Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Rvn0MRFH6tP4lwubSGU3LK10QNA.roa
File: Rvn0MRFH6tP4lwubSGU3LK10QNA.roa (raw, json)
Hash identifier: eT2PLb0kR8h2UkO8KQhk6AhhrvZ38/n3gCABePc2/YM=
Subject key identifier: 46:F9:F4:31:11:47:EA:D3:F8:97:0B:9B:48:65:37:2C:AD:74:40:D0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095636674AD43135B72146BACA9BAA6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Rvn0MRFH6tP4lwubSGU3LK10QNA.roa
Signing time: Mon 02 Jan 2023 03:45:16 +0000
ROA not before: Mon 02 Jan 2023 03:45:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59525
IP address blocks: 146.120.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:63:66:74:ad:43:13:5b:72:14:6b:ac:a9:ba:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46f9f4311147ead3f8970b9b4865372cad7440d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:15:1b:7e:74:44:47:06:07:1e:4a:b3:d4:9c:
36:74:1c:bb:bc:9c:f7:71:cb:ca:b0:90:f1:c2:87:
bb:91:0d:09:68:3e:1c:ee:c9:aa:3b:03:df:2e:5b:
6c:95:41:f4:52:6d:ff:62:fa:73:1f:25:d2:cd:c0:
29:10:dc:65:ad:35:d4:ba:9c:71:48:44:79:56:92:
d1:2c:02:33:cd:4f:a3:1a:26:e0:ba:29:b3:a2:58:
e8:3d:72:98:5f:b2:17:90:91:d7:6e:15:cc:3b:b4:
1b:16:e3:ac:16:a9:67:34:84:a9:c6:71:e3:09:23:
dc:d1:9e:b7:08:34:1b:45:88:7d:6a:70:f8:0e:12:
4a:4b:2a:61:f0:1c:db:5f:bb:02:92:55:b9:bc:89:
f9:82:b9:59:a3:07:f8:67:aa:54:34:e5:3a:2a:51:
3b:29:73:ca:c2:1f:7a:d6:7c:15:cb:54:04:6f:a4:
23:9d:74:30:c2:57:74:c1:23:8b:98:8a:e1:03:7d:
2e:a3:31:3e:ad:fa:60:a9:a7:2a:e0:06:8e:42:f7:
08:e5:e7:30:cc:9b:10:e9:ba:3b:59:67:92:c9:1d:
76:5d:3c:51:77:a5:c4:a3:ed:f4:a9:68:58:00:94:
94:70:c9:34:bb:9d:25:c7:e9:d5:89:3b:3b:29:6b:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F9:F4:31:11:47:EA:D3:F8:97:0B:9B:48:65:37:2C:AD:74:40:D0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Rvn0MRFH6tP4lwubSGU3LK10QNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.109.0/24
Signature Algorithm: sha256WithRSAEncryption
69:bf:b3:cf:89:e3:6a:7d:ee:3a:59:b4:26:55:48:21:94:18:
c4:f7:3f:83:3b:18:98:c2:20:15:11:c6:a7:54:5e:ac:7e:3d:
b8:dc:23:bb:54:3e:b2:28:0f:7d:1b:f6:fe:22:e7:3d:06:70:
5e:ce:e2:00:09:90:11:d7:f6:70:12:59:8d:b6:4f:18:c0:13:
a9:07:45:bf:48:31:5c:3d:07:17:27:01:ec:c3:4d:65:b6:5a:
47:78:9d:12:ae:08:22:34:71:90:73:a5:9f:41:bc:af:38:e1:
6b:13:cc:5c:c2:b2:ff:9b:3e:72:c3:6d:1f:24:42:e2:1f:cd:
f3:35:d6:70:45:1a:1a:82:bd:5c:fd:bf:ec:fa:52:ae:4b:89:
b9:96:69:43:0b:da:b3:bb:f6:fd:6a:23:3d:33:2d:2a:42:fa:
e7:57:41:84:76:14:11:08:3a:a3:73:1d:96:85:a7:30:ba:c1:
4e:8a:90:04:cd:19:ce:cc:e9:1c:87:08:5a:5f:6b:86:31:5f:
54:82:13:1a:f5:03:ff:47:96:ac:c6:6e:66:8c:ff:48:93:30:
c5:94:0a:33:e3:b6:56:2f:f3:50:2b:2b:2f:87:38:d9:4c:70:
e1:09:f1:c3:e0:8d:4b:57:4b:39:d9:51:32:10:4b:11:ff:c6:
25:d6:c5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:39 2025 by rpki-client