Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/357457-2087-4993-9995-c42539dfe566/1/zabqqvo5EtULs0BwVtys6P2BT3s.roa
File: zabqqvo5EtULs0BwVtys6P2BT3s.roa (raw, json)
Hash identifier: /pmBxXD5QuY7szHk7Gv3ldeTfm5dn15k2KMiTLxi7gw=
Subject key identifier: CD:A6:EA:AA:FA:39:12:D5:0B:B3:40:70:56:DC:AC:E8:FD:81:4F:7B
Certificate issuer: /CN=616e6e0c2477a991a068d3f0a7dacfb40e402036
Certificate serial: 01856B49F14CD4BB57047D1DC065B0B4E1B9
Authority key identifier: 61:6E:6E:0C:24:77:A9:91:A0:68:D3:F0:A7:DA:CF:B4:0E:40:20:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YW5uDCR3qZGgaNPwp9rPtA5AIDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/357457-2087-4993-9995-c42539dfe566/1/zabqqvo5EtULs0BwVtys6P2BT3s.roa
Signing time: Sun 01 Jan 2023 03:04:46 +0000
ROA not before: Sun 01 Jan 2023 03:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50902
IP address blocks: 185.253.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:49:f1:4c:d4:bb:57:04:7d:1d:c0:65:b0:b4:e1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616e6e0c2477a991a068d3f0a7dacfb40e402036
Validity
Not Before: Jan 1 03:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cda6eaaafa3912d50bb3407056dcace8fd814f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:7a:79:85:5a:02:b7:e3:72:92:09:4f:df:
a9:8a:ea:48:c1:d0:82:64:de:41:a4:c1:e9:e4:f7:
63:dd:dd:14:ec:6a:af:da:e8:5a:99:6a:7e:25:f4:
13:62:de:3c:3f:39:60:d4:2a:27:45:8b:9d:d3:b6:
b9:94:b7:28:c2:1a:07:ee:30:3c:23:c4:c5:21:24:
b6:c9:e8:6d:ac:c1:4b:cf:07:e4:7b:cf:8e:0b:f7:
f8:8a:4e:a4:dc:b1:99:89:8a:17:5b:5b:62:78:7d:
18:81:0e:52:19:e8:7f:f5:c9:5c:62:8b:7b:12:11:
28:b1:0b:19:79:0d:82:13:cd:af:f7:81:61:d4:e9:
69:8c:2c:59:6e:2f:63:d6:55:20:e9:45:38:d0:60:
bd:82:62:81:44:be:3b:3a:28:6c:e9:67:70:80:ea:
85:6b:4d:3e:b6:93:3f:f0:ea:71:2a:1b:31:bc:33:
82:35:d7:91:cd:b4:80:50:c8:53:60:fb:c1:b5:65:
38:6a:3a:82:dd:72:45:5b:5e:60:0e:08:e4:aa:2d:
34:5b:d8:4b:2e:09:5a:f1:2f:da:09:25:39:77:53:
a7:36:4b:2d:81:c0:19:15:54:87:6d:7a:52:b7:45:
c6:ec:a7:ab:c7:17:b9:0e:fd:b0:87:0a:dc:c9:31:
33:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A6:EA:AA:FA:39:12:D5:0B:B3:40:70:56:DC:AC:E8:FD:81:4F:7B
X509v3 Authority Key Identifier:
keyid:61:6E:6E:0C:24:77:A9:91:A0:68:D3:F0:A7:DA:CF:B4:0E:40:20:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YW5uDCR3qZGgaNPwp9rPtA5AIDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/357457-2087-4993-9995-c42539dfe566/1/zabqqvo5EtULs0BwVtys6P2BT3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/357457-2087-4993-9995-c42539dfe566/1/YW5uDCR3qZGgaNPwp9rPtA5AIDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:fa:40:9a:19:ba:e3:3e:d9:a6:06:bf:27:2f:74:ee:05:f5:
f1:c5:92:25:3e:19:52:b6:7f:39:b6:0c:04:6e:33:16:09:ae:
23:22:d1:3c:5c:c6:95:05:12:9b:70:bf:e8:b4:cb:b9:de:ea:
6c:27:77:2c:c0:35:f1:70:b5:89:6f:98:e5:63:f5:e9:c5:07:
89:18:7b:aa:75:27:fc:f7:63:39:8a:4b:e4:e0:d7:47:b6:78:
c8:43:7d:66:98:60:d0:2c:e5:b9:0c:da:f4:d6:98:44:a5:02:
d2:e3:dd:be:9f:8f:9c:85:e1:af:a4:89:6f:08:04:ed:a6:16:
76:2c:91:f7:7a:6d:e5:f8:2f:c0:ec:d2:4c:d4:b4:c8:26:a0:
b1:da:27:0f:f6:17:1d:63:16:69:ad:d4:38:bc:15:dd:43:48:
c5:af:1a:ab:a8:b6:3d:3f:0a:15:c2:99:7b:80:33:f1:a7:d4:
c6:37:2d:1e:0c:b8:cb:3f:72:fd:44:43:37:28:be:7b:28:e2:
41:d3:15:e7:45:e9:bf:74:9d:f4:12:73:f2:bb:80:1e:ea:e2:
6b:e4:51:00:60:df:31:9a:8a:af:26:0e:63:4e:07:98:55:4b:
ed:cb:d2:95:ea:3e:13:00:a7:f8:4b:43:4b:c3:54:f9:c6:79:
8e:ce:75:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:50:03 2025 by rpki-client