Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gzbv9wegiT0AoHw2nBCe19TYaww.roa
File: gzbv9wegiT0AoHw2nBCe19TYaww.roa (raw, json)
Hash identifier: BkBfOKlgQWXDvXpOauysMqOE9SR3MnO4Gnb71Rwm4XQ=
Subject key identifier: 83:36:EF:F7:07:A0:89:3D:00:A0:7C:36:9C:10:9E:D7:D4:D8:6B:0C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570955A2D137CD7AA04FAB0BB8B913E39
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gzbv9wegiT0AoHw2nBCe19TYaww.roa
Signing time: Mon 02 Jan 2023 03:45:14 +0000
ROA not before: Mon 02 Jan 2023 03:45:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56673
IP address blocks: 146.120.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:5a:2d:13:7c:d7:aa:04:fa:b0:bb:8b:91:3e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8336eff707a0893d00a07c369c109ed7d4d86b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2e:32:90:eb:d3:7b:5a:08:cd:52:1f:bb:9a:
e3:4c:ef:25:e5:61:74:7b:3c:26:2c:f8:03:a3:48:
31:b9:45:70:c0:19:94:ad:31:9f:1c:08:28:08:73:
be:26:ae:46:3f:ac:34:21:c5:8b:de:d3:5e:9a:cb:
d5:11:fd:32:d3:fa:ec:80:46:cf:7e:2e:85:2b:72:
5e:a8:1e:ec:3b:85:35:19:96:06:e7:7b:c4:2b:b1:
40:06:d5:11:0a:54:9e:54:1a:82:9d:d1:99:72:ea:
16:e1:b7:9e:3e:ab:e8:09:6d:a8:68:44:f8:c1:22:
4f:89:a2:e5:6a:f3:04:2a:51:0f:f3:55:f4:fd:10:
58:e1:d8:a9:87:d8:cb:f3:12:50:b8:7a:e3:46:2a:
90:24:52:bb:8e:8f:2a:31:f0:b4:1a:f9:4a:f5:83:
e4:37:a6:08:e1:a1:5e:87:10:fd:68:ee:34:b2:5e:
2d:f5:13:1c:db:a5:3f:b2:e4:7f:d0:5b:0e:ef:3e:
83:40:60:7f:80:d9:41:ea:99:52:c6:75:1d:3a:eb:
5e:d8:8d:46:16:2f:af:47:45:56:8a:93:d7:3f:78:
e9:e5:76:f7:58:21:42:80:86:6c:ef:de:3d:12:f0:
b9:47:c3:c7:85:62:18:af:1e:cc:8e:9d:ee:d7:58:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:36:EF:F7:07:A0:89:3D:00:A0:7C:36:9C:10:9E:D7:D4:D8:6B:0C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gzbv9wegiT0AoHw2nBCe19TYaww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.199.0/24
Signature Algorithm: sha256WithRSAEncryption
00:51:7a:fa:7e:04:ec:85:69:b8:89:bf:4c:52:64:de:03:ad:
b7:c7:45:b6:d3:df:3c:fa:ab:16:95:f3:ea:69:8e:65:41:da:
a3:58:59:07:ed:a0:ad:0c:a7:de:f7:dd:5a:5f:bf:91:9a:3f:
df:0d:7b:16:a8:b4:84:15:9f:d1:99:9c:67:1b:fb:81:1b:f3:
ba:df:e1:23:e2:47:98:5c:0c:19:0b:95:c7:a5:5b:da:c5:40:
06:16:64:72:36:6a:66:c3:21:be:fb:73:d4:41:e2:48:1d:6c:
d9:90:f3:79:2b:da:ab:69:7d:81:8a:20:df:2f:22:2b:7c:cb:
b7:c8:77:cd:21:db:df:6c:8e:f8:15:f7:df:3b:4b:8d:50:8a:
d2:d4:a7:ed:c5:6f:4b:0e:ba:30:f9:98:29:b3:0e:90:fb:12:
8e:fa:4d:7b:25:da:a2:d9:cf:07:0c:9e:3b:fc:d9:a5:db:81:
d9:c1:89:2b:f0:16:f6:83:9d:55:87:4e:23:50:6e:46:7e:51:
97:6a:f1:3f:ee:d7:d4:2d:f7:9b:5b:b6:54:44:82:f6:a6:6d:
af:86:49:c8:4d:bf:22:8a:85:2e:2a:6e:01:ec:4f:b9:95:4e:
83:7e:26:c1:ab:06:2e:63:dc:8d:1c:bf:fa:90:23:eb:a0:78:
61:f6:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:48 2025 by rpki-client