Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/53fftKdkAirWEw1L80hEGaXXyHU.roa
File: 53fftKdkAirWEw1L80hEGaXXyHU.roa (raw, json)
Hash identifier: VhyD2pniHsOxBYcSHox2thAG0w2lTo0LsIOcisj9AN0=
Subject key identifier: E7:77:DF:B4:A7:64:02:2A:D6:13:0D:4B:F3:48:44:19:A5:D7:C8:75
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194221FFAD8B624CD010F0A988A09744225
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/53fftKdkAirWEw1L80hEGaXXyHU.roa
Signing time: Wed 01 Jan 2025 13:48:28 +0000
ROA not before: Wed 01 Jan 2025 13:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20764
IP address blocks: 185.121.71.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fa:d8:b6:24:cd:01:0f:0a:98:8a:09:74:42:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e777dfb4a764022ad6130d4bf3484419a5d7c875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:8b:fc:e8:bc:b8:cb:93:35:58:7d:a6:95:
e8:d4:17:b5:e3:8b:85:75:09:5a:56:d9:45:ee:30:
78:4d:d7:8a:98:b8:0d:67:ed:82:4c:54:73:ca:c6:
d9:cf:dd:34:9d:dd:37:8b:86:16:73:dd:dd:3d:44:
84:46:8b:dd:7a:13:4c:63:3c:ab:ef:c9:40:89:e8:
b0:49:87:64:c9:6b:b5:98:7a:46:67:f2:a1:8d:9d:
81:84:9e:64:d9:36:aa:a6:16:df:09:5d:0d:79:1b:
e8:c6:e8:22:4b:0f:b2:3e:e8:67:c2:e0:73:d1:2b:
1f:8f:da:92:f8:4f:36:6c:88:26:90:30:9f:b9:8e:
8f:63:be:bc:98:3d:c3:be:e3:92:7a:7f:04:f0:c7:
11:1a:4d:94:f3:5a:72:8f:2f:1d:81:f9:ca:30:d3:
d6:cd:32:c4:93:3a:52:bb:19:3a:6b:2c:cf:0f:34:
22:d0:d1:dd:ff:95:b7:18:d3:87:10:a8:8c:98:fb:
be:a9:4f:d7:7d:66:36:c9:d0:1e:58:a7:b4:d3:ad:
78:8d:f1:a7:b8:ed:11:ed:94:bd:cd:35:d9:86:e0:
44:94:3b:c5:b1:98:b9:6b:e4:d2:d9:6f:d6:e7:b3:
ed:f2:15:7e:7f:dc:d3:01:48:c2:ec:5f:64:15:55:
dc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:77:DF:B4:A7:64:02:2A:D6:13:0D:4B:F3:48:44:19:A5:D7:C8:75
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/53fftKdkAirWEw1L80hEGaXXyHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.71.0/24
Signature Algorithm: sha256WithRSAEncryption
50:66:34:e5:e5:f4:da:be:dd:bb:f0:19:c6:58:72:70:30:61:
e2:a8:49:af:59:76:35:30:a6:7b:83:ac:ef:16:ff:11:83:f6:
e8:9b:79:eb:ea:a4:01:6b:73:12:ef:06:bb:22:8c:b3:74:2a:
1a:ef:a4:5e:28:04:80:37:cd:ba:15:c5:20:13:16:21:94:fc:
65:eb:57:65:ac:28:4a:7d:fe:e4:69:37:4a:dc:72:e7:f2:a4:
36:04:9b:3f:8d:37:a1:f4:84:41:95:c1:a7:2b:e9:7f:7f:96:
bb:58:85:cf:14:6a:35:57:55:fc:2a:94:6c:d1:ae:a8:3d:54:
92:bc:0a:d1:f6:44:12:dd:0d:56:98:bd:2d:09:f5:0e:ae:00:
e1:23:84:f8:76:00:ca:1b:d8:90:8d:92:59:cd:b6:19:7f:e1:
ba:05:ae:11:ab:82:86:86:f6:f4:dc:a1:d2:b6:ed:28:92:78:
57:5b:df:5c:46:63:da:b7:c6:c4:a5:28:ff:37:53:af:8d:d2:
40:27:59:9b:a4:81:01:72:47:d3:f6:ae:91:2c:03:53:52:8e:
75:a4:d5:bd:19:9f:bf:ce:80:73:80:88:bf:85:d0:c0:fc:55:
b2:1c:aa:a4:73:35:d0:95:82:2e:06:9e:97:2f:6b:7a:75:d1:
cf:56:e5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:55 2025 by rpki-client