Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qQcCpfQuAtox6wNSASAj4K0sAtU.roa
File: qQcCpfQuAtox6wNSASAj4K0sAtU.roa (raw, json)
Hash identifier: TzaIVPoIjyHjv6SRsJDixKcxkZubn7TDs2adyNNZAtQ=
Subject key identifier: A9:07:02:A5:F4:2E:02:DA:31:EB:03:52:01:20:23:E0:AD:2C:02:D5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FBCC5DE19763DE91A236F7C357552
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qQcCpfQuAtox6wNSASAj4K0sAtU.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51503
IP address blocks: 146.120.232.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bc:c5:de:19:76:3d:e9:1a:23:6f:7c:35:75:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a90702a5f42e02da31eb0352012023e0ad2c02d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1f:90:65:63:90:e4:e4:24:c0:8b:95:e5:a7:
f5:cc:6d:62:c3:6b:52:e7:ca:67:80:c8:60:b0:7f:
04:cc:ae:c0:fd:41:42:fb:b4:61:2d:70:1c:36:ae:
20:19:07:cb:14:40:c5:c2:f8:07:1a:5c:b3:7a:07:
d2:af:9d:85:d8:03:ed:81:ab:fc:d6:65:99:80:16:
f9:c9:a9:28:5a:fb:ab:3b:bc:93:fc:5e:5c:3e:c5:
3f:fd:51:4a:db:46:15:3d:9a:d5:e1:dc:1d:dc:aa:
4b:d1:59:36:85:4c:0a:af:fb:b8:d3:33:30:e8:8a:
6d:e9:5f:25:69:14:5b:a4:55:d0:bc:3d:83:1d:27:
d4:8a:7e:16:b7:29:91:62:8c:21:be:55:17:a1:95:
5d:73:b2:65:7f:a0:40:c4:05:70:bc:eb:81:b2:01:
56:ca:05:e4:b6:22:3c:1f:e9:93:cb:8f:82:98:75:
94:84:91:a4:0f:07:62:6d:cc:33:a9:80:93:e9:4e:
4f:95:c7:d7:3e:69:3d:7e:ff:3e:9e:08:61:5f:d7:
7e:7c:62:ad:6a:8b:e5:dd:99:23:c1:85:e0:b6:b8:
4d:b1:e9:49:e7:27:97:a1:b4:fa:86:3e:4e:78:a9:
2c:46:ff:d0:7d:e9:40:48:a8:e8:0a:a1:e5:41:28:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:07:02:A5:F4:2E:02:DA:31:EB:03:52:01:20:23:E0:AD:2C:02:D5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qQcCpfQuAtox6wNSASAj4K0sAtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.232.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:c0:89:b6:f7:d6:e1:fc:33:15:72:ee:ab:69:d0:d2:ed:ae:
74:03:fe:d8:1b:94:f3:1e:13:f3:fa:79:1b:0c:d2:ef:3f:a8:
56:23:5d:ef:d8:21:e9:d4:ce:08:ff:a3:24:80:89:ed:3d:60:
1b:02:7b:39:8c:b5:03:2a:2d:14:fc:72:00:24:ca:9b:7c:b4:
66:d1:2c:6f:97:38:6b:b4:29:18:50:8d:87:9a:50:c4:f3:17:
af:b7:05:9e:b9:94:ce:b4:f2:4c:4e:32:8d:c6:ce:28:5b:1a:
38:b4:3b:93:ba:e7:7f:1b:f2:bb:c5:8e:e6:fc:71:d3:ee:34:
1b:f6:d3:09:c3:69:93:e1:09:c9:14:69:36:2e:d8:f1:32:f8:
da:78:1a:b9:b6:c2:4b:af:d7:48:6b:85:5f:5b:d1:b3:1c:78:
b2:6e:10:df:67:49:55:e3:44:23:44:96:b8:49:23:d9:a4:74:
7c:65:45:52:62:4a:01:e8:65:8f:11:97:ee:a9:b4:e4:b9:6f:
20:6d:54:a6:cb:22:56:26:3c:62:49:0e:9d:95:d2:82:e1:43:
6a:85:f1:95:b4:04:65:53:1e:ed:9a:04:ed:6f:a9:27:45:1d:
7b:94:be:59:ad:10:d1:b2:55:6e:2c:f5:b3:9d:9b:27:ab:66:
b1:45:87:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:27 2025 by rpki-client on console.sobornost.net