Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_Y4E7FCYu7vb8WkFgY2F3avuYV8.roa
File: _Y4E7FCYu7vb8WkFgY2F3avuYV8.roa (raw, json)
Hash identifier: c08gWpoPn0kHotUgM7Yk88e6qYAyFKFUC1SKWA2std4=
Subject key identifier: FD:8E:04:EC:50:98:BB:BB:DB:F1:69:05:81:8D:85:DD:AB:EE:61:5F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01942590148D36A7345441A13C7E32E7347F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_Y4E7FCYu7vb8WkFgY2F3avuYV8.roa
Signing time: Thu 02 Jan 2025 05:49:46 +0000
ROA not before: Thu 02 Jan 2025 05:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214115
IP address blocks: 146.120.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:14:8d:36:a7:34:54:41:a1:3c:7e:32:e7:34:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd8e04ec5098bbbbdbf16905818d85ddabee615f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4c:c0:3c:e2:11:5f:2b:b2:f7:c2:db:76:b6:
c6:ef:59:5a:34:b6:b7:c5:1d:1c:d5:ab:93:cb:3d:
1a:2a:5a:c8:29:31:17:3b:72:63:38:69:71:48:5d:
2b:40:2a:48:c1:26:d3:d6:7b:f0:22:26:10:d8:6b:
b2:90:6d:94:11:0e:6f:e2:64:7d:c5:3a:2f:06:9e:
6f:0c:31:10:c4:76:d4:da:5a:76:33:d9:d5:5a:c9:
f6:3b:70:8f:40:67:fa:19:ea:2e:fa:a1:30:a2:c7:
4a:25:3d:e3:bf:55:08:55:1d:5d:c6:80:91:f8:6f:
bd:1b:29:40:95:b8:8a:e7:10:fb:73:e5:6a:e9:05:
5a:55:ec:d4:1e:df:c1:23:e8:b9:fd:b9:5b:a1:48:
ae:9d:cc:8c:fd:00:f7:f2:b1:38:1a:1a:85:d9:73:
99:4e:48:1f:f5:0c:09:f2:f2:0f:6d:f3:46:2f:80:
1b:9c:01:db:0a:49:04:1c:76:47:66:9a:8d:55:82:
79:c7:24:ee:8b:d1:87:c2:21:7a:4c:18:8d:ee:b2:
5a:3f:02:36:d9:db:a6:af:78:84:30:38:b8:3a:f7:
f9:d1:a2:07:0c:a6:61:9b:48:f3:7b:40:36:32:fa:
c9:36:87:7e:ca:b5:f6:55:11:e8:c6:75:48:29:51:
fb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8E:04:EC:50:98:BB:BB:DB:F1:69:05:81:8D:85:DD:AB:EE:61:5F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_Y4E7FCYu7vb8WkFgY2F3avuYV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.88.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:88:de:be:9f:f9:c3:01:6c:f5:37:ca:fe:d2:a6:f6:2a:8d:
e0:95:a4:79:93:93:de:7a:cb:1d:71:68:19:0b:04:5d:dc:b9:
f7:a8:26:74:64:1c:f0:77:c0:c5:f0:39:26:59:45:9e:63:d7:
76:4a:94:ca:c5:77:bc:73:1f:cf:49:59:22:9f:dc:d1:0f:6f:
31:70:a0:2d:be:4e:22:03:6d:75:41:1d:35:1e:5f:17:32:70:
4d:12:31:2a:aa:f6:f0:ee:5f:86:19:90:02:b5:48:9c:84:51:
94:de:8d:c8:91:68:2b:bc:7f:3a:ee:30:f3:f8:77:69:1f:80:
54:82:c1:c8:69:19:2b:70:e7:ae:92:3c:76:e5:cd:f5:33:6d:
bf:84:fd:0a:dc:77:53:78:33:68:cc:96:2e:de:08:88:6b:af:
e7:15:30:a5:af:69:fb:25:51:0d:28:99:bf:17:33:31:96:2f:
73:ed:7d:2d:66:64:76:67:e4:3d:0a:1b:86:99:96:b6:30:9c:
20:83:0a:06:cf:db:79:66:e7:ed:86:74:dc:f0:91:95:be:8e:
06:d8:7f:ec:54:d9:79:91:98:9a:f6:24:60:0d:d7:60:53:c9:
57:56:bb:90:83:65:6b:ee:6d:fe:b6:a6:5e:b0:64:f9:d6:12:
56:7e:30:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:49 2025 by rpki-client