Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/To6HH0NAD3-iXu2sC5bnqW49_u8.roa
File: To6HH0NAD3-iXu2sC5bnqW49_u8.roa (raw, json)
Hash identifier: YmWXXH3Av0E2CrL799X6ANRb9+jxQX4GmKs5TGrWWnc=
Subject key identifier: 4E:8E:87:1F:43:40:0F:7F:A2:5E:ED:AC:0B:96:E7:A9:6E:3D:FE:EF
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 0193E52C836FA34FD5381DB84CD5ED762E70
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/To6HH0NAD3-iXu2sC5bnqW49_u8.roa
Signing time: Fri 20 Dec 2024 17:45:19 +0000
ROA not before: Fri 20 Dec 2024 17:45:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198584
IP address blocks: 185.253.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e5:2c:83:6f:a3:4f:d5:38:1d:b8:4c:d5:ed:76:2e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Dec 20 17:45:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e8e871f43400f7fa25eedac0b96e7a96e3dfeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:5f:6b:a2:32:d9:33:39:35:ce:a0:e5:ae:
bb:34:a9:46:b0:bb:1e:f7:e1:7e:9c:8c:2d:21:d5:
6b:ee:14:68:a5:5c:5d:75:1b:1f:43:0d:20:cc:d6:
7b:67:3d:8f:e8:f9:c3:16:da:6b:d4:47:f4:88:b2:
f7:8f:eb:e3:f8:3a:8d:e8:5a:6b:d8:af:3e:d5:64:
35:c9:1c:4c:95:5d:5c:29:d3:7d:cd:43:3f:99:96:
c6:6a:c0:99:d7:9a:f3:85:be:16:37:cd:13:be:ce:
6c:7b:22:4c:1d:ca:96:24:07:5b:a9:b1:2d:eb:dd:
fa:22:24:ac:4c:96:4e:35:47:cc:1c:50:57:e2:3a:
b3:3c:73:67:8f:f2:02:04:9a:e7:9e:1a:f4:ad:53:
52:9c:3f:e8:4e:84:a2:75:8a:81:50:71:30:ca:f1:
46:4c:35:c5:4b:e5:81:cb:35:62:9d:34:89:d3:ab:
fb:ff:78:16:13:65:fe:99:2d:2b:89:43:23:ed:99:
a9:26:1e:ff:1c:02:56:46:1d:e1:4e:c4:b3:4b:1c:
c2:5f:af:e4:8e:5d:11:0a:8d:10:f4:c9:31:bc:26:
04:ce:78:01:0d:d8:59:81:e4:ec:35:80:af:b5:1b:
6f:ff:6d:c0:f5:e2:95:54:37:e3:48:d9:78:3e:0a:
de:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8E:87:1F:43:40:0F:7F:A2:5E:ED:AC:0B:96:E7:A9:6E:3D:FE:EF
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/To6HH0NAD3-iXu2sC5bnqW49_u8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
28:21:5a:28:87:6c:d1:9e:41:07:a2:83:76:a4:5f:00:f2:96:
b9:51:8e:d9:b5:f9:e0:ff:f6:3a:0a:42:ec:a7:b6:59:8f:fb:
d8:5c:c3:42:85:f1:18:41:0a:47:e2:e4:10:75:3b:31:a8:45:
b3:f5:bb:17:d9:96:03:65:c7:7e:36:78:fa:aa:e6:3c:a9:40:
e3:f9:44:62:ee:2b:c3:d9:43:a9:7e:69:ef:4a:8e:6f:ca:7e:
ab:87:64:76:5a:20:0a:b8:d2:9f:42:75:0b:e9:42:19:4d:c0:
ae:30:e8:02:fa:37:6d:11:a7:f3:2f:fc:97:95:34:3c:0e:1d:
44:39:1b:9c:d9:62:ae:d6:37:a2:88:a1:e3:8a:bd:04:70:f9:
0b:5e:ac:1a:18:8f:f9:e8:00:8d:e7:71:ea:bc:e9:4b:db:58:
6f:54:26:c9:c7:6e:b9:92:7e:86:da:4f:51:23:c6:8a:4d:eb:
41:3b:58:d8:ad:e7:2d:07:bf:47:e6:9d:f9:84:36:65:b6:de:
9a:0f:64:4b:5a:bb:8d:b6:c0:f5:79:ba:24:38:df:57:47:14:
54:79:d7:4c:87:10:08:87:2a:79:0a:e6:e2:07:51:d9:d2:72:
37:a1:a3:34:3c:e8:98:18:c3:8a:d1:c4:43:32:f3:e9:0c:c1:
d1:da:96:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPlLINvo0/VOB24TNXtdi5wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx
NGRiMzkwHhcNMjQxMjIwMTc0NTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZThlODcxZjQzNDAwZjdmYTI1ZWVkYWMwYjk2ZTdhOTZlM2RmZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2Nfa6Iy2TM5Nc6g5a67NKlGsLse
9+F+nIwtIdVr7hRopVxddRsfQw0gzNZ7Zz2P6PnDFtpr1Ef0iLL3j+vj+DqN6Fpr
2K8+1WQ1yRxMlV1cKdN9zUM/mZbGasCZ15rzhb4WN80Tvs5seyJMHcqWJAdbqbEt
6936IiSsTJZONUfMHFBX4jqzPHNnj/ICBJrnnhr0rVNSnD/oToSidYqBUHEwyvFG
TDXFS+WByzVinTSJ06v7/3gWE2X+mS0riUMj7ZmpJh7/HAJWRh3hTsSzSxzCX6/k
jl0RCo0Q9MkxvCYEzngBDdhZgeTsNYCvtRtv/23A9eKVVDfjSNl4PgreTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE6Ohx9DQA9/ol7trAuW56luPf7vMB8GA1UdIwQY
MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt
ZWQzMGI5YmIxMmQ1LzEvVG82SEgwTkFEMy1pWHUyc0M1Ym5xVzQ5X3U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1
LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf0BMA0G
CSqGSIb3DQEBCwUAA4IBAQAoIVooh2zRnkEHooN2pF8A8pa5UY7Ztfng//Y6CkLs
p7ZZj/vYXMNChfEYQQpH4uQQdTsxqEWz9bsX2ZYDZcd+Nnj6quY8qUDj+URi7ivD
2UOpfmnvSo5vyn6rh2R2WiAKuNKfQnUL6UIZTcCuMOgC+jdtEafzL/yXlTQ8Dh1E
ORuc2WKu1jeiiKHjir0EcPkLXqwaGI/56ACN53HqvOlL21hvVCbJx265kn6G2k9R
I8aKTetBO1jYrectB79H5p35hDZltt6aD2RLWruNtsD1ebokON9XRxRUeddMhxAI
hyp5CubiB1HZ0nI3oaM0POiYGMOK0cRDMvPpDMHR2pYR
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:00:12 2025 by rpki-client