Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bpRtQu4c55Jk2NMLXTpTErSX5GI.roa
File: bpRtQu4c55Jk2NMLXTpTErSX5GI.roa (raw, json)
Hash identifier: HUj+Q6VzjTP7xvBTWOuL0V12c8/N+PTnjYADwju2ro4=
Subject key identifier: 6E:94:6D:42:EE:1C:E7:92:64:D8:D3:0B:5D:3A:53:12:B4:97:E4:62
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570952119C031E374CFD8354354945C50
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bpRtQu4c55Jk2NMLXTpTErSX5GI.roa
Signing time: Mon 02 Jan 2023 03:44:59 +0000
ROA not before: Mon 02 Jan 2023 03:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42489
IP address blocks: 146.120.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:21:19:c0:31:e3:74:cf:d8:35:43:54:94:5c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e946d42ee1ce79264d8d30b5d3a5312b497e462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5a:ae:2b:8b:4d:d4:de:87:50:21:85:23:38:
fc:0e:88:70:ba:cc:90:72:86:ae:3f:17:da:00:fd:
b1:00:a1:88:1e:0e:e3:34:79:d5:59:77:6b:de:6b:
eb:60:84:58:f1:dc:35:66:f3:53:4d:f5:0e:fd:82:
41:50:97:c8:d6:c9:da:04:1f:c2:5d:d1:cf:69:46:
cb:c0:50:15:7f:d9:b2:44:8d:fc:af:93:2e:15:87:
37:e2:31:70:c5:50:f8:b4:d8:80:ee:28:d7:83:30:
f7:22:0c:74:91:f4:64:b1:22:a4:11:16:af:1f:b6:
87:0a:31:c5:90:6b:1e:01:8f:59:37:16:9d:60:cb:
84:64:80:b7:56:2c:d1:36:f3:86:c1:d3:5b:29:35:
98:fa:7d:f9:8e:77:e9:44:36:03:ba:4b:f1:0d:a2:
17:5f:44:14:ed:59:58:a1:90:27:8f:0d:fd:db:8b:
d1:41:c8:6c:77:41:d1:dc:69:eb:c4:ec:3a:40:ab:
86:1e:21:1e:c7:a3:7e:3d:cb:2a:26:a4:c9:51:41:
a8:58:ce:5f:31:fd:7f:29:42:71:d4:6c:d7:b0:5d:
12:88:95:00:ba:c8:59:53:8b:fc:a9:30:4e:0b:d0:
1b:90:8a:46:3f:19:1a:a8:4d:12:9a:1a:8b:bb:11:
ce:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:94:6D:42:EE:1C:E7:92:64:D8:D3:0B:5D:3A:53:12:B4:97:E4:62
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bpRtQu4c55Jk2NMLXTpTErSX5GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.222.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:bf:e7:61:6e:a1:fa:b3:f4:a7:d3:10:45:9d:3c:08:e3:e5:
e2:98:56:5e:b8:64:e8:e1:0c:38:09:3f:08:22:98:03:e2:9a:
8c:96:7b:f1:1f:36:07:fe:4e:a0:59:0c:43:51:d2:67:05:31:
a0:8d:f9:44:32:a3:16:c9:06:86:ef:da:c7:25:a7:70:bc:d3:
63:92:61:1b:85:d9:61:31:06:66:75:87:29:68:c3:10:31:bd:
98:21:15:b2:93:06:c0:41:56:17:64:4e:b0:23:09:2f:17:b9:
60:88:54:a7:91:5b:7e:b6:22:09:c3:7e:33:c8:ed:dd:f5:6b:
0d:f6:49:f0:35:ea:5c:d2:08:23:dc:63:be:ac:6a:bf:ff:50:
72:84:b6:64:20:29:0a:10:cd:6e:c6:15:fe:e5:dd:d2:7e:d4:
23:ec:fe:0c:4d:1c:86:eb:ed:be:31:1c:9c:7c:28:6e:89:16:
48:f6:24:1d:85:28:37:6e:9a:fe:78:aa:6e:69:f4:e3:9e:42:
a6:4f:28:6a:0d:44:f9:d9:89:00:17:c6:c1:5b:a9:16:a0:39:
29:74:98:97:95:b1:4a:87:ec:db:de:30:f5:71:91:fd:9b:76:
46:85:0c:6c:ad:05:20:25:3d:f8:98:f8:e6:51:a8:6f:02:4c:
e0:0c:df:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:22 2025 by rpki-client