Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fpTk9FA37cFdS8zRyiQZ8P-rkK8.roa
File: fpTk9FA37cFdS8zRyiQZ8P-rkK8.roa (raw, json)
Hash identifier: fK6bJw0sv/zC2u/kTNVpi0xtUPJbJmQ8dt0IId3BgG0=
Subject key identifier: 7E:94:E4:F4:50:37:ED:C1:5D:4B:CC:D1:CA:24:19:F0:FF:AB:90:AF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0184A9BEE98F76AD13B50838830A8177A947
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fpTk9FA37cFdS8zRyiQZ8P-rkK8.roa
Signing time: Thu 24 Nov 2022 13:06:11 +0000
ROA not before: Thu 24 Nov 2022 13:06:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202533
IP address blocks: 146.120.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a9:be:e9:8f:76:ad:13:b5:08:38:83:0a:81:77:a9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Nov 24 13:06:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e94e4f45037edc15d4bccd1ca2419f0ffab90af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:3c:f5:66:a2:53:56:da:17:04:4b:f3:76:
f5:dc:7e:de:8c:f0:06:08:db:63:37:c9:84:bb:2a:
a5:82:1c:83:74:c9:27:9c:aa:b6:7e:56:51:1a:46:
03:60:5c:06:f4:98:1e:15:8d:40:b7:a7:60:5f:a1:
78:c2:00:38:76:cc:20:a4:4b:b8:15:49:0a:3f:e3:
53:88:1f:8e:a5:4e:00:cb:26:f3:90:3a:6e:39:a9:
ad:30:6c:92:87:3a:38:d0:c9:c1:37:2e:8f:a5:d3:
90:37:c6:73:98:4c:7d:78:c8:f4:a1:98:c1:e6:92:
b7:b4:58:ab:21:83:c5:eb:f5:6d:13:c5:c1:d9:4c:
4e:c8:82:94:2b:41:67:72:9b:72:bc:aa:64:53:47:
c8:95:9a:f8:82:8e:41:d8:9a:96:0c:43:e2:93:a2:
32:4a:2c:d8:26:11:41:3b:62:ab:e3:b3:1c:cd:b4:
ea:06:0b:82:56:14:3f:d3:66:52:00:5a:78:51:4c:
fa:c8:be:dc:b9:b7:70:dc:2b:ff:4e:18:6f:f5:79:
dd:26:80:ba:4f:e3:db:4e:6a:af:92:9f:3d:a6:94:
d1:12:96:df:ae:92:92:c1:d9:b1:55:aa:10:06:d2:
34:48:45:31:5f:a5:97:c9:1a:4f:4b:74:ae:c8:8a:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:94:E4:F4:50:37:ED:C1:5D:4B:CC:D1:CA:24:19:F0:FF:AB:90:AF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fpTk9FA37cFdS8zRyiQZ8P-rkK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.20.0/24
Signature Algorithm: sha256WithRSAEncryption
23:77:e2:c2:50:31:21:5a:d7:f4:c0:1f:f2:08:e3:20:e8:0e:
6c:db:21:e2:4d:f9:fd:02:65:4e:7a:01:99:ad:d5:48:60:18:
d0:eb:05:57:44:60:a0:a6:f2:fa:d8:ec:74:84:e8:db:7a:55:
32:c5:20:f0:41:29:37:aa:88:64:2d:d3:5a:6d:d1:6b:fe:c5:
43:03:27:76:53:d7:26:31:97:4d:c9:e1:54:44:3c:bf:c6:48:
31:67:a3:a9:d5:25:c4:e2:9e:db:d9:8e:fd:8c:f7:86:09:b4:
13:b8:1b:63:68:04:3a:03:ff:4d:09:15:07:7d:97:34:6d:21:
cb:ed:4e:8f:6e:c0:74:b2:01:02:26:7d:09:55:12:8f:36:f9:
77:d2:f7:42:7c:57:12:1f:ec:f3:98:4c:cf:97:a4:81:dd:bf:
68:23:18:a0:1f:40:68:b4:ed:2d:b5:e5:57:62:1f:9e:f7:d7:
4b:79:8b:74:27:02:94:31:32:6f:c3:dc:df:33:87:b8:4b:61:
fd:98:43:0b:c8:f1:90:3e:2c:53:7d:19:2c:19:d4:cb:75:24:
d7:c6:54:d1:42:e5:de:2b:c5:72:60:35:de:5f:ff:56:19:05:
37:09:8e:76:3b:19:2d:40:b0:d1:6d:9f:44:35:72:12:b1:16:
19:e6:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:38:54 2025 by rpki-client