Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/QzX_-iitYDa4AaJI-uyNp0iJIIc.roa
File: QzX_-iitYDa4AaJI-uyNp0iJIIc.roa (raw, json)
Hash identifier: bHLrv0jy+wKN4mNJ9MYfc0X5+9kumDx+LysZ2NcmjPk=
Subject key identifier: 43:35:FF:FA:28:AD:60:36:B8:01:A2:48:FA:EC:8D:A7:48:89:20:87
Certificate issuer: /CN=64a36b51326f70b5b772b9481384ac7dea371c1f
Certificate serial: 4EB99D
Authority key identifier: 64:A3:6B:51:32:6F:70:B5:B7:72:B9:48:13:84:AC:7D:EA:37:1C:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/QzX_-iitYDa4AaJI-uyNp0iJIIc.roa
Signing time: Sat 01 Jan 2022 02:00:26 +0000
ROA not before: Sat 01 Jan 2022 02:00:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.253.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5159325 (0x4eb99d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a36b51326f70b5b772b9481384ac7dea371c1f
Validity
Not Before: Jan 1 02:00:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4335fffa28ad6036b801a248faec8da748892087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a7:61:af:81:e7:0f:bc:f8:9f:5f:0e:85:38:
1c:72:ed:33:32:99:bc:cb:25:e7:c8:4d:d2:22:56:
10:5b:74:1a:93:54:a2:13:28:f2:59:c6:af:61:74:
30:41:c4:f3:d0:13:37:cb:17:a6:27:1f:1b:3f:22:
3a:6a:66:a7:3a:b4:6b:41:0e:5d:e2:f9:8b:06:93:
87:36:83:3b:9e:cb:6c:e8:0d:8f:94:29:7b:7e:9e:
94:17:08:26:55:5c:9d:66:b4:52:b6:eb:17:0b:0f:
ee:3c:b5:b8:2d:8b:e3:ee:37:8d:27:6f:33:ed:1f:
5b:e0:f8:8b:e0:67:28:7a:c5:03:c3:71:c2:29:14:
b2:d6:85:a4:19:b9:30:e1:74:59:66:33:b6:d4:e7:
d0:fd:19:2e:5a:4b:9c:08:78:6a:01:a6:be:fb:dd:
01:69:0d:1b:9e:b6:46:12:83:6a:ab:df:fd:07:f7:
fe:be:6d:c2:a6:1d:a7:a4:4b:a3:69:0e:13:d0:a4:
d2:d1:6f:a3:c0:8f:c3:1d:42:37:50:54:1f:da:7e:
41:38:0d:f2:17:f5:26:51:a2:7a:4c:4d:5f:f3:8e:
4f:33:20:08:ae:dd:d2:83:be:a8:c4:a5:f7:1c:4f:
f6:c2:ae:93:5d:9b:1f:1e:0a:4f:cf:5c:0a:d1:49:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:35:FF:FA:28:AD:60:36:B8:01:A2:48:FA:EC:8D:A7:48:89:20:87
X509v3 Authority Key Identifier:
keyid:64:A3:6B:51:32:6F:70:B5:B7:72:B9:48:13:84:AC:7D:EA:37:1C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/QzX_-iitYDa4AaJI-uyNp0iJIIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
15:5b:91:35:e0:6b:29:74:ab:de:db:85:2c:66:12:05:32:6c:
9f:e6:f4:81:ab:46:4f:3f:6a:2d:95:e1:ff:52:79:7d:f0:30:
86:3d:ff:94:8b:af:07:40:0f:2c:24:f3:28:4f:6b:f9:25:77:
3f:d1:31:a7:0c:29:01:dd:26:6a:be:c9:15:cb:df:8a:d1:54:
a7:16:af:fa:e5:90:22:20:9a:88:99:7a:c1:da:27:61:65:d0:
e1:49:ff:a8:7e:bb:f7:84:a7:74:b3:f0:cc:6c:74:8b:c6:70:
18:43:1a:52:85:21:35:90:24:c1:d5:4e:3d:fe:98:63:23:1f:
b8:22:a6:d4:47:93:40:50:cb:fc:50:a9:ae:4f:94:1a:fa:b6:
27:3f:c1:cb:4c:f2:a6:f9:e9:a3:bf:1c:58:b7:b4:e1:65:d5:
bf:1e:a2:36:ce:00:a5:1f:a8:fc:9a:76:ac:49:5c:04:86:61:
f2:5d:db:78:10:87:05:92:7b:46:36:83:52:89:02:3d:17:b6:
f2:e9:8a:92:f1:6d:c5:42:dd:3e:11:fd:67:21:21:2c:fc:3c:
5f:29:46:3b:db:dd:31:3b:59:e7:08:29:70:63:bb:09:45:e0:
d9:ae:a7:26:30:87:dd:b2:58:6a:d0:57:bb:53:fa:d7:20:5e:
94:7c:8d:3a
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDTrmdMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY0
YTM2YjUxMzI2ZjcwYjViNzcyYjk0ODEzODRhYzdkZWEzNzFjMWYwHhcNMjIwMTAx
MDIwMDI2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg0MzM1ZmZmYTI4YWQ2
MDM2YjgwMWEyNDhmYWVjOGRhNzQ4ODkyMDg3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA16dhr4HnD7z4n18OhTgccu0zMpm8yyXnyE3SIlYQW3Qak1Si
EyjyWcavYXQwQcTz0BM3yxemJx8bPyI6amanOrRrQQ5d4vmLBpOHNoM7nsts6A2P
lCl7fp6UFwgmVVydZrRStusXCw/uPLW4LYvj7jeNJ28z7R9b4PiL4GcoesUDw3HC
KRSy1oWkGbkw4XRZZjO21OfQ/RkuWkucCHhqAaa++90BaQ0bnrZGEoNqq9/9B/f+
vm3Cph2npEujaQ4T0KTS0W+jwI/DHUI3UFQf2n5BOA3yF/UmUaJ6TE1f845PMyAI
rt3Sg76oxKX3HE/2wq6TXZsfHgpPz1wK0UlbywIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFEM1//oorWA2uAGiSPrsjadIiSCHMB8GA1UdIwQYMBaAFGSja1Eyb3C1t3K5
SBOErH3qNxwfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
WktOclVUSnZjTFczY3JsSUU0U3NmZW8zSEI4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC8xYy9iMjU1ZTEtYWJmNy00NjdmLTlkMjEtMTViNWEzYzQwYTU2LzEv
UXpYXy1paXRZRGE0QWFKSS11eU5wMGlKSUljLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9i
MjU1ZTEtYWJmNy00NjdmLTlkMjEtMTViNWEzYzQwYTU2LzEvWktOclVUSnZjTFcz
Y3JsSUU0U3NmZW8zSEI4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf0BMA0GCSqGSIb3DQEBCwUAA4IB
AQAVW5E14GspdKve24UsZhIFMmyf5vSBq0ZPP2otleH/Unl98DCGPf+Ui68HQA8s
JPMoT2v5JXc/0TGnDCkB3SZqvskVy9+K0VSnFq/65ZAiIJqImXrB2idhZdDhSf+o
frv3hKd0s/DMbHSLxnAYQxpShSE1kCTB1U49/phjIx+4IqbUR5NAUMv8UKmuT5Qa
+rYnP8HLTPKm+emjvxxYt7ThZdW/HqI2zgClH6j8mnasSVwEhmHyXdt4EIcFkntG
NoNSiQI9F7by6YqS8W3FQt0+Ef1nISEs/DxfKUY7290xO1nnCClwY7sJReDZrqcm
MIfdslhq0Fe7U/rXIF6UfI06
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:48 2025 by rpki-client