Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TSOMi9NKcIKggkhTZcXMDCv9IkA.roa
File: TSOMi9NKcIKggkhTZcXMDCv9IkA.roa (raw, json)
Hash identifier: zdiD2AuNmFf5//KS5ZzfEJuRLlEH9DiIFkLD8ffoGnc=
Subject key identifier: 4D:23:8C:8B:D3:4A:70:82:A0:82:48:53:65:C5:CC:0C:2B:FD:22:40
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570959616FB66B7D3EAEFE096F30F9C47
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TSOMi9NKcIKggkhTZcXMDCv9IkA.roa
Signing time: Mon 02 Jan 2023 03:45:29 +0000
ROA not before: Mon 02 Jan 2023 03:45:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204323
IP address blocks: 146.158.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:96:16:fb:66:b7:d3:ea:ef:e0:96:f3:0f:9c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d238c8bd34a7082a082485365c5cc0c2bfd2240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:92:42:60:2d:f7:2d:01:39:f7:03:36:56:77:
b8:ac:4e:23:a4:b2:be:0a:5b:03:49:b0:9e:35:76:
b6:da:df:d7:87:b2:05:d5:8b:58:6c:b5:c7:ad:7a:
b8:a4:35:11:17:d4:80:06:74:5c:9c:cd:63:52:65:
fd:4c:8d:df:47:2b:37:e5:98:68:39:50:c4:ab:b6:
03:2e:de:29:b4:2e:4b:82:55:fb:60:71:46:41:f9:
62:17:80:5b:e8:15:0f:34:13:55:82:5a:85:b6:b0:
04:07:b5:9c:eb:a0:70:44:21:55:34:a1:ec:7c:7e:
f0:bf:e1:4a:f0:08:ba:b5:b9:97:88:76:40:1d:7a:
72:92:3b:5f:ad:6e:3a:d1:cf:61:21:97:90:d5:71:
02:c6:f0:02:4f:fa:b5:ba:ba:71:7a:0f:6c:59:29:
cb:aa:b5:b9:cf:8f:92:ce:35:ff:58:3f:78:6f:31:
65:6a:50:08:89:03:c0:82:53:6d:7e:f5:b9:4b:31:
12:19:6a:b6:f7:28:8f:ed:71:ae:cc:c6:06:98:09:
e4:78:ae:46:a9:59:e7:6c:e9:27:09:a5:b6:7d:a6:
a1:29:24:8a:f4:40:47:32:99:0c:6e:8d:9a:ab:5e:
63:56:2b:d0:51:e3:08:a2:32:69:c4:97:34:93:81:
c8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:8C:8B:D3:4A:70:82:A0:82:48:53:65:C5:CC:0C:2B:FD:22:40
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TSOMi9NKcIKggkhTZcXMDCv9IkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.14.0/24
Signature Algorithm: sha256WithRSAEncryption
56:cf:3a:c9:d9:a0:17:2c:da:11:d1:fb:57:2b:8e:db:1f:06:
43:b4:6f:2b:a8:c6:bb:02:43:0c:ec:22:a3:8c:b0:6d:c9:59:
19:55:d0:32:14:76:d5:5e:60:55:6c:20:31:c0:bd:be:41:b6:
f9:61:39:90:98:5d:66:14:6e:59:07:e8:7a:13:d2:2f:d5:41:
ec:34:14:55:27:57:d7:33:ad:a1:2f:15:3a:88:24:30:fa:3e:
62:92:2a:f7:20:8c:42:1f:01:9c:3a:02:0b:1a:6f:b4:cc:56:
24:d5:a9:db:81:bf:50:9c:ef:8c:1e:2a:d8:b0:94:ba:e1:6a:
56:dc:24:5e:c1:af:78:d9:08:64:11:87:2e:aa:a8:21:f1:f4:
7e:ee:05:77:05:cf:e3:1e:c5:bc:b5:9e:e2:ed:81:17:57:98:
fa:99:fc:b6:7a:93:28:40:22:7d:dd:0b:c9:c4:0e:ff:f4:25:
15:c5:5d:0f:7d:d7:4e:74:f7:64:4c:4e:cf:f5:65:42:9d:e9:
56:52:47:66:81:77:22:0b:e1:c2:62:6d:2b:b6:d2:3b:be:59:
0c:0e:19:df:26:00:1f:b4:19:1a:43:03:2a:f6:6f:08:01:f2:
4d:3c:36:5c:2c:b4:1f:79:aa:66:78:15:17:58:c0:7c:cc:89:
5f:fd:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:53 2025 by rpki-client