Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/293987-2751-4baf-bc54-03834f364be0/1/IZjxoA2XFF7tqLqZezlkvU1cGnE.roa
File: IZjxoA2XFF7tqLqZezlkvU1cGnE.roa (raw, json)
Hash identifier: g7+oZ3CKjD1ftRWZIv5tN0w2tpo8TF05+XFyBp0l4Ck=
Subject key identifier: 21:98:F1:A0:0D:97:14:5E:ED:A8:BA:99:7B:39:64:BD:4D:5C:1A:71
Certificate issuer: /CN=9eed03b5634b0effb0b4cfd086fd4c2c1904dc32
Certificate serial: B3B673
Authority key identifier: 9E:ED:03:B5:63:4B:0E:FF:B0:B4:CF:D0:86:FD:4C:2C:19:04:DC:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nu0DtWNLDv-wtM_Qhv1MLBkE3DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/293987-2751-4baf-bc54-03834f364be0/1/IZjxoA2XFF7tqLqZezlkvU1cGnE.roa
Signing time: Sat 01 Jan 2022 02:52:44 +0000
ROA not before: Sat 01 Jan 2022 02:52:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34471
IP address blocks: 185.107.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11777651 (0xb3b673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eed03b5634b0effb0b4cfd086fd4c2c1904dc32
Validity
Not Before: Jan 1 02:52:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2198f1a00d97145eeda8ba997b3964bd4d5c1a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7a:50:98:f3:a0:6d:81:06:f9:b1:9a:b4:f3:
b9:b0:52:52:7d:ca:cc:e3:0a:58:c5:ae:f0:ad:74:
a0:d1:c3:2a:01:6f:21:84:2e:9d:28:4c:47:e7:98:
be:f8:ea:11:a9:1e:07:58:85:14:29:8d:8f:c3:4d:
84:68:b6:8c:ca:a6:e1:bf:68:04:ab:8a:f8:98:30:
59:c3:36:e7:37:91:5e:13:ba:53:9b:a3:ac:01:0e:
d9:9e:fd:ff:c3:4e:3e:9a:75:ff:37:68:b9:10:9d:
c7:85:6c:4b:53:af:c9:d9:41:6a:34:35:2d:43:fa:
50:e4:47:67:84:46:62:0f:ae:95:03:69:2a:d4:94:
86:56:e0:37:f9:bc:da:f7:ec:da:81:f2:1b:e3:24:
d5:e6:9b:6d:83:d4:64:00:ac:84:57:2b:42:ba:bc:
f6:aa:82:38:4a:04:51:6e:f7:0a:2c:fa:95:b9:45:
57:f5:c4:2b:aa:4b:76:c8:44:f0:d7:d3:06:ec:71:
4f:48:2d:02:31:c0:0e:7c:44:32:46:c3:d3:f6:06:
c6:90:cf:6d:64:ca:ab:f0:18:5f:b9:ce:45:7d:ff:
1d:a6:76:4f:b7:bc:5e:9b:63:53:73:c4:df:49:da:
da:cf:60:d8:a3:a7:42:ae:a9:a4:8e:22:dc:a3:87:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:98:F1:A0:0D:97:14:5E:ED:A8:BA:99:7B:39:64:BD:4D:5C:1A:71
X509v3 Authority Key Identifier:
keyid:9E:ED:03:B5:63:4B:0E:FF:B0:B4:CF:D0:86:FD:4C:2C:19:04:DC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nu0DtWNLDv-wtM_Qhv1MLBkE3DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/293987-2751-4baf-bc54-03834f364be0/1/IZjxoA2XFF7tqLqZezlkvU1cGnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/293987-2751-4baf-bc54-03834f364be0/1/nu0DtWNLDv-wtM_Qhv1MLBkE3DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.160.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:fb:20:f7:d5:e6:89:99:d6:af:09:3f:d0:23:99:91:9e:3c:
b7:dc:83:34:c6:23:50:36:52:8b:a7:12:84:de:e4:50:e5:e5:
69:37:65:bf:2f:0b:1d:69:d1:a0:f6:2e:54:63:d4:e3:47:06:
c8:1f:a1:42:38:43:51:4a:20:0a:ef:b8:f2:be:12:e7:00:24:
9a:9c:72:da:b6:26:92:21:20:81:8b:e4:bc:fc:2e:75:d4:17:
2e:7a:bd:24:30:52:13:dd:bd:51:05:08:d0:bc:20:32:3d:78:
6e:d0:d6:3c:c2:52:8b:6c:c1:86:32:de:9b:82:6a:1e:61:03:
ad:f9:c5:b9:89:40:ab:10:f8:97:68:5a:77:bb:a4:58:45:4b:
dc:fc:95:5a:37:6a:6b:70:01:2d:d4:01:3e:1c:a9:45:6d:76:
3f:96:a0:fb:4a:57:84:0c:9d:a4:09:15:6f:7e:18:63:7b:39:
5b:a8:aa:72:9e:20:0c:33:a4:9c:50:30:82:c9:59:d0:51:43:
ed:ff:cd:af:dc:9d:62:a8:c9:28:5f:a5:8b:93:78:20:f7:f1:
26:b6:ee:7f:07:b2:9f:29:69:b4:e8:a5:af:c1:f7:ca:2a:f2:
6a:a7:3c:0a:29:a0:5d:1d:69:3f:d0:ad:3b:26:08:2a:80:66:
67:69:54:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:28:44 2025 by rpki-client