Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/NZ1uPy7RCFNCH5vVD5yjogAW4mI.roa
File: NZ1uPy7RCFNCH5vVD5yjogAW4mI.roa (raw, json)
Hash identifier: iMhNz5cQOaEd+iuzpkosoGz65jsv4sLk40qC6AYAuuY=
Subject key identifier: 35:9D:6E:3F:2E:D1:08:53:42:1F:9B:D5:0F:9C:A3:A2:00:16:E2:62
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 018689BAA785C0F21BD3712F215F66BD3DC5
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/NZ1uPy7RCFNCH5vVD5yjogAW4mI.roa
Signing time: Sat 25 Feb 2023 17:59:16 +0000
ROA not before: Sat 25 Feb 2023 17:59:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61997
IP address blocks: 185.126.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:89:ba:a7:85:c0:f2:1b:d3:71:2f:21:5f:66:bd:3d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Feb 25 17:59:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=359d6e3f2ed10853421f9bd50f9ca3a20016e262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7c:98:1c:f3:66:a1:ae:8f:30:35:9e:e9:e7:
dd:91:37:cd:80:4b:1b:48:51:3b:ee:5d:9f:c4:48:
87:4f:d1:d9:90:08:9a:8e:3f:2a:2a:1e:ff:db:95:
39:76:cc:b4:2a:09:74:7a:d3:2c:86:ac:c6:70:3a:
83:61:24:85:8f:75:3e:7d:1d:f0:f5:f7:ab:24:22:
71:34:31:d2:73:7b:0f:67:4b:65:de:c0:3e:ce:37:
60:79:9b:97:47:d6:78:28:c5:1f:a6:b8:9c:16:12:
3d:39:b1:67:e0:a9:f8:78:fa:ff:97:43:52:72:ef:
8c:49:7a:4e:c2:3a:11:f3:51:63:ba:8f:e1:7e:9c:
65:d4:20:7a:42:ba:e4:10:69:29:bb:99:0b:6a:11:
86:50:f0:dd:ea:a3:7f:a6:4c:5f:d3:a1:6a:f8:86:
27:16:ac:76:52:af:0a:f1:68:4a:cf:a2:aa:e8:25:
b1:ca:24:52:39:59:15:9b:ae:ef:25:22:82:ca:ce:
bd:41:53:bf:73:c7:d7:52:0b:67:50:a5:31:4f:e5:
5a:69:c2:00:1e:a0:49:ea:73:b8:c7:85:1f:d4:6d:
fd:58:2f:65:79:ba:16:ac:69:34:db:78:55:84:6f:
d0:49:91:38:26:90:03:f9:b8:c1:d0:f0:e2:b5:c7:
d3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9D:6E:3F:2E:D1:08:53:42:1F:9B:D5:0F:9C:A3:A2:00:16:E2:62
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/NZ1uPy7RCFNCH5vVD5yjogAW4mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.254.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2f:f8:3d:4c:3d:cb:7d:c0:3d:42:36:07:08:94:c8:fd:f1:
a5:71:0c:66:d7:03:76:51:6c:4d:03:12:14:fa:6e:71:5e:5d:
7b:2d:15:8d:01:5e:44:be:30:5e:d2:49:9f:77:02:6c:5f:19:
4a:72:da:ff:bc:6b:d9:00:e2:81:fa:98:a2:38:35:05:db:6f:
61:96:70:11:b8:60:c5:da:a7:de:3e:af:94:41:08:7a:55:07:
2e:ff:d5:18:85:9e:32:c1:a8:da:23:a7:a6:5b:54:df:64:cf:
6f:ea:d2:94:ae:26:d8:96:12:f9:b8:be:3d:5a:8c:a2:47:8c:
ba:be:be:90:2c:ca:4d:7c:b9:22:bd:2c:55:f4:43:ba:87:76:
32:d1:44:20:a0:9d:e5:ce:7e:79:81:33:c1:7e:f4:e2:1d:38:
b3:24:93:b4:9d:62:ea:48:38:81:4e:7a:16:10:68:c9:fa:50:
b3:60:b3:d7:d4:e2:a0:eb:77:7b:92:41:91:67:c9:43:31:78:
4c:d3:08:a2:26:d4:4d:0d:ed:84:9d:02:fc:bd:d5:da:31:da:
51:3a:03:ed:68:ce:9d:66:7b:01:92:0e:a0:c6:c7:c8:d1:75:
04:48:23:bc:1b:43:8d:6e:45:a1:6d:82:ab:ec:41:b3:f8:8c:
44:29:7e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:49 2025 by rpki-client