Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ghSGie5jgR7fURpjFl4YGw1SHZs.roa
File: ghSGie5jgR7fURpjFl4YGw1SHZs.roa (raw, json)
Hash identifier: SdST+jxH8HWpf6sOYnEaSfYuPnUBUpUrUJaLGCu7uwc=
Subject key identifier: 82:14:86:89:EE:63:81:1E:DF:51:1A:63:16:5E:18:1B:0D:52:1D:9B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28375A9B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ghSGie5jgR7fURpjFl4YGw1SHZs.roa
Signing time: Sat 01 Jan 2022 16:09:52 +0000
ROA not before: Sat 01 Jan 2022 16:09:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204875
IP address blocks: 146.120.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674716315 (0x28375a9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82148689ee63811edf511a63165e181b0d521d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:98:23:29:86:8e:30:eb:eb:a0:10:22:1a:
d8:4c:86:bd:6f:4b:7b:7c:13:ba:cf:e8:d8:51:1b:
2d:d9:a8:9e:42:12:e2:65:e4:c4:d6:84:41:d8:a9:
69:48:11:0f:57:a4:6a:45:50:42:6b:48:74:e5:7b:
b1:82:dc:25:24:9c:e3:0a:a7:19:fb:da:63:35:ed:
fe:2b:b3:80:1f:ec:79:5c:8d:0a:8d:58:23:cd:22:
cc:8d:1d:e1:20:c0:a7:3a:53:2d:09:25:c9:71:3e:
32:f3:7b:c4:17:f6:3e:61:a4:d4:30:37:c7:4b:f0:
f0:8d:fc:ca:04:a3:1f:82:6c:06:60:bd:1c:3b:fe:
8f:e3:7d:6d:c7:18:bc:af:25:b2:33:c8:61:46:56:
a7:26:35:4d:8e:8a:85:3f:12:c9:93:b6:45:c8:b1:
36:9c:72:0b:f3:fd:ee:10:f2:cb:b8:97:6b:48:7c:
79:0a:78:fb:ce:9a:1f:a3:49:35:b1:e0:86:50:a4:
99:c1:b6:f8:32:de:6f:fc:bf:be:2d:5c:61:a8:89:
e1:21:2d:65:ec:5d:bf:13:10:fa:ad:38:07:d9:0d:
36:95:55:1e:df:cf:d5:ba:2a:49:21:66:45:98:af:
6b:40:3b:6f:25:fc:2a:24:d3:9c:a3:85:3f:55:0c:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:14:86:89:EE:63:81:1E:DF:51:1A:63:16:5E:18:1B:0D:52:1D:9B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ghSGie5jgR7fURpjFl4YGw1SHZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.248.0/22
Signature Algorithm: sha256WithRSAEncryption
93:fc:d1:c7:13:93:91:8f:34:8a:be:f9:09:e6:7c:f0:53:dd:
71:69:10:fd:94:ba:4d:16:c5:45:88:82:93:eb:9c:7c:8a:66:
72:07:24:9d:07:61:ee:20:59:9f:0c:b1:3e:cd:49:bb:f8:4a:
74:3b:3a:46:21:3d:16:31:24:f3:56:f0:58:c7:38:88:1f:6e:
3e:7c:16:6a:68:64:bd:61:f9:52:0b:de:9e:f0:d0:51:09:f0:
e3:5e:0a:fb:13:ab:22:74:56:e6:eb:7a:c7:73:73:96:a5:a0:
1b:ad:f3:d6:1e:f8:e9:c0:d7:36:d6:53:f1:b5:0a:61:91:9c:
b5:62:9b:75:25:80:7c:d7:38:b9:2c:5d:29:4d:2b:ce:7f:b8:
6e:ce:6a:93:be:da:8b:a4:13:52:a6:f7:d2:d9:f8:1d:5f:e0:
28:fa:0e:5e:aa:04:93:dc:6a:07:6b:72:13:ee:7e:1e:13:d9:
bf:c2:89:1a:9c:25:ac:b0:6f:2d:fc:e8:18:a3:38:3c:bc:cd:
cb:be:18:1c:62:a9:54:40:fb:12:a4:ab:d1:23:6c:cb:31:0d:
fd:9e:bc:1d:f6:b4:19:bf:ae:e1:bf:fb:3e:ab:d5:92:c9:58:
93:d4:91:60:91:6b:37:08:87:80:b2:1a:48:df:02:ec:ca:ab:
df:fc:97:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:39 2025 by rpki-client