Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lue8xh5I7mFU7mVSaI1aoAjNvxQ.roa
File: lue8xh5I7mFU7mVSaI1aoAjNvxQ.roa (raw, json)
Hash identifier: SHjU72o9S07GHLdnCk3AVCUo9cZPpXUjvIlnY26wSEk=
Subject key identifier: 96:E7:BC:C6:1E:48:EE:61:54:EE:65:52:68:8D:5A:A0:08:CD:BF:14
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570958DE5F496ECDE36092E9DE80B5BC5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lue8xh5I7mFU7mVSaI1aoAjNvxQ.roa
Signing time: Mon 02 Jan 2023 03:45:27 +0000
ROA not before: Mon 02 Jan 2023 03:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201012
IP address blocks: 146.158.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:8d:e5:f4:96:ec:de:36:09:2e:9d:e8:0b:5b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96e7bcc61e48ee6154ee6552688d5aa008cdbf14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:87:cb:b4:12:e8:59:c2:bb:75:ba:83:11:72:
6f:8f:8b:7d:46:42:65:1a:e3:63:fd:22:00:67:c6:
69:56:17:da:ae:a9:f2:e3:2b:87:d0:a6:fd:55:5b:
41:9e:bd:6b:e4:d5:63:d3:25:c2:eb:06:4e:2b:0b:
88:be:aa:a3:7c:80:93:cb:d3:5b:90:ba:73:d3:74:
56:83:93:9b:e3:f7:06:cf:9c:83:dc:1b:6a:df:94:
a4:7c:81:2e:5e:8e:17:be:53:df:6f:79:fe:24:3e:
d3:0b:27:69:f4:18:e9:1c:9d:da:f8:3e:5a:65:3e:
e4:1f:10:e9:12:b0:8f:5f:c5:69:68:cb:a1:9f:79:
e8:d6:85:3c:7b:66:9a:20:e8:85:de:c1:25:cd:59:
7e:f3:43:06:63:e8:7c:be:cc:60:76:19:ed:54:df:
a6:ba:e9:73:fa:17:ca:72:8b:ab:72:eb:02:5f:2e:
0b:97:fe:53:b6:54:ef:75:5d:75:63:f6:19:83:54:
87:88:b9:56:b4:8a:16:d9:f5:3a:54:56:f2:50:ff:
68:ac:29:3d:32:8d:d5:b8:2c:2a:41:95:9a:1c:74:
36:ef:f0:b4:37:14:35:c7:9e:6b:25:42:d4:98:af:
5b:c4:74:fb:06:20:56:3c:68:d2:32:62:55:8a:d8:
3b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E7:BC:C6:1E:48:EE:61:54:EE:65:52:68:8D:5A:A0:08:CD:BF:14
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lue8xh5I7mFU7mVSaI1aoAjNvxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.48.0/21
Signature Algorithm: sha256WithRSAEncryption
76:ad:05:70:10:4e:b2:ad:83:77:8e:61:f8:19:e3:b2:e4:c5:
a7:89:06:0a:91:c1:5a:95:32:64:d3:70:16:43:03:6e:37:b6:
5e:fb:f9:34:98:78:b5:04:4e:46:62:70:5b:df:24:9a:9a:15:
7f:1d:04:bb:33:54:e7:db:05:17:f4:c4:41:a9:a7:d7:4a:3c:
56:2b:d7:79:26:b5:06:84:82:0b:f7:44:64:66:51:65:84:7a:
4d:b5:dc:47:4c:3f:c1:e3:77:ac:fa:f5:5a:4b:69:38:ee:be:
6d:66:24:d9:42:cf:ce:65:b0:37:31:06:64:39:ff:98:f2:10:
e0:25:a0:1f:34:e3:30:20:19:66:3b:30:1a:f0:c6:83:c7:b7:
eb:f9:c4:35:50:1f:a0:17:50:f1:26:72:7f:6e:a8:89:62:99:
e2:64:d6:56:4b:2a:f5:63:99:5e:71:e6:4e:10:26:3a:08:66:
fa:6f:52:ec:b7:c4:8f:29:e7:6c:8b:b7:26:16:d3:39:6f:3e:
11:bd:b3:d6:80:ee:55:5a:66:dd:37:22:0a:ad:9b:3e:f0:45:
59:e9:16:cf:c3:81:f1:7d:e3:30:07:c4:17:41:8a:64:07:d3:
b6:39:9e:9a:84:37:23:29:76:60:5c:ee:22:f4:0a:e0:fc:01:
17:fd:6c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:29 2025 by rpki-client