Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RIMqOzsJZ0gcaeFMpWWelWnA8NY.roa
File: RIMqOzsJZ0gcaeFMpWWelWnA8NY.roa (raw, json)
Hash identifier: tMg2IiDYNSnn2ev00iPgR4okxwjFnt5jG7xEwghgcF0=
Subject key identifier: 44:83:2A:3B:3B:09:67:48:1C:69:E1:4C:A5:65:9E:95:69:C0:F0:D6
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F8D4D5B307363BBD0FE30873B3279
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RIMqOzsJZ0gcaeFMpWWelWnA8NY.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20536
IP address blocks: 146.158.74.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8d:4d:5b:30:73:63:bb:d0:fe:30:87:3b:32:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44832a3b3b0967481c69e14ca5659e9569c0f0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:2f:88:b2:83:a3:7a:d0:67:64:ab:5e:1a:
e9:02:66:24:b8:92:b8:b1:8a:0d:b9:c9:33:bf:7c:
44:d4:85:c3:c1:eb:30:df:69:07:c1:56:c0:bc:f0:
9d:a0:e4:bb:79:b1:8b:6d:6f:87:8a:de:c9:71:fc:
dd:71:61:f5:6e:b5:82:b0:df:c8:bf:92:3f:c3:88:
d6:d1:56:ab:70:93:bd:2e:b8:0b:26:19:5a:09:01:
a2:f4:b1:a1:4e:bc:9d:b8:7f:c9:12:d9:de:b4:ff:
19:94:17:b7:0a:64:05:63:70:f2:cb:fb:ba:45:c0:
da:73:cd:20:11:f3:92:0c:34:d2:12:7a:ca:18:17:
b2:51:af:f8:38:ee:b8:db:e6:b8:65:0b:69:74:3e:
e6:e4:f6:d6:ee:f2:b0:fc:5b:98:c1:ab:10:8e:88:
68:9b:90:14:ab:6d:58:7a:14:14:28:92:10:63:b6:
c1:c2:c1:91:4a:59:3b:1c:cf:7b:48:c9:17:11:c0:
60:32:5d:25:26:d3:d4:ee:f5:ef:97:6a:32:94:0d:
f0:fd:5b:90:ce:9f:11:ed:03:38:43:c2:ec:69:4e:
44:96:b9:4d:cf:d6:d1:c1:55:71:b2:07:8e:dc:df:
cc:fb:58:83:dc:a2:4f:ce:b7:01:14:be:6f:ce:8c:
86:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:83:2A:3B:3B:09:67:48:1C:69:E1:4C:A5:65:9E:95:69:C0:F0:D6
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RIMqOzsJZ0gcaeFMpWWelWnA8NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.74.0/23
Signature Algorithm: sha256WithRSAEncryption
63:ee:d8:e4:32:91:11:a0:3e:ea:00:20:17:81:d9:a6:c6:34:
95:a3:95:a7:40:f5:aa:3f:35:2e:e9:78:d5:78:c0:c1:78:c0:
36:44:c1:24:83:fa:ee:48:67:f9:61:0b:17:fa:23:de:2c:d1:
d5:c8:df:57:85:da:cd:8a:20:cd:b1:27:57:fc:3f:7b:56:58:
3c:ff:c6:7a:b3:f4:8c:19:77:90:1e:24:e5:93:ea:ea:26:d4:
22:14:27:c6:aa:e7:c9:53:e1:5d:cb:f1:12:3a:68:a7:91:ef:
65:16:5f:24:68:aa:c4:f6:90:4c:bc:08:fd:c1:a6:43:a9:f9:
ce:a2:bf:6d:bc:e4:26:01:d1:89:06:37:be:25:88:0b:62:b4:
82:40:a9:f7:5e:db:74:07:69:5f:85:95:4d:e8:8e:0b:e9:44:
37:50:c4:46:d4:fc:33:dd:e4:6c:aa:7f:0c:08:d7:82:81:fd:
69:4f:4a:cb:e1:65:2d:f7:78:52:6b:10:77:ab:82:db:75:d5:
e9:59:74:6f:05:2d:c1:72:55:c0:16:14:77:f7:0f:51:b6:89:
ee:bc:ce:c2:f7:6f:a3:3c:e8:81:25:4a:0b:70:bd:e0:ab:ba:
b1:1b:98:b6:23:78:a5:3b:6d:df:0f:ab:31:94:55:c7:f0:cb:
4c:02:33:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:33 2025 by rpki-client