Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/N9wZb19u6uDl2jmJsSrj5tJBTrs.roa
File: N9wZb19u6uDl2jmJsSrj5tJBTrs.roa (raw, json)
Hash identifier: 0C5L52QJ9EePN5vLiQx5L6BEy17vjwGiBKVGlRWVCRo=
Subject key identifier: 37:DC:19:6F:5F:6E:EA:E0:E5:DA:39:89:B1:2A:E3:E6:D2:41:4E:BB
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 019425FD52BE269DEA6481DECC4AA8882F6F
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/N9wZb19u6uDl2jmJsSrj5tJBTrs.roa
Signing time: Thu 02 Jan 2025 07:49:06 +0000
ROA not before: Thu 02 Jan 2025 07:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204310
IP address blocks: 185.253.172.0/22 maxlen: 22
185.253.172.0/24 maxlen: 24
185.253.175.0/24 maxlen: 24
2a0c:3ec0::/29 maxlen: 29
2a0c:3ec7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:52:be:26:9d:ea:64:81:de:cc:4a:a8:88:2f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Jan 2 07:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37dc196f5f6eeae0e5da3989b12ae3e6d2414ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:ed:bf:ea:83:ad:ab:b6:56:fe:d6:8a:f1:
0e:c1:0a:8b:b4:53:4b:43:bc:29:07:4d:f4:57:2e:
8a:8a:93:ca:84:64:1b:23:03:ca:13:c9:0f:d2:3d:
f5:63:a7:77:10:52:f0:53:58:20:13:63:50:73:92:
50:17:ff:a2:a8:05:24:cc:5a:9b:7e:f3:5e:01:64:
15:ef:77:e7:40:fe:ce:2f:2d:fe:0c:70:4d:45:bb:
6e:dd:af:9e:e9:dc:11:3b:ad:da:2a:a0:30:92:7b:
0d:ca:2a:6e:66:39:15:e5:16:bc:17:0c:f5:74:f6:
5c:83:e2:ee:04:dd:37:51:cd:8b:2b:e1:5d:7e:2b:
14:6a:c0:d8:73:38:33:9b:3b:37:23:34:56:3e:41:
e0:7f:40:c0:c1:55:a6:8a:b4:5a:91:48:98:18:ad:
b6:68:bf:b2:fd:77:74:e8:5d:e0:d8:56:66:60:1a:
42:c1:88:24:2c:9f:5a:19:e4:17:d2:d1:5e:72:a4:
ee:01:e1:b4:45:33:18:df:ce:85:09:86:00:20:a5:
bb:4c:45:ab:23:f2:4c:9f:47:03:95:9c:6d:f4:92:
10:87:fa:87:5c:df:a4:d5:3c:2a:42:46:ae:5c:4f:
21:9a:37:f9:42:cb:e2:d4:f1:94:3d:56:a2:cf:0a:
18:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DC:19:6F:5F:6E:EA:E0:E5:DA:39:89:B1:2A:E3:E6:D2:41:4E:BB
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/N9wZb19u6uDl2jmJsSrj5tJBTrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.172.0/22
IPv6:
2a0c:3ec0::/29
Signature Algorithm: sha256WithRSAEncryption
67:88:94:85:e1:bf:94:4c:8c:ef:64:df:82:b3:66:f6:be:7c:
7e:ba:a6:6d:05:89:51:a7:62:59:42:b4:f8:5f:48:2c:86:d5:
9d:bf:cb:38:52:c4:3c:7c:22:69:ed:a2:27:c5:be:58:9e:35:
f5:5c:12:d8:cc:a7:ae:e3:96:c2:62:72:11:06:58:c0:0c:89:
69:11:11:19:d4:6f:10:a9:6e:26:9a:99:53:fb:9b:1c:a8:34:
3a:a3:f6:58:c4:60:a8:06:6b:52:c5:cb:5b:a3:c8:0d:d1:9f:
58:68:e4:a4:02:f1:13:a1:b7:3d:32:08:0d:74:46:03:9f:4d:
02:d8:90:19:84:7b:3a:85:2b:74:5b:3e:f9:43:54:b8:0e:62:
25:08:b3:ae:a5:b4:ed:0d:59:41:2b:2f:dc:95:1d:16:1a:cf:
11:2f:57:16:82:0c:26:0a:96:48:a2:86:f3:dd:f6:aa:13:2e:
63:3b:d1:c6:ea:77:e9:36:e6:fe:33:24:94:04:e9:ed:5c:63:
08:13:ed:d8:63:43:60:26:02:3e:8e:d4:df:f5:10:e0:9b:f6:
39:20:67:d9:65:15:50:1f:29:ad:c7:c2:4b:5d:38:41:18:91:
89:f5:7e:00:df:aa:f3:0c:3d:1b:27:07:81:ff:1a:3f:42:bd:
38:f6:2a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:10:38 2025 by rpki-client