Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TJyCGt5ScSeYmyDZPclIJ7WO-AE.roa
File: TJyCGt5ScSeYmyDZPclIJ7WO-AE.roa (raw, json)
Hash identifier: 6M59lgcGLm/i8I7ncGIoPKFnQtr0BXJWnOT2c/ZRAD8=
Subject key identifier: 4C:9C:82:1A:DE:52:71:27:98:9B:20:D9:3D:C9:48:27:B5:8E:F8:01
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FA86B01381EA37F684D09ED72542B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TJyCGt5ScSeYmyDZPclIJ7WO-AE.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44927
IP address blocks: 146.120.89.0/24 maxlen: 24
146.120.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a8:6b:01:38:1e:a3:7f:68:4d:09:ed:72:54:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c9c821ade527127989b20d93dc94827b58ef801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:03:bb:e4:65:d5:de:10:2f:ce:71:b5:4f:a5:
58:01:93:4e:b7:37:e4:c7:90:18:be:9b:d6:14:10:
80:e9:c4:91:5a:df:c4:76:e9:12:2a:e1:b8:26:e9:
7b:51:4e:0f:f6:6a:3b:21:06:dd:55:07:c3:64:75:
70:d5:07:99:96:f2:00:65:eb:47:07:3e:de:51:75:
32:67:36:7b:9d:de:08:c4:6f:84:88:4d:9d:79:bd:
61:5c:35:ff:b0:0f:ba:f2:24:19:9f:49:29:36:18:
b6:15:35:75:87:2e:ac:b8:e2:ec:40:77:bb:d5:be:
07:12:f6:90:3b:f9:57:68:1a:29:b0:c5:24:8f:03:
87:cd:91:b1:27:96:c2:b0:1b:26:54:49:07:58:96:
03:09:35:f8:14:a6:d2:f2:36:4f:93:3f:e1:0f:fe:
8c:0d:ae:bc:8c:13:8c:e0:e9:d0:a6:7f:47:9a:b7:
4c:99:c8:9e:f0:90:0b:e8:83:6c:42:e7:e5:c4:47:
eb:ec:47:91:8d:40:fb:79:ad:b4:7a:90:43:13:42:
18:cf:47:98:eb:af:39:43:5a:c9:e8:fc:5a:77:6d:
dc:14:25:a4:76:09:48:cf:89:76:29:bb:22:2e:d1:
1c:34:67:82:f6:8e:db:e0:a6:26:d3:7f:8f:49:a6:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9C:82:1A:DE:52:71:27:98:9B:20:D9:3D:C9:48:27:B5:8E:F8:01
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TJyCGt5ScSeYmyDZPclIJ7WO-AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.89.0/24
146.120.96.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e7:63:a2:b2:65:39:70:81:c6:09:33:b5:c9:13:79:e1:31:
72:ad:29:75:63:49:dc:5e:76:28:e1:80:e8:a1:10:a0:2a:f3:
7e:cd:ee:d8:5c:c6:f2:ba:1b:e4:5a:78:fc:de:6c:ce:82:0a:
37:cf:27:d5:6a:87:6b:84:ee:3b:19:6a:0e:28:5f:1d:72:73:
be:bb:02:0f:46:93:2a:31:f9:90:f6:87:df:6f:5b:db:47:1c:
bf:65:f6:9c:05:95:23:9b:f5:ac:8e:68:77:3f:cf:81:a0:ab:
a8:a2:e9:a3:fc:27:d1:75:5e:4b:6d:ee:da:6f:94:36:d2:31:
22:46:ee:6c:d1:dc:6d:39:02:1a:65:f9:0d:fa:81:f5:2d:28:
13:9f:ce:c6:54:84:6a:9c:40:03:61:ec:c8:8b:8c:6a:4b:e2:
87:62:02:36:df:92:e8:05:ba:44:df:20:84:7e:18:09:8d:c8:
b2:8a:a1:22:78:74:2e:82:e9:98:02:b2:38:de:0a:6b:41:aa:
d2:2d:dd:6f:8c:ad:3e:f7:41:a4:5b:87:fd:e0:d8:2c:22:c8:
c6:21:fc:6a:63:9f:d0:4b:7b:cb:0c:f4:09:94:fa:bc:3b:53:
19:d4:2f:ca:90:18:8d:00:c6:64:9b:09:4d:60:8b:1a:25:6d:
0d:86:c0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:06 2025 by rpki-client