Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/357457-2087-4993-9995-c42539dfe566/1/1-rYCh_V2M4ZTsmqzs7XfVKw5PTw.roa
File: 1-rYCh_V2M4ZTsmqzs7XfVKw5PTw.roa (raw, json)
Hash identifier: rMxShPMbM9rGUJTVLGVlCz6KKGM3LZ+HC0EAxdyyQ3k=
Subject key identifier: FA:B6:02:87:F5:76:33:86:53:B2:6A:B3:B3:B5:DF:54:AC:39:3D:3C
Certificate issuer: /CN=616e6e0c2477a991a068d3f0a7dacfb40e402036
Certificate serial: D84AF3
Authority key identifier: 61:6E:6E:0C:24:77:A9:91:A0:68:D3:F0:A7:DA:CF:B4:0E:40:20:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YW5uDCR3qZGgaNPwp9rPtA5AIDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/357457-2087-4993-9995-c42539dfe566/1/1-rYCh_V2M4ZTsmqzs7XfVKw5PTw.roa
Signing time: Sat 01 Jan 2022 09:53:26 +0000
ROA not before: Sat 01 Jan 2022 09:53:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34939
IP address blocks: 185.253.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14174963 (0xd84af3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616e6e0c2477a991a068d3f0a7dacfb40e402036
Validity
Not Before: Jan 1 09:53:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fab60287f576338653b26ab3b3b5df54ac393d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:ba:d5:6a:05:81:d0:d5:4d:2a:70:8a:62:
42:ab:4f:0c:1f:f2:97:f2:42:a4:40:ab:be:43:a9:
1a:7a:ff:ce:3f:0f:23:37:81:22:d4:f4:d3:68:6d:
d6:46:af:03:0f:19:47:ec:f3:07:6e:82:51:6c:8b:
4f:4b:ad:5a:17:63:7a:3f:1c:19:d9:f4:58:31:64:
da:5c:92:a8:b1:e6:a4:ca:bd:11:12:41:b4:be:fe:
c5:cd:56:a5:e5:15:a2:1c:42:b0:ef:d7:91:a5:70:
7b:d2:a5:2d:6f:5a:e8:57:2f:48:3a:4e:14:5d:41:
9c:84:a1:16:76:ce:e7:09:13:88:df:b4:ca:5c:47:
88:7b:e6:78:e5:7b:4b:70:d7:40:d5:c1:90:46:62:
22:2e:fe:01:17:2e:ad:7e:08:48:27:18:f4:c3:72:
8d:ac:7d:2a:2c:46:04:e7:57:63:ea:89:9c:f0:03:
3c:a3:2e:1a:f6:57:29:42:bf:c4:07:97:74:ff:95:
1d:76:7a:15:b0:21:75:2f:8d:96:85:69:98:91:13:
6d:a5:f3:43:18:67:a1:92:11:6f:4e:18:e5:eb:7a:
35:f2:ad:76:91:4f:ea:60:a6:e0:6d:da:6f:29:01:
50:fd:30:5f:9d:22:38:41:65:bf:d5:60:a8:33:50:
76:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B6:02:87:F5:76:33:86:53:B2:6A:B3:B3:B5:DF:54:AC:39:3D:3C
X509v3 Authority Key Identifier:
keyid:61:6E:6E:0C:24:77:A9:91:A0:68:D3:F0:A7:DA:CF:B4:0E:40:20:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YW5uDCR3qZGgaNPwp9rPtA5AIDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/357457-2087-4993-9995-c42539dfe566/1/1-rYCh_V2M4ZTsmqzs7XfVKw5PTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/357457-2087-4993-9995-c42539dfe566/1/YW5uDCR3qZGgaNPwp9rPtA5AIDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.5.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:03:0a:a7:11:3d:ab:e1:f7:f3:59:41:d2:1f:92:81:cf:23:
7d:25:ad:fa:18:cf:c1:b3:c0:50:97:51:e3:7c:63:4f:17:fe:
b8:4e:16:9e:b9:76:22:4c:1a:b6:70:cb:f3:e2:84:5e:3e:b5:
c5:51:08:09:f2:68:c7:fd:45:ab:f9:89:78:47:ef:62:bb:e5:
68:b9:93:ee:29:55:0a:91:01:65:2c:57:36:66:70:84:21:b4:
c6:be:5c:f7:10:7e:9b:dd:f8:fd:0b:3f:2d:a9:1f:48:4b:95:
36:4d:d2:d4:a5:31:73:31:20:7b:83:5d:a9:32:42:6d:ff:49:
2f:a0:45:3b:3c:f2:07:a3:db:60:c1:71:9d:37:56:a6:61:af:
c8:df:32:8c:0c:e9:92:47:1f:38:0c:f4:e3:df:e8:6c:0c:03:
6c:00:17:e3:f3:4c:bd:01:70:44:97:99:49:15:90:01:53:6b:
24:ae:3d:2f:01:47:8c:28:65:bf:b8:b8:11:49:3b:2f:98:1e:
34:13:52:ee:d3:68:30:80:a1:21:27:b8:c5:7a:db:80:27:e6:
8a:b2:52:66:d1:03:1d:f9:5d:93:30:7c:cc:5f:e7:d9:ce:b4:
2e:6e:7a:87:bc:10:0d:07:a5:32:f8:03:56:fa:41:d1:9a:20:
7a:41:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:47:31 2025 by rpki-client