Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mNmD9NO88QX-Gp05JVabUK6hm-4.roa
File: mNmD9NO88QX-Gp05JVabUK6hm-4.roa (raw, json)
Hash identifier: 4zZqkOF0Ph1KtgYuzaO6p8m6au53ASWGX3hMAVY0SeE=
Subject key identifier: 98:D9:83:F4:D3:BC:F1:05:FE:1A:9D:39:25:56:9B:50:AE:A1:9B:EE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095641931B5EDF38A36137A50F18A24
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mNmD9NO88QX-Gp05JVabUK6hm-4.roa
Signing time: Mon 02 Jan 2023 03:45:16 +0000
ROA not before: Mon 02 Jan 2023 03:45:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59577
IP address blocks: 146.120.188.0/22 maxlen: 24
92.253.212.0/22 maxlen: 24
92.253.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:64:19:31:b5:ed:f3:8a:36:13:7a:50:f1:8a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98d983f4d3bcf105fe1a9d3925569b50aea19bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:1a:46:a2:d2:7e:79:d2:77:17:f4:79:41:
8a:d2:7e:1a:02:63:e3:f1:db:95:8d:da:9b:c8:dd:
58:35:95:b6:48:2b:42:bd:97:86:04:ef:12:88:73:
cb:5e:49:ab:3d:97:73:69:3e:dd:f8:98:64:1a:70:
c8:bd:40:00:41:ed:9f:a7:de:06:85:05:43:ac:46:
9e:a5:49:02:3d:c5:33:64:31:c4:cc:8f:ee:56:bf:
0b:46:c9:47:59:23:52:2b:93:c0:df:08:1a:6c:45:
3b:33:11:f3:60:21:62:da:d7:d0:23:20:71:82:5a:
85:0e:7d:0c:41:a5:64:fa:e0:64:a6:10:d9:76:9f:
81:a2:0a:8d:7b:c4:0e:7b:08:87:0e:fc:4c:0d:0d:
e7:2f:66:a8:bf:30:fb:df:ea:42:3f:a9:0f:44:45:
f5:16:f1:a2:ae:74:9c:3c:24:9b:a9:32:47:ee:5a:
6a:3e:21:c4:0a:83:60:f1:82:e7:73:a7:e7:10:71:
f5:55:30:20:ec:36:57:39:43:b2:58:e0:ee:1a:15:
a5:78:a1:8f:e0:a7:51:c3:aa:40:52:9c:2c:0e:54:
06:e5:1d:6f:b1:c9:6e:65:69:5c:d1:ec:5d:d0:04:
37:2e:2e:23:1d:e9:d3:02:0f:8f:4c:93:38:d3:87:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D9:83:F4:D3:BC:F1:05:FE:1A:9D:39:25:56:9B:50:AE:A1:9B:EE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mNmD9NO88QX-Gp05JVabUK6hm-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.212.0/22
92.253.236.0/22
146.120.188.0/22
Signature Algorithm: sha256WithRSAEncryption
97:a6:d2:14:df:f9:02:1f:f0:12:15:a4:0f:71:c4:b1:59:b4:
77:60:bb:41:ff:47:5f:c9:2e:a2:e2:c9:4f:83:91:b1:2c:b7:
b2:84:9a:68:e4:ef:21:e8:2d:b8:13:23:45:8c:d0:56:f2:74:
3e:34:9a:67:89:ea:a9:01:23:1c:6a:05:0c:9e:ad:7f:53:f2:
83:23:b2:2a:cb:9e:44:d7:2c:3f:85:6a:65:00:04:81:3b:d2:
ba:95:27:6a:1a:07:3e:aa:80:63:35:2b:30:9b:ba:0b:10:20:
76:60:07:0a:c3:99:8d:c0:e6:3b:92:01:46:47:62:a1:84:8e:
15:b1:e0:38:dd:46:47:7c:75:03:ba:aa:91:97:0a:79:29:c9:
21:22:1f:74:78:13:38:f2:34:92:70:e4:35:dd:00:a2:f9:6b:
e6:dd:92:75:8f:aa:01:ea:78:e9:56:e8:b6:9f:e4:a9:f5:19:
2b:76:19:3b:a4:74:57:ff:b5:f1:d6:22:07:fd:74:17:e1:2b:
8e:04:91:02:91:bb:e1:9f:f5:f5:66:b6:b4:9c:86:e4:98:83:
c3:0d:08:e5:97:c0:2c:ee:16:44:c5:bd:0f:3e:93:8d:51:bc:
b1:8a:80:18:49:c7:7a:46:0e:78:c5:04:71:1d:2d:51:5c:32:
70:75:96:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:28 2025 by rpki-client