Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Rx4aE0XhjbUF4mPP6IF1LAUXbr0.roa
File: Rx4aE0XhjbUF4mPP6IF1LAUXbr0.roa (raw, json)
Hash identifier: g50nF8fogYpwz3En5rLPS+d+P2rfCgQ3bC5FBbys+NI=
Subject key identifier: 47:1E:1A:13:45:E1:8D:B5:05:E2:63:CF:E8:81:75:2C:05:17:6E:BD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570952E0E84B6A2556671BBAA5FFBAC16
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Rx4aE0XhjbUF4mPP6IF1LAUXbr0.roa
Signing time: Mon 02 Jan 2023 03:45:02 +0000
ROA not before: Mon 02 Jan 2023 03:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44405
IP address blocks: 146.120.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:2e:0e:84:b6:a2:55:66:71:bb:aa:5f:fb:ac:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=471e1a1345e18db505e263cfe881752c05176ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:f9:3b:a5:1f:a9:85:3a:62:f9:2f:c9:85:
ae:32:53:e2:90:92:1a:f4:ec:9c:a8:bc:eb:e7:d1:
77:40:cc:58:5b:83:0c:3a:59:92:79:90:24:c8:c3:
78:3b:d1:a7:76:12:97:c9:d6:2f:a3:64:fd:6f:7a:
57:94:b7:94:af:7a:cc:f3:8b:02:5b:64:48:f2:e9:
3c:2a:a0:74:d2:39:64:de:a3:1d:5c:21:cd:dd:10:
16:04:e5:02:83:1e:d7:89:83:99:e9:37:e8:12:70:
2f:ca:fa:84:46:95:93:79:91:a9:d3:96:db:0b:13:
d9:74:70:f6:71:b4:9c:b3:6f:98:61:fd:84:03:2a:
38:3a:fc:b8:f8:de:85:59:f3:44:99:bd:72:39:9e:
74:8d:75:ef:e1:b9:0b:b4:ee:ee:5a:4a:a7:b6:31:
18:cf:5f:c1:26:3b:65:07:31:f2:7c:ca:81:70:89:
88:bf:3c:b9:29:2d:79:5b:d7:70:e4:09:7a:f2:85:
db:7c:ea:2d:54:f9:58:0e:a6:1b:ec:50:29:37:74:
72:d1:dd:30:db:ef:bd:13:8d:b3:ee:fe:f9:96:43:
2a:ab:ef:c0:4b:08:46:f3:67:26:26:0c:20:95:fc:
d6:76:28:1e:77:4e:d6:49:0e:87:1d:66:46:bb:09:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1E:1A:13:45:E1:8D:B5:05:E2:63:CF:E8:81:75:2C:05:17:6E:BD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Rx4aE0XhjbUF4mPP6IF1LAUXbr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.184.0/24
Signature Algorithm: sha256WithRSAEncryption
54:90:6c:e1:e4:99:8f:a8:b6:88:5e:7d:5d:94:fd:ef:41:b3:
81:d5:99:33:15:a0:a9:f6:86:0d:cb:04:fe:fd:43:f9:3b:27:
75:6b:62:4c:99:04:6a:b0:e0:1b:86:08:bb:0a:7b:20:90:01:
4e:d4:3c:d4:1e:b3:64:00:40:3a:13:9c:c0:a5:7b:83:eb:dd:
b9:e9:bf:46:16:bd:ac:68:6d:8e:b0:c6:de:74:a6:e0:c4:97:
9a:04:0f:06:a4:0c:69:23:d6:7a:eb:33:a2:bc:50:30:13:ac:
94:95:1b:a3:f8:32:e9:1d:65:f4:98:76:20:24:75:aa:eb:cc:
3b:fd:43:38:c4:a0:b0:58:52:73:8e:b8:69:23:16:35:a2:2a:
62:4a:87:73:1f:24:bf:89:f4:b5:80:ba:ce:b1:f2:32:2a:4b:
5a:38:4b:9e:29:e0:e5:a3:ee:6f:32:38:e2:cf:17:e1:05:c2:
ee:3e:2d:0b:eb:ef:75:64:e2:19:52:d7:6c:07:7a:2d:47:2a:
86:e5:94:09:36:eb:85:c6:a4:a0:a4:1d:a7:f2:78:3b:dc:ab:
55:ce:70:1d:f5:99:23:c5:9c:cb:88:af:59:72:15:ed:e8:b0:
39:03:a3:67:34:82:53:9c:0c:b7:c5:70:b7:a8:d6:01:23:21:
82:19:45:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:32 2025 by rpki-client