Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LSfqaDcClxf08CjUsXK_L94ZNKo.roa
File: LSfqaDcClxf08CjUsXK_L94ZNKo.roa (raw, json)
Hash identifier: qGYpic16Gz9olNEfGSuuERE92aCqtQ4O+4yBGXwx5n4=
Subject key identifier: 2D:27:EA:68:37:02:97:17:F4:F0:28:D4:B1:72:BF:2F:DE:19:34:AA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FADA2B1A9AB274CA9F7F0A150DE80
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LSfqaDcClxf08CjUsXK_L94ZNKo.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48172
IP address blocks: 146.120.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ad:a2:b1:a9:ab:27:4c:a9:f7:f0:a1:50:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2d27ea6837029717f4f028d4b172bf2fde1934aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:14:b3:ec:e5:43:89:3c:f1:e0:4b:84:a2:
69:07:99:e6:5f:8a:41:93:e7:9b:a8:56:4f:a5:ff:
30:41:97:5c:70:ec:d0:e3:25:d0:93:94:45:d5:01:
fb:7f:fb:3c:cd:d2:aa:01:30:b1:79:1e:05:03:e0:
e2:65:06:12:d0:81:56:6c:08:6b:8d:9c:50:68:c2:
67:28:62:59:25:67:d3:8a:6e:cb:b7:80:38:be:84:
d1:10:e4:2c:3e:58:cf:7c:a3:36:eb:65:9e:db:4f:
df:a2:e2:ee:23:46:a6:ee:25:fc:f4:ad:88:1e:85:
18:0b:4e:ee:5a:76:e6:20:43:96:6c:9c:d7:a6:22:
09:96:41:20:7e:03:9f:40:f4:a8:44:7b:ba:e1:78:
3d:4a:cb:74:84:df:75:3b:73:fc:7d:3f:f8:bc:33:
59:00:4c:91:0c:8f:5d:e1:63:18:7c:6e:d9:9a:a3:
f7:09:de:1c:a7:b0:76:be:37:f6:28:d4:80:b4:38:
af:9a:07:29:72:2d:e9:d8:ee:b2:55:5f:3e:c6:2d:
34:92:7b:9c:39:ab:7a:d1:ab:c5:1c:4b:08:3a:84:
cf:3a:50:b9:f3:93:af:4f:8e:f0:0a:97:c9:00:63:
61:c5:86:31:74:3e:19:32:e0:fc:4b:71:6a:75:55:
18:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:27:EA:68:37:02:97:17:F4:F0:28:D4:B1:72:BF:2F:DE:19:34:AA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/LSfqaDcClxf08CjUsXK_L94ZNKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.226.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:8f:a3:ee:2f:53:64:ce:f1:73:09:96:6a:36:9b:3d:35:ab:
5b:91:e5:96:f9:f9:51:1c:18:fe:11:51:39:2c:a1:23:f3:44:
ac:4b:ab:6d:09:45:02:0f:29:8b:ee:ac:4d:b1:0b:e3:44:9b:
8f:de:25:ee:66:66:fe:c4:61:eb:0b:93:c9:0a:2f:2e:cf:34:
95:e1:ec:65:0b:05:60:10:71:c1:ae:bd:c9:62:97:97:69:4b:
ad:5a:aa:c8:6a:03:a0:3e:53:70:17:92:26:f9:94:50:59:87:
85:d5:64:92:d7:cd:c2:58:6a:85:60:08:df:96:ec:c2:b7:ca:
80:da:89:91:34:b1:95:c7:86:b8:75:13:25:05:7e:03:30:92:
0f:db:16:f1:0a:81:6d:19:b5:dd:52:87:95:0f:ce:46:e1:b6:
8f:fe:20:ea:15:f7:c3:70:e5:a4:c2:a9:77:11:68:9e:c3:3c:
0f:87:7d:cf:54:94:34:2f:43:f9:66:a5:17:c5:a2:d3:dd:4a:
3c:f3:dc:a2:f4:68:6c:a2:54:7b:af:71:44:cc:84:b2:28:ae:
69:6d:91:60:f2:62:d0:21:c2:be:e5:91:16:88:8b:fb:91:ee:
49:8b:20:4a:94:3e:97:82:b3:80:69:10:5b:30:57:25:88:97:
64:88:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:41 2025 by rpki-client