Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hOGCEfzv2-KTyDgEcylw03g9FG4.roa
File: hOGCEfzv2-KTyDgEcylw03g9FG4.roa (raw, json)
Hash identifier: M8RCm4LstACmeLMVKOAcSW305kN0wJ/tRo/15bstw2g=
Subject key identifier: 84:E1:82:11:FC:EF:DB:E2:93:C8:38:04:73:29:70:D3:78:3D:14:6E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01942590188C67719581E26D70FCCD8611E8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hOGCEfzv2-KTyDgEcylw03g9FG4.roa
Signing time: Thu 02 Jan 2025 05:49:47 +0000
ROA not before: Thu 02 Jan 2025 05:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216261
IP address blocks: 146.158.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:18:8c:67:71:95:81:e2:6d:70:fc:cd:86:11:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84e18211fcefdbe293c83804732970d3783d146e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:20:a0:e5:c7:bd:e8:94:f3:aa:d2:3c:91:
e6:3d:d2:1e:cc:11:59:b5:2c:b1:7e:67:19:8a:57:
9f:3b:2b:b8:72:58:20:49:bc:e5:0e:4e:c9:ff:a8:
55:dc:97:6a:80:6d:1a:f0:48:6e:17:4a:0d:5d:7e:
5a:7e:e2:c3:cb:6d:3f:7b:89:be:26:10:11:4b:21:
d3:d3:7e:51:83:65:74:fb:19:42:7d:62:02:b7:ff:
91:8f:13:c6:a7:17:a1:1d:9f:3f:61:5a:3f:80:30:
a3:c8:08:b7:38:7e:12:4b:2a:a4:44:72:b3:e6:94:
4e:e7:51:eb:cf:80:68:c8:13:05:91:d4:df:b8:9b:
f2:dd:f3:bd:13:ba:06:bb:19:71:06:ab:9a:fa:9d:
47:21:ad:b6:70:2e:00:f6:a5:2b:db:e1:b9:0d:7d:
c1:2b:8a:39:ff:5e:f9:f5:d1:1c:a6:ea:db:f6:9f:
78:e5:7c:ad:80:97:09:b1:7b:d2:4a:59:ab:df:f6:
8b:06:96:83:db:55:b3:71:28:2e:9f:24:8d:c0:18:
e9:5d:65:35:65:a5:a9:77:fd:75:7c:f7:81:a9:d5:
45:a4:ac:06:45:4e:81:37:ca:1c:79:cf:89:3c:51:
56:0c:7e:f2:f6:a1:22:f2:67:7e:a0:f0:ce:d4:dd:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E1:82:11:FC:EF:DB:E2:93:C8:38:04:73:29:70:D3:78:3D:14:6E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hOGCEfzv2-KTyDgEcylw03g9FG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.94.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:25:2d:69:c2:e7:1b:3d:3e:e7:40:a5:68:8c:4e:61:da:6c:
ad:a7:28:fe:2a:9a:25:92:ec:1e:69:81:65:b9:05:0f:2d:b3:
c3:d8:9e:de:99:6a:ef:2c:e6:a1:01:a8:3b:04:04:af:21:27:
f8:84:d0:91:39:78:2e:27:b8:e0:3f:82:1d:75:ae:3e:88:98:
c7:44:71:d9:03:8c:c7:2c:2e:b7:a4:1d:32:34:22:4a:45:16:
5e:22:50:19:b8:48:b5:de:09:12:b5:06:39:67:2a:f9:64:56:
8a:c0:de:12:ed:a9:69:36:23:f8:1a:1f:46:98:3a:15:94:17:
4b:e7:2c:b0:31:5d:8e:d9:30:09:2d:49:bc:9e:90:d4:65:5d:
ad:06:c7:86:8d:b7:ad:45:63:7c:f1:90:79:a9:cc:f2:52:f1:
a1:bb:51:bb:db:36:52:7f:ad:76:f3:1a:a3:4a:2d:b2:8a:db:
02:2a:05:da:f5:f2:f7:cd:24:fd:b6:75:1c:f3:25:69:db:9c:
2b:66:9e:d6:b9:15:10:94:0c:ca:fd:1f:d7:bb:a0:d5:67:7e:
c1:05:3c:5c:9b:1b:a2:fb:e9:85:36:b0:f1:95:d3:e0:5b:82:
0c:8c:b9:99:4a:c1:f5:cc:72:71:bf:4b:93:db:d9:ec:ad:45:
63:1f:c6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:05 2025 by rpki-client