Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/KZYNn3J2HSPKel08es-mKKsFutA.roa
File: KZYNn3J2HSPKel08es-mKKsFutA.roa (raw, json)
Hash identifier: IJKZih27v2YXzwphTdownqLdEUzRzQT8ZOywEZozdIo=
Subject key identifier: 29:96:0D:9F:72:76:1D:23:CA:7A:5D:3C:7A:CF:A6:28:AB:05:BA:D0
Certificate issuer: /CN=64a36b51326f70b5b772b9481384ac7dea371c1f
Certificate serial: 0188825A3DE035D3C8EC5DFE40CD43B27440
Authority key identifier: 64:A3:6B:51:32:6F:70:B5:B7:72:B9:48:13:84:AC:7D:EA:37:1C:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/KZYNn3J2HSPKel08es-mKKsFutA.roa
Signing time: Sat 03 Jun 2023 17:42:12 +0000
ROA not before: Sat 03 Jun 2023 17:42:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 185.253.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:82:5a:3d:e0:35:d3:c8:ec:5d:fe:40:cd:43:b2:74:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a36b51326f70b5b772b9481384ac7dea371c1f
Validity
Not Before: Jun 3 17:42:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29960d9f72761d23ca7a5d3c7acfa628ab05bad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:61:7a:aa:8a:9b:64:9c:b4:5b:d8:b0:bc:
c7:ed:c2:bd:dc:1c:5a:b4:41:15:4c:d6:97:d9:f1:
bf:b7:52:8a:da:04:f1:74:17:7f:83:06:e1:9d:0f:
a8:1e:bd:67:7a:e8:e8:89:18:8e:e6:fc:aa:34:9e:
04:bd:88:08:da:f5:fd:0d:d7:9e:53:9f:8a:c1:ad:
0d:5b:af:15:a5:45:90:5d:9f:94:93:b5:74:d7:b1:
4d:66:09:4d:b0:22:97:fb:69:a1:b7:06:56:a5:4a:
f0:ce:5f:78:b6:d1:bb:5c:8c:7c:fd:cd:69:b1:dc:
12:48:8e:99:6f:a6:dd:cc:55:4b:55:0b:13:1f:e5:
a0:5b:96:2c:36:56:d4:65:bd:1a:1e:30:09:e6:54:
5b:bc:b1:87:98:cc:f0:3a:e4:11:c1:3f:cc:fe:81:
f5:43:2f:34:cb:f2:1c:cc:af:1a:ab:04:b6:37:d8:
82:90:8d:10:09:be:6a:20:51:f4:cd:fb:60:a9:e8:
19:db:12:f1:b9:d5:c2:2c:d4:62:c9:a2:3f:a0:3e:
c8:e9:61:54:d1:a3:9a:19:8e:57:e2:bb:08:61:aa:
d5:3d:cd:41:37:00:80:27:83:b8:3e:44:46:10:c4:
02:8c:2e:16:51:59:f9:29:dd:6c:5b:e4:73:3d:62:
bf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:96:0D:9F:72:76:1D:23:CA:7A:5D:3C:7A:CF:A6:28:AB:05:BA:D0
X509v3 Authority Key Identifier:
keyid:64:A3:6B:51:32:6F:70:B5:B7:72:B9:48:13:84:AC:7D:EA:37:1C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/KZYNn3J2HSPKel08es-mKKsFutA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:d5:d0:26:14:82:ff:53:59:7c:37:fa:43:39:53:27:68:b9:
64:c4:99:48:db:ad:55:54:64:ef:b5:cd:e8:10:f7:35:8b:02:
ce:06:aa:90:3d:9b:33:d4:ff:64:a6:cc:d8:c9:02:0f:9d:d1:
d1:10:b6:12:b2:05:08:23:ea:cc:88:83:85:19:82:14:3a:01:
94:20:a2:b2:80:69:f0:2f:f1:00:f5:3f:07:9a:22:f7:7a:68:
6b:76:98:1c:ca:be:5c:c1:33:53:22:51:ef:e6:88:d5:57:65:
1f:00:a2:57:31:cc:03:c8:53:6a:f8:74:7f:fb:73:72:2f:fe:
36:14:b0:39:56:16:41:4a:91:f9:13:77:0b:b9:47:ec:33:95:
a5:6e:df:56:e1:3b:0d:3f:5f:46:7f:28:57:4a:2f:f7:30:f0:
ac:01:49:d9:97:13:f6:db:56:b9:c7:0a:52:b5:ce:be:34:05:
d3:aa:f2:1c:46:e4:ec:a7:b6:9e:66:34:07:66:ba:ef:9d:1e:
08:bc:d9:b5:11:42:ed:b2:ab:25:d6:4b:cd:9e:6c:b9:7a:db:
e6:e3:30:64:07:4e:5b:a1:0a:3d:c8:29:7f:d2:4e:b3:59:06:
19:28:d1:66:b4:ea:35:dc:99:cf:2d:6e:2f:bb:86:40:7b:66:
f4:ed:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:09:30 2025 by rpki-client