Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/5VxobF0P_TV9FHprPwtGHqsx9FE.roa
File: 5VxobF0P_TV9FHprPwtGHqsx9FE.roa (raw, json)
Hash identifier: 9PqpsLyMtI65g9apdefPbD5rQQM5tnzNSbZrRTkvZnU=
Subject key identifier: E5:5C:68:6C:5D:0F:FD:35:7D:14:7A:6B:3F:0B:46:1E:AB:31:F4:51
Certificate issuer: /CN=64a36b51326f70b5b772b9481384ac7dea371c1f
Certificate serial: 01BD7A79
Authority key identifier: 64:A3:6B:51:32:6F:70:B5:B7:72:B9:48:13:84:AC:7D:EA:37:1C:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/5VxobF0P_TV9FHprPwtGHqsx9FE.roa
Signing time: Mon 13 Jun 2022 02:33:02 +0000
ROA not before: Mon 13 Jun 2022 02:33:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43043
IP address blocks: 185.253.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29194873 (0x1bd7a79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a36b51326f70b5b772b9481384ac7dea371c1f
Validity
Not Before: Jun 13 02:33:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e55c686c5d0ffd357d147a6b3f0b461eab31f451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:da:cf:51:3e:c9:3b:29:18:ec:37:09:ae:59:
54:cb:df:da:a9:bd:32:1a:64:d6:be:cf:c9:2e:e4:
c0:c5:a2:18:57:17:84:b9:1e:dd:6e:33:8a:e0:5a:
b5:f9:c9:df:8a:45:44:37:b8:4a:15:0c:04:4f:c0:
f9:1a:2e:d9:d8:05:fc:ea:38:c6:a2:90:26:f3:e4:
64:fb:f2:66:13:76:86:b5:04:b4:97:d6:ec:01:21:
51:5c:b8:e1:7f:9e:77:a2:63:2a:f0:98:b6:f6:34:
1b:3b:02:65:7a:2a:22:75:f8:c2:70:71:c5:d5:63:
87:79:6a:f0:2d:93:f9:ec:8e:b4:a7:7f:bc:a0:38:
ea:6a:8c:b6:d3:2b:f9:21:5a:62:5e:39:37:29:3a:
89:cf:47:67:0b:8d:16:96:5c:df:b6:b0:89:fb:d7:
09:2f:33:22:85:47:b2:ac:df:89:0f:dd:21:d5:3c:
04:57:6c:e7:27:30:d2:09:34:ef:15:4d:37:d8:ee:
33:95:ad:44:09:03:55:d6:a3:8c:86:c8:20:c6:e0:
2d:18:f8:6e:f5:c4:6c:f5:01:77:3f:af:8f:5f:f2:
76:b9:b6:4e:3f:2c:8f:8b:db:12:b1:8d:d9:88:30:
96:6d:97:bb:3d:31:ae:4a:23:3b:0e:c8:0a:1a:fe:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5C:68:6C:5D:0F:FD:35:7D:14:7A:6B:3F:0B:46:1E:AB:31:F4:51
X509v3 Authority Key Identifier:
keyid:64:A3:6B:51:32:6F:70:B5:B7:72:B9:48:13:84:AC:7D:EA:37:1C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/5VxobF0P_TV9FHprPwtGHqsx9FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
34:fc:a8:65:fb:25:32:fc:28:d3:1d:e7:a6:91:b0:b9:c2:76:
0b:d4:9a:fe:37:c8:75:a7:e0:a0:cc:f5:55:ce:b1:37:50:d2:
9a:9e:84:18:87:3a:45:be:ce:35:52:51:32:d1:a5:ae:9c:f8:
c1:e3:da:0b:26:0b:ec:c3:87:6f:f2:99:b7:1e:51:e3:0f:ef:
37:b1:f9:b7:bb:5b:9c:ce:3e:7a:33:e8:40:3e:87:bd:cd:87:
a5:01:30:dc:28:c8:72:44:91:af:bb:08:2d:71:15:3d:0b:60:
b7:4a:3d:69:70:87:a7:1f:0e:03:c3:21:7e:f9:26:47:df:1a:
32:0d:e8:7f:e2:12:79:64:3e:1e:8b:2c:6f:01:eb:00:87:0d:
4e:d7:13:33:c1:62:ca:5a:70:44:e4:d2:20:70:b3:f4:f5:ce:
9e:b4:90:31:12:6b:5f:96:82:aa:1e:a1:74:af:65:8f:05:f6:
d3:c0:dd:95:67:45:96:7c:95:5b:42:cb:ca:49:3a:68:11:f6:
ae:b4:d8:7b:94:df:23:2e:65:9d:c7:37:41:84:03:27:9c:42:
b8:c5:e3:20:5f:b8:53:8c:b4:5b:47:59:80:a6:34:c8:0d:9a:
70:3c:ac:4a:65:e3:70:41:f5:02:1e:ac:fb:0f:73:00:61:3d:
9f:50:ff:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:06:51 2025 by rpki-client