3b:7f:
3f:db:33:f4:ad:4a:76:38:f7:23:0a:0c:b9:11:b1:22:b6:8d:
fe:32:50:39:81:0f:93:49:81:c4:d2:b9:f2:97:aa:98:97:43:
92:93:7e:14:f7:20:26:7f:48:fe:08:58:a2:83:db:24:45:3c:
ca:3c:80:f0:c7:58:a8:f9:aa:6d:11:77:ee:d8:aa:7e:3c:03:
e7:64:ac:bf:c1:4a:29:61:20:2c:bc:5d:f1:65:01:3b:7b:f5:
3c:a3:e0:99:2a:71:2e:be:2d:1d:eb:ee:15:dc:99:00:ca:53:
32:68:88:90:bd:48:40:43:b9:85:4e:43:a6:a8:75:b8:97:f5:
23:d4:e0:32:dc:85:87:5e:0e:69:0f:ec:54:9c:3c:5a:a5:a9:
b1:7c:c9:e3:c2:0e:e4:76:b0:46:42:1c:cc:0f:7f:e2:cd:9e:
30:65:b5:ee:a2:ae:8a:5b:26:f7:5e:f6:d3:40:26:d9:67:44:
f8:2f:2b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:02 2025 by rpki-client