Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_5BQAVin-EjeApOcqS0E4CMwILU.roa
File: _5BQAVin-EjeApOcqS0E4CMwILU.roa (raw, json)
Hash identifier: Y+lLZRIuPh/uZF4T2dlFfvgcrGBre8wSTUoqPMgFZYM=
Subject key identifier: FF:90:50:01:58:A7:F8:48:DE:02:93:9C:A9:2D:04:E0:23:30:20:B5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A37DE2046BE870419BFDE132C9F32
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_5BQAVin-EjeApOcqS0E4CMwILU.roa
Signing time: Tue 02 Jan 2024 12:33:33 +0000
ROA not before: Tue 02 Jan 2024 12:33:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200787
IP address blocks: 146.120.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:37:de:20:46:be:87:04:19:bf:de:13:2c:9f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff90500158a7f848de02939ca92d04e0233020b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:38:0c:1a:5d:3a:79:7f:36:5d:c0:37:69:50:
48:41:4e:17:85:00:ef:42:af:be:84:34:9b:2a:98:
94:aa:63:95:f3:55:83:64:e8:bd:48:fa:0f:69:ea:
09:ba:39:13:cc:77:d3:ea:45:a7:b4:57:15:bd:04:
73:32:4d:88:09:b9:61:ca:15:5c:c9:0c:24:c2:0f:
57:a0:e6:e5:3f:ee:ef:11:8f:39:db:3f:29:6e:aa:
3c:75:5c:48:80:93:1f:65:d4:52:d9:ae:5d:1a:8c:
ef:c2:ab:86:4a:9a:52:48:a5:5b:d6:20:10:cf:4d:
89:fc:37:76:8a:93:78:6e:3d:da:56:c4:2b:a1:fc:
28:71:f7:3f:63:4a:02:b1:53:9b:32:a6:82:cb:e9:
5a:63:d5:ea:e9:0e:a2:a1:25:2a:c8:fd:ea:9e:53:
66:0e:d1:34:71:35:85:79:46:fa:ae:78:95:e8:db:
d8:9b:99:90:74:6e:d6:dd:83:2f:b7:aa:7d:17:53:
a6:db:b4:51:68:7e:ff:d5:5f:39:71:b3:91:44:35:
35:6a:54:37:96:f7:d4:bb:61:c6:d9:53:01:26:c5:
b1:16:2b:25:a4:1e:e3:b7:60:78:51:c5:c9:eb:27:
f4:d8:98:49:0e:91:40:cd:55:63:f2:d2:22:81:08:
c9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:90:50:01:58:A7:F8:48:DE:02:93:9C:A9:2D:04:E0:23:30:20:B5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_5BQAVin-EjeApOcqS0E4CMwILU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.95.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:09:92:7e:56:ed:5c:f8:9b:db:a2:d2:0f:f4:aa:fd:be:ac:
6c:06:1a:70:b4:00:47:7c:75:59:d0:7d:b6:a6:a9:3f:2c:b9:
fe:39:82:bd:e7:95:3b:f4:0c:90:46:f6:e0:01:4a:c5:62:3b:
1f:9f:11:70:c8:1d:f1:0d:c9:ee:94:18:86:e3:84:c2:93:4d:
97:1a:42:3f:30:05:6b:8f:4f:36:df:2a:f0:f6:ff:6e:dc:e2:
33:62:e6:9b:39:cb:2e:62:49:c9:35:76:51:58:40:65:d3:c2:
b2:54:43:fc:d4:3a:78:ec:25:43:25:5c:4a:2b:1f:43:6d:fb:
fe:16:4b:65:50:6f:d1:19:09:db:e0:ea:b2:9a:c5:8a:8b:1c:
78:4f:d6:dd:a8:bf:8d:39:68:d1:4f:88:66:6d:5c:a6:7b:3c:
b8:2b:c0:7e:a5:89:94:89:9c:ba:47:58:7b:c5:ce:45:8a:93:
83:75:a0:00:ca:26:de:a0:98:66:1a:f6:6d:b2:58:06:46:3b:
7e:62:22:d1:d7:d0:7c:11:a2:86:c2:16:c5:0e:a6:51:e2:49:
9f:1e:3b:bf:dd:24:66:43:dc:e7:14:33:ef:5f:6c:2b:19:a6:
6d:f5:5d:c8:1b:24:ca:fe:ed:60:94:07:19:cf:da:48:43:9f:
ad:f8:61:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:27 2025 by rpki-client