Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YFW8975MBzMwiwTldIoj-CNIifA.roa
File: YFW8975MBzMwiwTldIoj-CNIifA.roa (raw, json)
Hash identifier: z8eNpHQYuK39C6RsyHua/f9VF+DwY602w3yP4ZUq+jk=
Subject key identifier: 60:55:BC:F7:BE:4C:07:33:30:8B:04:E5:74:8A:23:F8:23:48:89:F0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095AA655F7BBB072DE6D75D0BB411F7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YFW8975MBzMwiwTldIoj-CNIifA.roa
Signing time: Mon 02 Jan 2023 03:45:34 +0000
ROA not before: Mon 02 Jan 2023 03:45:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209002
IP address blocks: 146.120.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:aa:65:5f:7b:bb:07:2d:e6:d7:5d:0b:b4:11:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6055bcf7be4c0733308b04e5748a23f8234889f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:7e:ab:12:72:54:6c:1d:5a:45:7f:34:63:
82:80:8c:94:71:ad:72:19:e9:85:ad:7f:93:10:a7:
64:ef:fa:84:88:8b:49:a7:11:48:ab:8f:a5:37:4a:
cc:84:31:0f:c6:03:07:aa:b5:e9:c8:c2:ec:d1:40:
e1:5d:cc:31:dc:bb:a8:38:90:11:0d:cf:1a:84:6a:
15:78:f3:69:41:97:42:26:b5:58:68:9e:6e:36:97:
4e:74:08:b0:b1:8b:68:5c:21:94:6f:21:f0:88:7c:
9c:34:df:df:bc:58:a1:ec:89:77:d3:a3:ea:f8:c1:
cb:d0:ff:47:a0:1c:04:cd:45:21:b6:15:42:b2:7d:
a9:e5:c2:94:45:f0:8a:f0:72:27:b5:a6:15:68:18:
7c:da:f6:48:dd:2d:fc:a9:2e:05:80:40:37:4d:61:
75:63:df:90:8e:c9:fa:b1:af:06:82:46:ef:2b:2a:
d4:11:80:5b:c9:a6:c2:e9:7f:20:37:4e:de:0f:3f:
6e:2f:62:10:f0:c3:06:82:68:b0:b9:a0:74:32:c5:
73:7f:5a:c8:ba:17:96:c8:cd:f7:b4:b4:50:09:f8:
f3:22:0b:61:e5:55:69:77:ae:e1:7c:e5:2e:e4:9f:
89:96:97:ca:77:7f:25:0d:52:f3:ac:42:7f:ae:3d:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:55:BC:F7:BE:4C:07:33:30:8B:04:E5:74:8A:23:F8:23:48:89:F0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/YFW8975MBzMwiwTldIoj-CNIifA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.112.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2f:21:1a:1d:21:51:27:a8:63:d6:c2:ef:38:b6:f8:a6:d5:
55:b2:08:8e:3d:2c:9b:c0:59:44:4e:48:7c:ae:3c:53:72:41:
4e:9a:a4:fd:27:35:c8:a7:7e:1a:6f:da:a9:3c:7d:fb:21:76:
9a:c9:ce:04:eb:a0:00:e2:8c:5c:ee:a5:f3:ef:40:6c:55:95:
70:30:27:c4:85:37:92:1c:97:d4:83:43:47:64:c6:98:85:e0:
50:ca:60:28:8f:17:64:1f:2a:81:9f:86:c5:32:15:82:2c:3a:
cc:1d:4d:33:ba:1b:ce:f5:dc:23:b6:97:e6:7f:e1:b2:41:d7:
f3:db:38:bc:5e:51:b2:f8:ab:cb:2a:be:2d:3a:65:0b:ed:a5:
c1:0f:ad:50:19:7c:6e:1c:60:7a:88:9a:47:0d:00:19:4f:08:
2f:73:f1:37:88:44:7b:d7:a2:00:68:30:12:5f:64:09:ec:be:
8c:76:27:5e:2c:49:b9:ba:2a:a2:ff:2e:aa:3f:b1:e8:96:f0:
f5:d0:8e:09:4a:30:a9:64:e9:ab:6e:a0:c7:87:89:00:43:43:
38:4e:2f:cc:17:89:68:75:3c:cb:cb:42:eb:41:1d:a8:9a:1a:
43:d6:81:05:e8:cd:04:90:e3:98:e2:f1:1c:38:e2:1e:ed:f1:
2e:df:85:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:09 2025 by rpki-client