Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/odB_beZ2wycitz9vxntovK5yfH0.roa
File: odB_beZ2wycitz9vxntovK5yfH0.roa (raw, json)
Hash identifier: 3Xk3rBXLWSJFIn6uzQ2HLXsEXt0vnuU0vtYIl7s9d/A=
Subject key identifier: A1:D0:7F:6D:E6:76:C3:27:22:B7:3F:6F:C6:7B:68:BC:AE:72:7C:7D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 282CF5F8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/odB_beZ2wycitz9vxntovK5yfH0.roa
Signing time: Sat 01 Jan 2022 16:09:45 +0000
ROA not before: Sat 01 Jan 2022 16:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204323
IP address blocks: 146.158.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674035192 (0x282cf5f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1d07f6de676c32722b73f6fc67b68bcae727c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:db:f3:6e:1e:d8:7d:b0:96:9e:a4:2a:90:
d8:7a:7b:73:bf:3d:d4:4a:0c:44:c8:0b:ca:51:a0:
15:49:c1:8c:23:c3:a9:49:f4:f4:4c:54:0c:05:aa:
1d:8a:cb:01:8a:2f:90:e7:b5:9d:01:f9:bf:25:9e:
97:4c:05:93:53:4a:4e:fa:d5:e2:d9:6e:28:f0:79:
3f:df:83:69:55:59:91:02:32:f4:e1:90:43:1e:1b:
20:11:cd:41:3b:6b:f1:be:58:3a:79:89:ad:df:f5:
76:c6:7c:ed:9a:15:8a:32:f0:a6:c8:00:2d:3f:0b:
d9:f1:74:1e:05:31:29:1f:60:71:6a:ad:00:49:18:
ab:2e:26:26:25:28:38:29:0c:c1:58:5b:52:ba:4e:
b5:e4:21:80:e5:19:31:36:9c:55:6c:1b:88:03:bc:
0b:0d:f6:87:c1:da:46:56:f8:ac:58:d0:bb:b0:3b:
a5:08:ab:e8:ab:e8:c9:9f:98:fd:26:cc:30:65:9d:
f9:d0:04:60:9f:da:e1:c9:e4:bf:00:9f:74:d4:8e:
a1:54:0b:ac:94:6b:b8:44:dd:7d:10:96:fa:f7:8c:
eb:6d:ca:20:58:cf:37:2f:0f:f5:d7:f9:08:ba:73:
b3:0a:29:36:6c:f2:88:13:83:e2:68:78:72:9d:35:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D0:7F:6D:E6:76:C3:27:22:B7:3F:6F:C6:7B:68:BC:AE:72:7C:7D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/odB_beZ2wycitz9vxntovK5yfH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.158.14.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7c:c4:a1:b4:d6:b8:76:28:6f:db:fc:77:6a:69:da:6d:3c:
27:f1:51:47:16:9b:2e:69:22:55:ab:9f:7d:d7:0c:e2:52:fb:
75:76:5c:06:57:fc:d5:3e:f2:ff:67:3d:b3:25:61:9d:e0:5d:
61:f2:af:b1:42:c1:17:63:93:68:e4:07:e7:e1:19:97:17:f4:
e5:9d:0c:83:50:9f:60:7e:31:94:e2:7b:a8:d8:52:8f:f1:45:
1f:b5:32:b6:b5:8d:03:ac:a2:81:b5:a6:9d:4e:03:c7:bc:ab:
f4:85:77:96:9a:d1:b5:b3:3c:7e:c4:45:76:c3:48:68:f2:2a:
b9:a0:fe:f1:3f:fd:4a:65:1e:4c:ac:89:72:3e:02:d6:73:cf:
eb:f6:b3:e9:62:ba:81:aa:3f:47:f4:55:49:04:ee:8d:83:fb:
49:f2:74:81:5a:a5:bd:74:41:f8:9f:2c:b3:6d:da:6a:aa:98:
0d:b5:0b:b4:75:bc:a3:28:4c:b1:cf:3b:38:6d:94:75:fa:d4:
15:8b:49:8e:7d:c3:d7:a4:db:b7:15:6e:08:d8:99:fb:64:32:
59:29:51:7c:cd:c4:be:eb:63:3b:9a:63:6e:87:56:b4:0f:ea:
37:32:77:fe:d4:ee:5b:48:d5:18:18:43:3f:f5:47:16:3e:cd:
5d:59:a1:6d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEKCz1+DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDk0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTFkMDdmNmRlNjc2
YzMyNzIyYjczZjZmYzY3YjY4YmNhZTcyN2M3ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANSM2/NuHth9sJaepCqQ2Hp7c7891EoMRMgLylGgFUnBjCPD
qUn09ExUDAWqHYrLAYovkOe1nQH5vyWel0wFk1NKTvrV4tluKPB5P9+DaVVZkQIy
9OGQQx4bIBHNQTtr8b5YOnmJrd/1dsZ87ZoVijLwpsgALT8L2fF0HgUxKR9gcWqt
AEkYqy4mJiUoOCkMwVhbUrpOteQhgOUZMTacVWwbiAO8Cw32h8HaRlb4rFjQu7A7
pQir6KvoyZ+Y/SbMMGWd+dAEYJ/a4cnkvwCfdNSOoVQLrJRruETdfRCW+veM623K
IFjPNy8P9df5CLpzswopNmzyiBOD4mh4cp01h9MCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSh0H9t5nbDJyK3P2/Ge2i8rnJ8fTAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L29kQl9iZVoyd3ljaXR6OXZ4bnRvdks1eWZIMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJKeDjANBgkqhkiG9w0BAQsFAAOC
AQEAiHzEobTWuHYob9v8d2pp2m08J/FRRxabLmkiVauffdcM4lL7dXZcBlf81T7y
/2c9syVhneBdYfKvsULBF2OTaOQH5+EZlxf05Z0Mg1CfYH4xlOJ7qNhSj/FFH7Uy
trWNA6yigbWmnU4Dx7yr9IV3lprRtbM8fsRFdsNIaPIquaD+8T/9SmUeTKyJcj4C
1nPP6/az6WK6gao/R/RVSQTujYP7SfJ0gVqlvXRB+J8ss23aaqqYDbULtHW8oyhM
sc87OG2UdfrUFYtJjn3D16TbtxVuCNiZ+2QyWSlRfM3EvutjO5pjbodWtA/qNzJ3
/tTuW0jVGBhDP/VHFj7NXVmhbQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:43 2025 by rpki-client