Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PA72vBLAEXnN_0A7d05mIrfAqAA.roa
File: PA72vBLAEXnN_0A7d05mIrfAqAA.roa (raw, json)
Hash identifier: XNmgwAGApWU238Apc/zk4oi5mdpbNq519KPZwJ7GVUw=
Subject key identifier: 3C:0E:F6:BC:12:C0:11:79:CD:FF:40:3B:77:4E:66:22:B7:C0:A8:00
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01942590007D0DD3C0125B00727EB7A9698B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PA72vBLAEXnN_0A7d05mIrfAqAA.roa
Signing time: Thu 02 Jan 2025 05:49:41 +0000
ROA not before: Thu 02 Jan 2025 05:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209002
IP address blocks: 146.120.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:00:7d:0d:d3:c0:12:5b:00:72:7e:b7:a9:69:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c0ef6bc12c01179cdff403b774e6622b7c0a800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:a0:6d:4b:af:bf:ca:df:27:41:2f:91:64:
0e:3d:2a:4e:13:be:81:55:cb:99:6a:80:fb:72:46:
d2:97:e1:8a:aa:70:0f:f4:85:3e:4f:de:da:d2:92:
9e:73:89:71:8b:02:d6:0c:72:42:cb:b6:c8:7b:31:
62:6f:1d:95:1c:b4:ab:f2:cb:08:a6:d9:50:aa:87:
ba:cf:56:e7:d9:97:86:33:d6:6e:f0:d8:c1:da:a9:
db:e9:ef:04:a6:d2:24:86:82:ae:28:4d:bb:48:d4:
82:1b:b3:bc:0e:ce:8a:06:14:ca:1d:75:d3:5b:d4:
da:4e:0c:8f:f2:2b:be:22:0d:12:cf:80:18:02:ad:
c4:14:3a:7b:79:a0:40:06:56:19:7f:34:f9:fe:73:
9e:da:6b:67:bb:28:71:b8:ca:10:b3:7c:10:ae:c9:
17:7c:85:66:bd:28:1c:c6:0d:aa:e9:5f:df:b5:a2:
b3:1f:18:f9:c3:ca:4a:c8:90:72:1d:c9:04:83:85:
7f:fd:39:a6:71:db:f7:3a:8d:fc:96:45:5f:20:ae:
e2:e3:04:17:1d:bc:1e:31:c2:f6:ca:93:51:94:46:
c9:b5:0a:24:ce:7e:fe:a1:a5:9f:f8:1b:fe:35:50:
a6:04:ab:e0:c7:93:e5:75:2d:77:d8:c0:c6:f9:20:
6c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0E:F6:BC:12:C0:11:79:CD:FF:40:3B:77:4E:66:22:B7:C0:A8:00
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PA72vBLAEXnN_0A7d05mIrfAqAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.112.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:16:80:34:ad:08:fc:0b:7d:8c:8c:df:95:bd:04:2f:26:19:
37:e2:92:ce:06:fa:72:52:05:7e:34:90:c8:dc:22:c5:06:1a:
51:40:a0:f5:8e:13:69:ad:44:33:27:10:20:31:85:3f:96:f1:
e9:88:ee:0f:92:3e:15:e0:e4:49:25:e4:f1:13:82:e4:57:d8:
33:32:76:b9:f5:1c:03:72:54:1d:e8:44:fd:86:96:86:02:5c:
dd:51:05:19:62:e8:86:bc:64:b8:30:db:8c:57:e5:48:0a:ad:
db:a2:e2:a6:32:e8:84:0c:df:ec:73:b6:b0:6f:c4:ba:ca:8d:
a1:f0:33:72:03:2a:04:4e:12:74:da:6a:5f:a0:eb:cc:8f:fb:
7e:32:5c:6d:50:01:bb:2d:56:46:b8:db:c2:d7:80:43:86:92:
29:fd:90:4b:76:fa:ea:c7:4b:e9:6e:76:0a:47:30:43:ae:59:
13:b3:a8:9a:ba:de:30:c5:3e:77:e5:63:89:ae:c8:00:37:1b:
5b:35:41:b1:ed:36:0a:ac:ca:c0:e9:a4:c7:18:1a:9c:7c:97:
25:d9:a6:5b:fd:ac:82:57:69:79:af:33:d8:c3:38:66:55:12:
5f:10:02:db:88:c7:22:39:2e:eb:a2:f2:3a:05:6e:7e:ba:42:
9f:5d:86:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:17 2025 by rpki-client