Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e1142e-0946-42a1-ab7e-7e9ec007c81d/1/kIDNeBtOhIWKgShs8eCJX0Lsi6c.roa
File: kIDNeBtOhIWKgShs8eCJX0Lsi6c.roa (raw, json)
Hash identifier: eFwX960gclE6qhvcb8D6SA4woheBRxxCQ3hRbCl429s=
Subject key identifier: 90:80:CD:78:1B:4E:84:85:8A:81:28:6C:F1:E0:89:5F:42:EC:8B:A7
Certificate issuer: /CN=e528a9e9aa3564769fca2551e3d02d231dc73cef
Certificate serial: DE5A
Authority key identifier: E5:28:A9:E9:AA:35:64:76:9F:CA:25:51:E3:D0:2D:23:1D:C7:3C:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Sip6ao1ZHafyiVR49AtIx3HPO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e1142e-0946-42a1-ab7e-7e9ec007c81d/1/kIDNeBtOhIWKgShs8eCJX0Lsi6c.roa
Signing time: Wed 19 Jan 2022 16:25:40 +0000
ROA not before: Wed 19 Jan 2022 16:25:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15626
IP address blocks: 185.253.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56922 (0xde5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e528a9e9aa3564769fca2551e3d02d231dc73cef
Validity
Not Before: Jan 19 16:25:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9080cd781b4e84858a81286cf1e0895f42ec8ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7b:f5:c8:77:a8:b1:16:5c:37:9a:fd:7d:ba:
e2:81:56:5b:5d:e9:08:73:bb:f6:ef:69:26:79:1e:
59:19:2e:b4:9f:54:c8:c9:35:b1:f1:e2:61:26:ad:
bc:9b:a9:70:42:9a:78:04:c7:11:56:1c:be:a8:cc:
f3:76:67:41:03:10:e2:33:2e:d1:4b:18:b1:f8:7d:
cd:60:5f:7d:c3:b5:43:f0:0d:7f:b2:0c:a8:4b:17:
70:cc:9e:fc:c8:c6:a1:3f:c2:6a:c8:f8:77:f5:b8:
af:0d:cd:a5:bc:cb:a5:78:2f:e9:b4:9c:03:c2:47:
08:43:bf:ee:e7:ee:d5:c0:56:ce:65:8a:69:bf:ea:
fd:51:36:70:1c:c3:23:81:55:ec:59:b5:7d:8f:ce:
dd:e7:47:d0:ee:73:49:3a:f9:72:4f:38:ea:50:31:
75:15:a9:70:b1:a4:4b:83:b8:94:00:2e:84:d1:6a:
4f:87:b0:ad:23:c2:bf:21:2c:f4:13:16:2e:b5:e1:
b6:39:4e:f2:fd:d1:a9:8a:8b:5e:a1:3e:6b:d6:39:
d2:e4:72:e4:31:66:2d:27:c9:df:f1:2d:2c:1b:57:
22:97:95:80:0c:81:09:12:24:8e:3e:9f:d2:b4:ea:
81:26:11:8e:c6:82:41:55:5e:21:1d:7b:bf:14:57:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:80:CD:78:1B:4E:84:85:8A:81:28:6C:F1:E0:89:5F:42:EC:8B:A7
X509v3 Authority Key Identifier:
keyid:E5:28:A9:E9:AA:35:64:76:9F:CA:25:51:E3:D0:2D:23:1D:C7:3C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Sip6ao1ZHafyiVR49AtIx3HPO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1142e-0946-42a1-ab7e-7e9ec007c81d/1/kIDNeBtOhIWKgShs8eCJX0Lsi6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e1142e-0946-42a1-ab7e-7e9ec007c81d/1/5Sip6ao1ZHafyiVR49AtIx3HPO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.0.0/24
Signature Algorithm: sha256WithRSAEncryption
96:14:35:77:6e:42:34:47:c2:b5:de:02:b1:26:4b:7c:e0:01:
2a:97:38:09:62:97:81:b8:03:75:33:79:4c:78:78:f3:c1:f7:
b3:3b:3b:01:76:79:81:6e:25:72:a1:b9:fb:81:f8:b1:f2:e8:
c7:38:1b:b6:f3:b8:a7:91:18:92:45:ef:42:a4:a0:96:9c:9b:
74:91:f5:48:39:97:72:90:58:9f:55:3d:3c:72:ec:c5:46:12:
51:4a:c6:c3:69:e4:ed:84:71:57:8b:56:bd:e0:78:64:b8:47:
bb:61:96:8b:89:0f:3f:be:0f:29:52:d4:ce:1a:ea:95:13:a8:
2a:37:21:1a:4b:be:90:d8:1a:71:1b:ad:ce:e0:97:ed:35:8c:
4c:8b:17:bb:fe:dc:24:f2:7e:ef:f6:06:dc:d4:d3:93:d7:85:
43:bd:f0:9a:d4:ee:a8:d8:a2:e7:1f:40:e3:91:f0:8a:36:73:
e2:fe:a3:39:ae:64:ae:c9:e9:13:5a:3b:d9:37:45:0d:dd:7e:
47:4a:5c:7a:63:b0:bc:be:cb:ed:c9:35:48:d7:da:cc:f1:74:
99:18:84:bb:54:9e:7a:ff:15:b4:a3:1e:42:53:bf:3c:94:b7:
8c:30:c9:20:ea:7a:e4:3b:3a:2a:dc:ab:18:bf:b6:51:08:40:
2a:b0:d4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:57 2025 by rpki-client