Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Q8Q-2pjm_WlCB51H2vXvwODcVT4.roa
File: Q8Q-2pjm_WlCB51H2vXvwODcVT4.roa (raw, json)
Hash identifier: fMIRBlxqEt9+GIJxElhfgty1X7AF3uQkLoLZLewhoRA=
Subject key identifier: 43:C4:3E:DA:98:E6:FD:69:42:07:9D:47:DA:F5:EF:C0:E0:DC:55:3E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27F99D96
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Q8Q-2pjm_WlCB51H2vXvwODcVT4.roa
Signing time: Sat 01 Jan 2022 16:09:17 +0000
ROA not before: Sat 01 Jan 2022 16:09:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61166
IP address blocks: 146.120.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670670230 (0x27f99d96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43c43eda98e6fd6942079d47daf5efc0e0dc553e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6b:58:51:00:67:a6:e3:bb:5c:3a:13:74:6d:
b4:c1:67:9e:24:39:5a:e2:10:4b:dc:38:2a:88:e4:
b3:b0:e1:aa:aa:96:8d:be:6c:03:43:20:bb:31:6e:
22:43:45:77:66:43:cd:f1:69:86:5a:f1:5b:0f:06:
50:ba:ca:2e:c0:49:01:a2:f8:de:c8:8c:03:08:db:
b9:52:81:84:48:e2:d6:3e:10:0a:52:1e:88:db:f1:
12:eb:34:59:35:b0:c5:2c:e6:2c:0e:ce:1f:16:eb:
52:0b:f2:da:7b:7d:d8:5a:83:c8:81:75:bc:47:2f:
99:da:6b:ca:9d:a9:e6:7d:f8:cf:69:a9:a3:da:74:
5e:c0:3a:d9:4a:a1:2a:f3:64:4c:7f:df:19:c2:d9:
07:e3:73:95:cf:73:50:a5:a0:91:9d:3c:ac:be:78:
18:2d:44:3d:e3:0b:dd:9b:b3:ce:17:5d:17:35:59:
fe:93:11:11:dd:42:de:28:df:4f:ec:b2:ac:83:47:
08:ad:49:bf:da:83:65:52:42:9d:b1:43:47:fd:fd:
12:05:af:fb:67:28:46:61:ad:50:9e:5c:81:d3:75:
3f:01:ce:b0:14:5b:25:ad:72:89:e6:5b:81:c8:3e:
e5:aa:25:de:1c:6b:51:c7:62:20:66:b3:c0:64:b5:
71:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C4:3E:DA:98:E6:FD:69:42:07:9D:47:DA:F5:EF:C0:E0:DC:55:3E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Q8Q-2pjm_WlCB51H2vXvwODcVT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.90.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:7f:59:97:3c:61:51:11:75:13:57:10:c5:71:53:4c:54:bc:
d4:31:11:eb:16:4b:e4:cc:4c:c3:c8:10:2f:b5:45:e5:7a:5f:
7e:54:28:a4:3a:47:ae:d9:49:98:51:0a:bd:8a:53:85:fe:53:
31:1d:b6:e5:84:21:d8:19:14:d9:f3:13:6b:e8:71:49:42:81:
9f:ea:ae:bc:c3:cb:09:38:e9:e3:bf:37:c3:7c:fa:6e:af:fc:
96:f8:0b:aa:8f:26:5c:51:65:95:a1:04:5c:e5:9b:b9:35:cf:
3b:a2:fc:7c:18:a0:0a:69:b7:d5:fb:e0:20:55:27:0f:bc:07:
1c:94:a7:93:90:9f:39:1f:2c:13:32:46:c5:51:52:b6:a2:68:
b6:a7:c6:7c:38:da:0a:6c:5f:e9:62:98:e1:03:da:e9:23:9a:
4b:b4:19:a3:08:6f:23:31:fb:f1:7f:56:a9:5f:35:f9:8b:27:
de:b0:b6:a7:87:70:22:a1:d0:51:76:e3:a9:b7:b3:50:ae:94:
fe:13:c8:85:72:83:ec:56:c0:e8:98:bc:98:37:c0:74:a4:77:
16:0a:4e:be:cf:92:d2:e8:88:25:60:5c:8b:f3:7c:e0:f0:9d:
04:51:ba:9a:78:8f:6c:d3:90:ef:13:38:6a:21:08:af:93:37:
ed:c7:d6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:54 2025 by rpki-client