Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/Z3Q1WvhVYQp6sTYJIGKzU8X4Hic.roa
File: Z3Q1WvhVYQp6sTYJIGKzU8X4Hic.roa (raw, json)
Hash identifier: bVLYhkF2BtQwTz9AAyN5WatAhOO7gcaRPVhwXWE9H14=
Subject key identifier: 67:74:35:5A:F8:55:61:0A:7A:B1:36:09:20:62:B3:53:C5:F8:1E:27
Certificate issuer: /CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
Certificate serial: 019420D608F57F2B7680B9D764D3A09677FC
Authority key identifier: 58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/Z3Q1WvhVYQp6sTYJIGKzU8X4Hic.roa
Signing time: Wed 01 Jan 2025 07:48:05 +0000
ROA not before: Wed 01 Jan 2025 07:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202093
IP address blocks: 185.53.64.0/22 maxlen: 22
185.53.64.0/24 maxlen: 24
185.53.65.0/24 maxlen: 24
185.53.66.0/24 maxlen: 24
185.53.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:08:f5:7f:2b:76:80:b9:d7:64:d3:a0:96:77:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
Validity
Not Before: Jan 1 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6774355af855610a7ab136092062b353c5f81e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:d5:0b:80:0b:04:1f:90:a0:1c:5d:a0:57:
16:4c:c8:5f:02:a6:15:17:23:ba:a3:1f:42:40:83:
02:15:5c:af:8e:05:b7:12:17:0e:d6:d1:de:54:5d:
68:3b:a0:b6:96:da:21:10:15:e7:3b:36:bc:a0:7a:
f5:73:f0:69:06:2c:ca:4e:8b:de:2d:53:8b:b6:00:
92:94:92:49:94:50:ab:ec:6b:88:a9:71:f2:6b:fa:
5d:10:06:30:d5:c1:85:e0:70:b0:78:c3:b6:48:6b:
8a:05:c8:d1:22:34:b7:48:81:9b:00:4a:79:a6:ed:
7f:64:ed:2e:0d:59:80:8b:db:c3:09:14:96:40:46:
25:e9:f4:9b:9d:43:c5:2d:c3:0c:84:e5:ef:28:a7:
09:6e:20:be:f7:79:71:d1:3f:15:e3:47:09:3b:cb:
8f:1e:aa:ef:82:17:28:c5:8e:ff:23:05:ab:cb:fd:
bf:fc:16:10:fd:aa:b4:20:fb:31:ff:08:5c:ce:45:
b0:cb:61:26:0a:87:83:20:c1:7f:d1:36:a2:2d:a7:
e7:de:f4:59:5f:26:a6:9e:6f:54:4b:e9:7f:ab:42:
d4:29:2f:75:d9:3d:87:2e:4a:9b:42:5b:e2:a4:6f:
0a:e4:61:ea:1d:11:cd:67:fd:f9:dd:50:7a:57:6c:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:74:35:5A:F8:55:61:0A:7A:B1:36:09:20:62:B3:53:C5:F8:1E:27
X509v3 Authority Key Identifier:
keyid:58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/Z3Q1WvhVYQp6sTYJIGKzU8X4Hic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.64.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:3b:6b:0f:b7:17:53:36:c2:6b:71:e8:fd:16:1d:2c:80:72:
3a:98:f0:6d:dd:c5:66:1d:95:fe:b8:19:fc:18:a9:c3:f3:c1:
44:ff:ef:6b:3d:63:5a:18:b7:4b:17:ae:87:1e:aa:f8:94:8c:
09:a6:2f:ee:7a:b8:d3:36:82:e9:7b:d0:b6:f2:55:18:9e:f4:
ef:4b:f2:46:a6:4f:d5:58:92:9d:77:37:97:6e:9b:90:16:1d:
a5:1c:d1:d7:41:8f:22:e7:8a:ae:3a:08:2d:5e:b0:15:60:9a:
d5:f6:c9:7e:af:10:3d:6a:92:8c:02:b4:3c:b9:1e:a5:f2:c9:
09:07:06:63:3f:2a:67:e1:58:fe:01:9a:fb:66:8e:e8:7d:4a:
07:8f:10:09:b0:12:82:59:9d:af:29:b9:de:27:9d:1e:2b:7e:
38:b2:1d:c2:4c:42:bd:be:6a:af:5d:92:4b:33:89:1c:6a:59:
c2:ac:5a:a9:a5:8a:d4:4c:21:8c:c3:7d:79:87:fa:2c:94:b0:
40:2d:81:7a:b3:5c:1e:d8:f1:14:d7:49:fd:1f:b8:5f:b6:42:
bf:6b:7d:36:3d:cb:b9:2a:ca:5b:45:7c:de:78:6f:db:9a:2c:
78:04:65:d6:40:6f:b7:a7:76:81:5e:6a:a9:f1:89:e5:ca:43:
91:1e:a5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:52 2025 by rpki-client