Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/3_W_XAUxWQMM0c9NTEPYHjfqgck.roa
File: 3_W_XAUxWQMM0c9NTEPYHjfqgck.roa (raw, json)
Hash identifier: E1OIMKhJR86IMRd5EVHu4z0yjGLXGeHXwMYawcg9lWM=
Subject key identifier: DF:F5:BF:5C:05:31:59:03:0C:D1:CF:4D:4C:43:D8:1E:37:EA:81:C9
Certificate issuer: /CN=64a36b51326f70b5b772b9481384ac7dea371c1f
Certificate serial: D5EB96
Authority key identifier: 64:A3:6B:51:32:6F:70:B5:B7:72:B9:48:13:84:AC:7D:EA:37:1C:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/3_W_XAUxWQMM0c9NTEPYHjfqgck.roa
Signing time: Fri 04 Mar 2022 01:41:47 +0000
ROA not before: Fri 04 Mar 2022 01:41:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 185.253.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14019478 (0xd5eb96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a36b51326f70b5b772b9481384ac7dea371c1f
Validity
Not Before: Mar 4 01:41:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dff5bf5c053159030cd1cf4d4c43d81e37ea81c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:3a:d5:f9:f2:71:ff:f9:c8:40:37:65:0d:
84:04:9b:f1:f3:9a:f8:27:be:72:d6:56:3c:04:ef:
c8:70:76:df:ea:e5:e4:ad:76:61:27:66:c7:82:be:
5a:ad:65:50:c6:28:ed:48:56:09:bb:6c:f0:0a:4a:
69:5e:ee:97:bf:20:11:0c:61:e4:2c:13:e7:4d:12:
4c:ef:33:ef:22:fb:b2:12:37:d4:e3:ca:fd:ad:fe:
99:e1:2a:a9:e1:86:e5:92:36:93:1f:76:fd:9b:c6:
92:8b:18:ba:56:83:60:d0:9e:3d:da:35:42:2f:c1:
e4:fe:29:b5:db:c3:c7:cf:2b:30:4a:33:9c:95:a2:
59:83:59:ea:67:e4:0a:41:98:b1:b2:56:cc:52:c6:
ff:c7:fd:ca:12:06:e2:77:c2:7e:e6:b6:6b:88:63:
37:8f:60:ef:f1:e7:6e:5f:9c:ff:17:b9:ca:07:e2:
ac:cb:e8:9c:75:62:de:c4:d6:fa:32:26:69:0c:ce:
15:3b:a4:50:07:06:e6:e4:f8:6c:7a:64:8c:58:03:
fe:8f:d6:3d:8c:11:a1:22:be:fe:75:88:65:7d:6a:
6f:da:84:bb:4d:52:ea:f4:1b:ed:c1:df:24:71:ee:
f2:e4:87:c8:d4:1b:d5:24:ce:d9:69:22:db:74:e5:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F5:BF:5C:05:31:59:03:0C:D1:CF:4D:4C:43:D8:1E:37:EA:81:C9
X509v3 Authority Key Identifier:
keyid:64:A3:6B:51:32:6F:70:B5:B7:72:B9:48:13:84:AC:7D:EA:37:1C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/3_W_XAUxWQMM0c9NTEPYHjfqgck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7c:51:9f:77:f5:85:5e:4e:7f:5c:ad:02:d6:51:95:a5:86:
2e:cc:02:c0:be:1c:fa:7d:d8:b8:01:88:61:9a:da:25:7e:7c:
0f:d0:96:a8:bc:fb:64:12:1f:df:ba:d6:80:46:42:3a:fd:fd:
c2:cd:6f:44:c3:80:bb:5a:d2:89:a9:33:93:f2:9f:b3:0f:67:
f9:cd:ad:73:df:02:64:9f:29:42:d1:a2:b6:78:d3:0c:01:82:
59:03:1a:42:62:ae:44:1a:c0:ce:97:64:93:b5:3c:5b:11:99:
fc:c2:d8:7b:48:1e:df:2f:43:28:54:d7:92:b2:b5:6c:35:65:
bb:71:a1:8f:f9:e8:5d:8f:f1:85:10:04:53:b6:99:b8:5e:89:
92:00:08:4a:2a:f9:ff:0c:20:78:5e:ab:56:4c:83:de:42:24:
d6:f9:7c:a4:48:76:14:a8:56:5c:86:06:e2:da:6c:c0:49:df:
1d:18:e8:0c:55:d9:63:ec:5d:0b:25:a0:35:40:ef:0a:b2:26:
92:fb:5d:57:31:e0:7c:1b:c4:f1:90:19:f6:93:d6:85:fd:a6:
81:4c:7a:46:ef:15:5d:71:9c:51:2a:1c:c7:d7:99:4c:e6:96:
02:0f:37:44:18:45:16:71:91:8d:96:ab:fc:fe:94:26:80:da:
c0:5e:88:b5
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEANXrljANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NGEzNmI1MTMyNmY3MGI1Yjc3MmI5NDgxMzg0YWM3ZGVhMzcxYzFmMB4XDTIyMDMw
NDAxNDE0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGZmNWJmNWMwNTMx
NTkwMzBjZDFjZjRkNGM0M2Q4MWUzN2VhODFjOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL/YOtX58nH/+chAN2UNhASb8fOa+Ce+ctZWPATvyHB23+rl
5K12YSdmx4K+Wq1lUMYo7UhWCbts8ApKaV7ul78gEQxh5CwT500STO8z7yL7shI3
1OPK/a3+meEqqeGG5ZI2kx92/ZvGkosYulaDYNCePdo1Qi/B5P4ptdvDx88rMEoz
nJWiWYNZ6mfkCkGYsbJWzFLG/8f9yhIG4nfCfua2a4hjN49g7/Hnbl+c/xe5ygfi
rMvonHVi3sTW+jImaQzOFTukUAcG5uT4bHpkjFgD/o/WPYwRoSK+/nWIZX1qb9qE
u01S6vQb7cHfJHHu8uSHyNQb1STO2Wki23Tl+EMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTf9b9cBTFZAwzRz01MQ9geN+qByTAfBgNVHSMEGDAWgBRko2tRMm9wtbdy
uUgThKx96jccHzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1pLTnJVVEp2Y0xXM2NybElFNFNzZmVvM0hCOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWMvYjI1NWUxLWFiZjctNDY3Zi05ZDIxLTE1YjVhM2M0MGE1Ni8x
LzNfV19YQVV4V1FNTTBjOU5URVBZSGpmcWdjay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMv
YjI1NWUxLWFiZjctNDY3Zi05ZDIxLTE1YjVhM2M0MGE1Ni8xL1pLTnJVVEp2Y0xX
M2NybElFNFNzZmVvM0hCOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALn9ATANBgkqhkiG9w0BAQsFAAOC
AQEAFnxRn3f1hV5Of1ytAtZRlaWGLswCwL4c+n3YuAGIYZraJX58D9CWqLz7ZBIf
37rWgEZCOv39ws1vRMOAu1rSiakzk/Kfsw9n+c2tc98CZJ8pQtGitnjTDAGCWQMa
QmKuRBrAzpdkk7U8WxGZ/MLYe0ge3y9DKFTXkrK1bDVlu3Ghj/noXY/xhRAEU7aZ
uF6JkgAISir5/wwgeF6rVkyD3kIk1vl8pEh2FKhWXIYG4tpswEnfHRjoDFXZY+xd
CyWgNUDvCrImkvtdVzHgfBvE8ZAZ9pPWhf2mgUx6Ru8VXXGcUSocx9eZTOaWAg83
RBhFFnGRjZar/P6UJoDawF6ItQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:56 2025 by rpki-client