Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/F7pXHMdaoPGhUGKcaHbTnhubBek.roa
File: F7pXHMdaoPGhUGKcaHbTnhubBek.roa (raw, json)
Hash identifier: IErzWec1BRhnIpp58+tGikjwQD9tfEEyG13XJ5U0A+w=
Subject key identifier: 17:BA:57:1C:C7:5A:A0:F1:A1:50:62:9C:68:76:D3:9E:1B:9B:05:E9
Certificate issuer: /CN=64a36b51326f70b5b772b9481384ac7dea371c1f
Certificate serial: 01891E7328DBAE34D46F2D69545625F2811B
Authority key identifier: 64:A3:6B:51:32:6F:70:B5:B7:72:B9:48:13:84:AC:7D:EA:37:1C:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/F7pXHMdaoPGhUGKcaHbTnhubBek.roa
Signing time: Tue 04 Jul 2023 01:10:10 +0000
ROA not before: Tue 04 Jul 2023 01:10:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.253.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1e:73:28:db:ae:34:d4:6f:2d:69:54:56:25:f2:81:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a36b51326f70b5b772b9481384ac7dea371c1f
Validity
Not Before: Jul 4 01:10:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17ba571cc75aa0f1a150629c6876d39e1b9b05e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:df:84:bb:e1:68:d6:ce:98:3f:d8:23:fd:
44:e7:35:8e:c9:8b:2d:85:31:1b:04:d8:ea:91:f0:
4c:34:e4:58:7b:d2:6d:90:5a:2c:09:9d:46:16:7b:
b6:a8:f9:f0:cd:40:cc:c4:39:17:44:7f:cd:9b:09:
41:74:e9:ab:80:81:3f:33:6f:83:52:b4:3c:22:ef:
cd:64:93:cb:25:c2:dc:44:4b:31:7e:62:f4:0f:64:
2e:e1:3b:41:e0:ae:52:89:af:39:69:04:2c:d5:41:
e3:dc:88:7a:c5:a3:4d:1e:4b:8b:82:72:2e:ef:c8:
9f:40:de:6a:1f:90:f4:40:da:c1:88:2d:d6:1a:54:
5c:99:7b:e0:c6:1b:55:26:9f:88:5d:f7:db:e2:b1:
de:0a:e0:7f:37:20:41:b0:a5:53:20:1a:e1:de:6a:
de:4c:c4:b5:0c:b0:67:ea:48:c8:08:66:93:c6:eb:
ba:33:a7:de:36:34:ef:a8:b1:7b:8b:73:ba:51:f1:
77:01:35:be:b3:00:3f:06:8a:05:e8:e1:7d:9d:2a:
92:69:b5:1c:52:a2:f3:09:41:2e:c5:d5:b6:0e:2b:
db:9d:d9:81:31:82:71:58:43:60:a4:c7:5f:42:03:
27:04:e7:cc:81:17:14:61:b3:5c:07:59:0a:04:8c:
41:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BA:57:1C:C7:5A:A0:F1:A1:50:62:9C:68:76:D3:9E:1B:9B:05:E9
X509v3 Authority Key Identifier:
keyid:64:A3:6B:51:32:6F:70:B5:B7:72:B9:48:13:84:AC:7D:EA:37:1C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/F7pXHMdaoPGhUGKcaHbTnhubBek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
83:1e:76:91:fe:fc:2d:11:3f:f6:4e:85:00:af:f7:b7:28:01:
35:44:17:cf:51:66:cd:6b:d2:ec:f4:8f:4e:77:82:21:bd:0f:
9d:15:4d:b5:de:14:fe:8d:1b:3b:12:e3:e4:90:40:2b:75:f2:
75:21:d8:78:d5:9a:68:b3:9c:4b:12:05:1a:c4:5a:f4:e1:cc:
0d:bb:6d:89:dd:72:d8:bc:18:a3:be:3a:81:e5:c9:5c:fb:86:
af:20:e5:b3:aa:f8:14:c1:a5:1e:c2:56:d6:f2:7a:b8:21:c4:
66:0f:32:42:c1:03:58:e0:18:ad:6d:f6:f1:4d:8c:08:36:d0:
b5:55:76:c4:bb:45:37:84:1a:52:db:71:d4:2d:1d:c2:a8:5b:
d5:90:17:f8:cc:f9:46:2b:18:5f:9c:ce:ac:db:19:bd:8c:3d:
f0:c4:74:8a:3e:d5:63:a8:16:e9:2a:21:6c:c2:b8:ab:dd:4d:
d4:f1:b8:e6:9b:97:e3:64:8a:1e:b6:08:4f:07:d6:2f:61:83:
4f:30:1a:4f:b3:37:a3:f6:15:6b:e0:32:83:40:03:4e:0a:99:
b6:1b:ee:42:be:61:74:76:90:cd:c4:0c:dc:3b:c4:70:fc:59:
ab:bc:81:e2:84:47:ff:21:56:df:74:7a:51:42:87:39:b7:c5:
4c:23:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:01 2025 by rpki-client