Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bkMFiG6zvd2tHLQHk8-edm_JEP4.roa
File: bkMFiG6zvd2tHLQHk8-edm_JEP4.roa (raw, json)
Hash identifier: sOPbcj5AVFfP+K5ymOXfqptlkZ92RlDpHNB7qpMTK+8=
Subject key identifier: 6E:43:05:88:6E:B3:BD:DD:AD:1C:B4:07:93:CF:9E:76:6F:C9:10:FE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095905AC1814A03540DDB2642F6B77C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bkMFiG6zvd2tHLQHk8-edm_JEP4.roa
Signing time: Mon 02 Jan 2023 03:45:28 +0000
ROA not before: Mon 02 Jan 2023 03:45:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201224
IP address blocks: 146.120.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:90:5a:c1:81:4a:03:54:0d:db:26:42:f6:b7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e4305886eb3bdddad1cb40793cf9e766fc910fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:86:b8:e3:75:a5:6b:c8:41:6a:e1:01:3e:3d:
ad:0e:38:e4:45:f4:18:c8:97:11:f6:51:0d:62:06:
b5:75:90:36:b3:1d:4d:69:f1:b8:1b:03:5e:af:a9:
94:de:e9:20:72:ed:f8:94:0d:a3:89:0f:34:27:12:
45:1b:ad:0f:e1:b3:e2:3e:f4:cf:13:43:07:bf:ad:
68:ca:35:ab:97:22:5d:43:9a:9b:2c:b9:b9:41:a6:
d9:c1:42:28:9e:27:3a:92:ab:93:c2:a6:f3:f9:58:
e2:aa:f0:8a:d0:6b:c8:6e:88:c1:3b:9e:c9:f1:44:
2b:cf:2e:e7:8d:a7:06:c6:3c:f0:f9:60:b1:f3:9d:
1a:89:99:10:a6:8f:f3:45:7a:76:65:1d:df:a1:a6:
0f:55:22:cb:4f:7c:d3:d4:67:d6:1f:d9:95:b4:ac:
a1:79:1e:75:42:86:2a:74:45:1d:6e:09:1f:3f:5c:
0f:0a:00:20:f1:ac:5f:9d:e2:d3:16:dd:41:11:ef:
c0:69:f9:6b:be:f8:b3:ad:0f:77:b0:6c:a5:b1:06:
b7:d6:06:08:da:4a:50:7a:43:18:f1:b4:ca:8d:6a:
db:a1:34:77:f3:02:71:94:93:40:26:79:a1:57:2d:
62:41:dc:0c:f6:fa:fd:0d:1e:bb:66:0c:8a:ac:7d:
ae:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:43:05:88:6E:B3:BD:DD:AD:1C:B4:07:93:CF:9E:76:6F:C9:10:FE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bkMFiG6zvd2tHLQHk8-edm_JEP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.196.0/23
Signature Algorithm: sha256WithRSAEncryption
04:64:96:00:72:f1:f3:17:d9:39:98:4b:3f:cb:0e:9b:b8:5b:
f4:0b:8c:fa:00:ca:29:34:56:b6:52:0f:7a:24:44:05:67:80:
4f:b1:69:1f:76:6a:e9:4d:3a:54:b4:a1:fa:f9:64:19:a2:8f:
3d:81:bb:cc:20:6e:53:dd:a5:89:13:3d:e6:06:1d:7e:5a:1d:
da:7b:37:10:0c:37:1b:cc:c8:11:ab:c4:8d:ec:3d:05:88:de:
7f:2f:dc:0b:30:58:c8:d0:b7:37:0f:1a:41:a1:11:56:58:8d:
d8:c1:b3:18:93:dd:f5:03:c5:70:aa:aa:28:58:34:e7:d8:6b:
39:a0:6e:53:e6:5f:c3:aa:b2:f4:49:be:a0:06:80:11:46:87:
6f:08:62:ad:05:8d:c3:e6:4b:3f:83:87:b2:75:04:97:dc:ca:
24:59:9f:5e:fb:a8:2b:cf:42:3c:15:0d:a6:24:f6:f7:e1:ff:
7f:a8:cc:ea:f2:1d:04:4c:03:ff:d0:47:5e:51:39:a5:a7:00:
d8:9e:a8:47:82:44:54:da:a0:8a:fa:b8:5d:f0:7e:98:67:aa:
65:c5:dd:5d:e6:ae:18:12:6f:e3:dd:6e:de:15:50:34:58:ad:
4f:2b:aa:f8:88:75:e3:64:22:2b:b3:02:0b:26:e1:0a:b5:f1:
ac:45:29:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlZBawYFKA1QN2yZC9rd8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTQzMDU4ODZlYjNiZGRkYWQxY2I0MDc5M2NmOWU3NjZmYzkxMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4a443Wla8hBauEBPj2tDjjkRfQY
yJcR9lENYga1dZA2sx1NafG4GwNer6mU3ukgcu34lA2jiQ80JxJFG60P4bPiPvTP
E0MHv61oyjWrlyJdQ5qbLLm5QabZwUIonic6kquTwqbz+VjiqvCK0GvIbojBO57J
8UQrzy7njacGxjzw+WCx850aiZkQpo/zRXp2ZR3foaYPVSLLT3zT1GfWH9mVtKyh
eR51QoYqdEUdbgkfP1wPCgAg8axfneLTFt1BEe/AaflrvvizrQ93sGylsQa31gYI
2kpQekMY8bTKjWrboTR38wJxlJNAJnmhVy1iQdwM9vr9DR67ZgyKrH2uvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG5DBYhus73drRy0B5PPnnZvyRD+MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvYmtNRmlHNnp2ZDJ0SExRSGs4LWVkbV9KRVA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBknjEMA0G
CSqGSIb3DQEBCwUAA4IBAQAEZJYAcvHzF9k5mEs/yw6buFv0C4z6AMopNFa2Ug96
JEQFZ4BPsWkfdmrpTTpUtKH6+WQZoo89gbvMIG5T3aWJEz3mBh1+Wh3aezcQDDcb
zMgRq8SN7D0FiN5/L9wLMFjI0Lc3DxpBoRFWWI3YwbMYk931A8VwqqooWDTn2Gs5
oG5T5l/DqrL0Sb6gBoARRodvCGKtBY3D5ks/g4eydQSX3MokWZ9e+6grz0I8FQ2m
JPb34f9/qMzq8h0ETAP/0EdeUTmlpwDYnqhHgkRU2qCK+rhd8H6YZ6plxd1d5q4Y
Em/j3W7eFVA0WK1PK6r4iHXjZCIrswILJuEKtfGsRSlL
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:30 2025 by rpki-client