Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/nwZgM_Ay4hGVCK8xO5R7ECgK-0U.roa
File: nwZgM_Ay4hGVCK8xO5R7ECgK-0U.roa (raw, json)
Hash identifier: rTPb6EaajBefS9ANbv9OkQ86xxvuxMBQqzoL+4/KqBY=
Subject key identifier: 9F:06:60:33:F0:32:E2:11:95:08:AF:31:3B:94:7B:10:28:0A:FB:45
Certificate issuer: /CN=eb317e1be7bb6f82cb9c34a096dc088f5f8f92ca
Certificate serial: 018239AF903AA5E0B4106C4A452445E06BAA
Authority key identifier: EB:31:7E:1B:E7:BB:6F:82:CB:9C:34:A0:96:DC:08:8F:5F:8F:92:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zF-G-e7b4LLnDSgltwIj1-Pkso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/nwZgM_Ay4hGVCK8xO5R7ECgK-0U.roa
Signing time: Tue 26 Jul 2022 08:46:23 +0000
ROA not before: Tue 26 Jul 2022 08:46:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206961
IP address blocks: 185.165.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:39:af:90:3a:a5:e0:b4:10:6c:4a:45:24:45:e0:6b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb317e1be7bb6f82cb9c34a096dc088f5f8f92ca
Validity
Not Before: Jul 26 08:46:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f066033f032e2119508af313b947b10280afb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ad:a6:ae:a2:d7:04:f9:18:89:a7:4a:42:b0:
3b:24:75:c3:72:0b:02:99:be:27:eb:6c:54:c9:cd:
bd:20:6f:b1:c4:6a:f3:85:36:c2:64:9d:cf:57:6f:
54:5a:fb:18:b3:96:9c:4e:63:fa:ca:c5:8f:f4:13:
75:a2:43:82:2f:a3:e4:ec:b1:6c:01:f0:f1:da:d0:
d6:b4:fd:65:74:cd:26:95:be:30:ee:c5:21:16:55:
39:8e:e6:2f:e3:2d:f8:e9:db:fd:ad:76:65:ba:19:
4c:e5:82:3a:a2:63:cf:68:33:fe:db:c9:33:b3:89:
52:4e:0f:91:28:2f:7b:d4:25:46:e6:06:2e:3d:55:
3d:c5:8a:5d:04:58:58:78:00:86:c4:06:ea:5a:37:
e6:bd:7f:82:61:83:81:c3:97:4c:f7:01:bb:d1:ff:
c7:ad:25:96:e6:6d:b6:df:af:49:83:b3:7a:fd:d1:
66:72:ba:cd:9f:c4:4b:70:07:28:bf:5c:34:4e:65:
37:a8:28:87:b4:6f:71:ca:e9:b0:ea:85:8e:ad:31:
3a:43:99:42:96:b7:35:b1:b2:25:88:ae:dc:50:15:
58:d9:b1:60:22:92:ae:a7:a3:c6:ae:69:19:2f:d8:
36:6a:f0:f4:50:c7:12:5e:7b:41:74:88:9c:22:73:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:06:60:33:F0:32:E2:11:95:08:AF:31:3B:94:7B:10:28:0A:FB:45
X509v3 Authority Key Identifier:
keyid:EB:31:7E:1B:E7:BB:6F:82:CB:9C:34:A0:96:DC:08:8F:5F:8F:92:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zF-G-e7b4LLnDSgltwIj1-Pkso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/nwZgM_Ay4hGVCK8xO5R7ECgK-0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4fab5-aa01-4a70-88d0-fbd9bf622f44/1/6zF-G-e7b4LLnDSgltwIj1-Pkso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.124.0/22
Signature Algorithm: sha256WithRSAEncryption
58:9e:44:c7:2d:27:e4:70:c5:93:79:08:24:c2:cd:a7:ce:0f:
8d:22:f8:16:5b:6b:aa:e1:25:08:a3:b0:68:b2:de:5c:81:d7:
f7:51:64:fc:47:61:3f:a4:8c:65:01:62:d5:16:42:ec:b6:7b:
93:0f:ae:6d:69:78:a8:ff:9e:5e:c2:80:14:b0:cd:64:11:1c:
6a:e5:00:85:88:60:fc:32:6c:a6:66:e1:72:2e:56:aa:fa:55:
0a:20:23:79:0f:fc:b4:1a:f5:88:86:14:3e:2a:d9:b1:97:7f:
17:3a:92:c5:8a:17:b6:a3:4b:46:bf:4b:02:f0:07:cd:f8:bd:
a6:45:06:4e:01:0d:9f:f3:60:73:6b:7f:1d:62:9a:df:f6:f6:
8b:87:b6:2b:06:2a:62:d0:64:05:1f:f7:e8:b6:9f:62:00:85:
34:60:cd:b6:54:99:a7:1d:b3:bd:6f:5e:a7:21:a7:f1:85:d1:
33:d8:f1:62:ef:e5:f5:28:5e:47:b1:52:c7:15:2d:0c:95:7d:
58:a8:90:3c:11:8a:1c:46:4e:a6:da:6c:35:00:85:6e:1f:3e:
4b:71:af:00:33:98:97:ca:48:c2:dc:53:d5:28:1d:bf:7e:b9:
ac:a0:8b:06:ba:11:a7:08:76:e9:fe:36:98:70:5d:02:06:b1:
f9:d5:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:21 2025 by rpki-client