Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/o7JXrfu6Y5Rqopev1I4hENekNnI.roa
File: o7JXrfu6Y5Rqopev1I4hENekNnI.roa (raw, json)
Hash identifier: OTnJYjH1VUc1CrfjQEw5CsBTbgwAtP1d4HXa4fEyqXo=
Subject key identifier: A3:B2:57:AD:FB:BA:63:94:6A:A2:97:AF:D4:8E:21:10:D7:A4:36:72
Certificate issuer: /CN=64a36b51326f70b5b772b9481384ac7dea371c1f
Certificate serial: 01856CF854B703B6DB432400C640162F04C6
Authority key identifier: 64:A3:6B:51:32:6F:70:B5:B7:72:B9:48:13:84:AC:7D:EA:37:1C:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/o7JXrfu6Y5Rqopev1I4hENekNnI.roa
Signing time: Sun 01 Jan 2023 10:54:51 +0000
ROA not before: Sun 01 Jan 2023 10:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.253.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:54:b7:03:b6:db:43:24:00:c6:40:16:2f:04:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64a36b51326f70b5b772b9481384ac7dea371c1f
Validity
Not Before: Jan 1 10:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3b257adfbba63946aa297afd48e2110d7a43672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:43:e8:ba:da:94:93:db:9c:63:cf:31:8e:d1:
e1:ce:c4:64:a7:24:f4:b2:74:a8:77:69:db:7b:82:
af:55:d5:2a:8b:f8:dd:02:f3:19:c0:e4:7b:b0:19:
97:78:60:9b:0d:bd:e5:6b:cb:0b:0e:1a:18:d6:52:
c5:18:35:eb:1d:e9:21:8a:f6:95:5e:1d:20:17:7e:
08:5e:f2:08:c0:35:d9:e8:02:83:ef:bd:de:8b:95:
60:2f:ec:a2:e5:0c:cd:6b:26:9b:92:73:20:5b:bb:
38:c4:aa:4f:61:64:18:c9:3b:0a:b6:83:86:8f:83:
7f:b0:26:56:88:c4:f8:ab:a3:f2:8e:d4:8c:68:a2:
d0:82:cb:be:ec:48:6c:32:70:9b:25:c5:37:27:1e:
10:08:7c:4a:ab:4b:4e:39:e1:62:7d:91:01:87:66:
2d:61:e9:14:25:60:c0:b3:c2:cd:ad:9a:b6:e9:90:
78:4c:1d:12:e8:90:14:50:b0:2d:de:77:d1:f8:4b:
b7:c8:bf:78:02:45:f8:45:e7:76:e3:ca:02:58:a4:
88:06:b2:50:75:fd:95:33:af:99:be:eb:1e:de:a6:
64:06:09:fe:83:c0:27:15:42:a9:a9:23:4b:b2:15:
9c:dc:4e:6d:66:76:43:1f:4b:7c:dc:f0:21:74:bf:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B2:57:AD:FB:BA:63:94:6A:A2:97:AF:D4:8E:21:10:D7:A4:36:72
X509v3 Authority Key Identifier:
keyid:64:A3:6B:51:32:6F:70:B5:B7:72:B9:48:13:84:AC:7D:EA:37:1C:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/o7JXrfu6Y5Rqopev1I4hENekNnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b255e1-abf7-467f-9d21-15b5a3c40a56/1/ZKNrUTJvcLW3crlIE4Ssfeo3HB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c0:d5:17:bb:47:2d:3a:d2:dd:ac:24:f1:6f:90:68:e4:d0:
57:b7:9e:82:d9:57:b9:80:1a:49:1d:9b:da:d0:a1:e6:00:78:
8e:8a:11:2a:0c:69:bd:4e:75:8e:b4:c9:9c:29:66:2d:59:03:
2a:87:56:bc:8e:2f:5a:23:6b:f6:5f:d4:40:4d:1f:a4:4b:6a:
ba:c3:70:5b:d9:15:e1:aa:6b:f2:39:3d:f1:f6:1f:e0:2a:1a:
9a:fb:89:a0:13:e9:77:65:3a:b5:5e:e7:35:10:bd:ed:ca:d2:
3c:ac:c0:07:65:0a:31:b2:2f:d9:3c:d2:44:b6:dc:97:e3:ad:
ce:18:27:0d:db:75:4d:82:b5:42:7a:6f:ff:3f:07:51:aa:49:
20:3d:5e:35:88:5f:25:4d:7b:31:9b:84:42:54:a3:8f:00:00:
ed:14:8f:b9:76:61:41:2c:95:6a:df:5f:b4:05:22:15:44:e4:
80:3a:a9:b6:4f:81:cd:a5:96:ca:6d:bf:19:ab:0c:b5:10:30:
e6:53:9b:23:3b:2c:12:0c:1f:1b:df:dc:79:df:10:cf:4b:77:
eb:af:46:0e:61:cd:84:49:cb:bb:5e:51:57:67:c6:ac:59:3c:
eb:73:72:e8:3f:70:69:46:e0:99:c1:54:93:ec:a1:ca:a7:00:
ad:2c:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:35:42 2025 by rpki-client