Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/NWoXdf60qAqmSr6FbuL52Si_7kM.roa
File: NWoXdf60qAqmSr6FbuL52Si_7kM.roa (raw, json)
Hash identifier: t2UKYAGI3HyRjneErifjXt9lNGLGftAOePJsseePFFE=
Subject key identifier: 35:6A:17:75:FE:B4:A8:0A:A6:4A:BE:85:6E:E2:F9:D9:28:BF:EE:43
Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial: 0194274888E26615A27347EA209F9CA78A74
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/NWoXdf60qAqmSr6FbuL52Si_7kM.roa
Signing time: Thu 02 Jan 2025 13:50:52 +0000
ROA not before: Thu 02 Jan 2025 13:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6206
IP address blocks: 185.165.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:88:e2:66:15:a2:73:47:ea:20:9f:9c:a7:8a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Validity
Not Before: Jan 2 13:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=356a1775feb4a80aa64abe856ee2f9d928bfee43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:66:4d:7e:d5:9a:a1:be:a5:c4:b1:92:09:fb:
4d:19:c9:9c:a3:8b:48:be:62:86:73:23:e2:cc:c8:
19:e6:13:e1:2d:cb:6c:df:4d:6e:e1:d5:cc:e4:72:
b7:65:9e:a3:fd:b1:7b:97:08:e8:34:79:5c:0a:eb:
ba:73:5b:09:86:2d:fa:9d:20:56:74:7c:15:3c:b6:
27:56:37:6a:c8:29:f5:5c:b3:e2:29:c1:f3:aa:cc:
9b:70:f9:23:69:70:17:2a:26:f9:ce:93:3b:d7:5a:
84:1a:aa:9c:25:b8:c5:73:78:ca:53:47:51:ab:88:
88:21:d8:a6:a3:55:b1:11:4f:63:10:36:83:e2:96:
2d:b8:a8:80:57:b1:e7:88:c6:24:77:37:ad:19:c2:
b8:33:49:7b:23:8f:0e:89:78:9c:5b:5c:7e:46:f0:
1c:69:c4:52:20:6a:16:ab:d4:f0:6a:d6:3a:1a:b9:
18:fb:98:0d:32:16:dd:65:6f:55:94:2b:ab:4b:d3:
e5:4f:d5:30:a9:57:e6:5b:bd:bf:5c:71:5c:a0:b8:
4d:93:84:25:87:b2:1d:60:6c:8c:b4:bb:13:96:5b:
9e:c5:56:f6:c4:48:f7:47:45:00:8f:b5:73:cb:ab:
6b:02:60:16:67:fd:bb:91:96:f9:40:a2:a6:09:93:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6A:17:75:FE:B4:A8:0A:A6:4A:BE:85:6E:E2:F9:D9:28:BF:EE:43
X509v3 Authority Key Identifier:
keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/NWoXdf60qAqmSr6FbuL52Si_7kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.237.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a9:ab:fa:17:b3:26:95:db:fc:09:d1:11:37:47:79:43:b9:
2c:07:9c:98:73:0d:a8:c0:9f:e3:c7:03:1d:8f:7d:2d:3c:ce:
be:b9:71:6a:1b:fd:67:ba:d0:9d:35:b8:70:0c:c2:64:80:3e:
56:2c:30:bb:4d:17:6d:90:05:e9:9c:9f:ca:86:65:b0:a5:87:
88:67:43:fd:49:91:d3:b4:af:89:62:52:db:c2:dc:67:8a:f8:
fc:7f:f2:d1:8f:d6:bd:47:d2:de:6b:6a:c2:31:41:5b:ba:1f:
0a:d5:a1:c0:eb:72:c4:3c:56:15:0f:4d:03:dd:59:4b:64:0e:
9b:41:69:d0:f3:ce:0c:e7:dc:4a:47:db:3f:30:2d:74:6b:f8:
5d:80:bd:65:8a:4c:d1:23:ad:66:08:35:65:0e:7a:f7:77:d8:
16:9b:ec:d7:e2:63:9c:cb:ea:ca:cd:e0:3d:fb:9d:11:a1:b0:
5b:d6:37:b2:3e:3d:71:19:41:0f:af:c0:61:59:79:1c:fd:98:
e1:1e:48:03:51:a3:7a:ff:34:15:68:17:94:0d:e1:14:06:b2:
41:e7:a2:bb:7c:b9:b1:ef:ad:9b:15:4e:56:50:46:44:9a:b4:
1d:80:2c:34:a8:95:45:45:98:51:76:7d:a3:39:2d:59:c3:f9:
0a:d0:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:54 2025 by rpki-client