Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bXvTLSoRbvqeUi4VpB0MwHOvzS4.roa
File: bXvTLSoRbvqeUi4VpB0MwHOvzS4.roa (raw, json)
Hash identifier: VW/mnxYbAmMTykKw28sCk4j+JfQBKJD/gq66Mjwyq5Q=
Subject key identifier: 6D:7B:D3:2D:2A:11:6E:FA:9E:52:2E:15:A4:1D:0C:C0:73:AF:CD:2E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0191127A851F9006FD5F857F54017F079850
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bXvTLSoRbvqeUi4VpB0MwHOvzS4.roa
Signing time: Fri 02 Aug 2024 09:45:04 +0000
ROA not before: Fri 02 Aug 2024 09:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20688
IP address blocks: 146.120.0.0/21 maxlen: 24
146.120.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:12:7a:85:1f:90:06:fd:5f:85:7f:54:01:7f:07:98:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 2 09:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d7bd32d2a116efa9e522e15a41d0cc073afcd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:10:d4:f2:ad:56:05:66:b4:ef:bc:6e:53:
96:50:fc:d8:17:46:f8:8c:bf:d5:e6:bc:5a:15:15:
88:4d:69:98:c6:4f:3d:b2:17:e5:30:b8:f8:d5:4d:
a0:81:5c:a9:6b:c1:1e:06:34:02:fd:ea:da:a9:d5:
09:7c:42:ea:b8:9f:85:0d:b2:08:15:36:93:0b:d5:
9f:e5:3d:0b:15:95:69:cf:41:dd:9d:7c:8b:d7:5b:
f5:b1:65:a1:ff:18:a7:f1:1a:be:d4:46:e6:e4:04:
b5:20:e7:6f:f7:e3:4f:62:71:49:15:b3:60:9e:af:
7d:c7:e0:b9:55:f1:d9:c5:c0:bd:ae:ee:fd:0a:de:
35:54:2c:83:6b:62:da:4f:29:00:39:22:5a:63:7c:
71:09:d2:39:59:51:b0:bb:a1:69:ce:f0:52:1e:c9:
71:b3:e4:23:12:2c:94:c3:15:4e:97:53:07:2a:79:
ae:4f:49:68:60:87:2e:20:42:a0:f8:68:80:f3:9a:
65:55:69:1b:5e:28:f4:87:3f:62:fe:fe:48:eb:96:
97:b6:14:6e:b8:1f:31:a8:e1:b9:00:7b:84:c8:f5:
c6:af:42:aa:c5:00:54:94:66:95:f2:3e:b2:7f:db:
9a:fe:83:ef:1c:1f:4b:bc:6e:af:09:63:08:ea:1f:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7B:D3:2D:2A:11:6E:FA:9E:52:2E:15:A4:1D:0C:C0:73:AF:CD:2E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bXvTLSoRbvqeUi4VpB0MwHOvzS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.0.0/21
146.120.116.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:fb:9f:12:7f:df:b1:7c:6a:1c:b5:65:1a:2c:78:7b:6c:8a:
bd:08:b0:02:b8:ca:0b:46:46:5b:2d:9e:b1:8c:fc:ee:7c:b3:
22:00:56:07:49:04:55:26:45:61:32:ab:06:7f:42:0b:d0:2f:
eb:28:97:0b:f3:fe:a5:85:60:ef:63:b9:38:8b:79:3f:7d:03:
c9:15:23:e5:13:a9:9e:b0:6c:fb:42:e0:8d:56:d0:df:31:f7:
fa:d2:b1:53:4f:9d:c4:ca:17:bc:eb:32:c4:a5:ee:ca:38:0f:
fc:4b:3a:3b:04:0c:6c:53:d9:28:cb:e1:f3:aa:22:7f:be:38:
cc:1c:cd:18:62:de:d7:d0:10:79:2f:56:f8:17:6f:81:4f:ae:
4b:13:bf:d1:6e:83:1a:0a:b8:14:01:a5:b9:c8:37:02:22:de:
2a:e8:cc:6d:1d:64:ab:b7:3c:62:e2:1e:c5:84:a6:75:f2:0e:
55:9c:2a:1f:14:0d:d4:c5:b1:b7:9b:29:b2:36:5e:ea:40:c3:
c6:f2:f5:80:aa:5f:df:7d:2c:06:e4:ee:50:42:9a:b9:fb:ef:
cd:13:e2:e8:7a:8f:96:56:3f:54:07:58:2a:16:66:07:ba:40:
8e:8c:88:83:c7:8a:d8:83:65:84:12:b2:04:0c:bf:05:26:ed:
3f:cb:51:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:49 2025 by rpki-client