Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/_QgoRTMtyS5EtLyc5fzMPDI_ctA.roa
File: _QgoRTMtyS5EtLyc5fzMPDI_ctA.roa (raw, json)
Hash identifier: zInvj3NFraNTsicxTEwbxiFyh/WcUo2wVcGwRT2Mtog=
Subject key identifier: FD:08:28:45:33:2D:C9:2E:44:B4:BC:9C:E5:FC:CC:3C:32:3F:72:D0
Certificate issuer: /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial: 01941FFA0678C7894A5041129AF477E865F1
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/_QgoRTMtyS5EtLyc5fzMPDI_ctA.roa
Signing time: Wed 01 Jan 2025 03:47:46 +0000
ROA not before: Wed 01 Jan 2025 03:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204315
IP address blocks: 185.253.148.0/22 maxlen: 22
185.253.148.0/24 maxlen: 24
185.253.149.0/24 maxlen: 24
2a0c:3d40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:06:78:c7:89:4a:50:41:12:9a:f4:77:e8:65:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd082845332dc92e44b4bc9ce5fccc3c323f72d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:a5:d4:b6:c0:08:9f:54:36:fa:07:4d:9a:
98:01:07:2f:db:78:16:7c:a1:b2:ac:5b:eb:ef:af:
d9:ef:0a:99:6d:04:a2:4a:c8:28:a6:d1:e6:6f:91:
2e:30:d0:40:6b:32:42:fa:24:db:63:cd:ce:01:79:
1b:3b:05:71:c4:e3:3c:c8:49:7a:2f:ee:5f:ce:57:
e6:54:a0:74:8b:85:73:1a:d0:5a:64:41:62:6a:fa:
ef:bd:d3:f5:a9:93:92:c0:f5:6b:5e:84:de:20:77:
8a:50:1d:55:5a:92:39:82:43:71:05:f0:57:de:27:
7b:b3:fc:93:ef:e9:52:d2:60:6e:d5:da:e8:d2:e5:
9d:8a:86:d6:60:e3:ca:b8:f5:39:f1:fc:bd:fa:12:
ad:3d:0b:13:ea:4f:62:a6:7c:4f:20:f9:61:e6:c5:
49:ff:d2:69:4e:e6:7d:e5:6e:fd:81:ae:75:b6:39:
ca:9b:1d:6a:fe:66:1f:d7:2b:69:7b:60:a9:0e:2d:
d8:76:8b:3b:8d:04:c6:d7:00:53:e7:ff:e4:e1:fd:
54:50:6a:b4:82:10:68:22:bf:37:e2:da:f4:0f:dc:
70:84:e9:4b:c7:0e:f5:f4:88:f7:7c:d8:3c:ad:da:
c3:d7:ea:32:92:70:5f:9c:bb:54:1c:12:04:a5:f9:
68:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:08:28:45:33:2D:C9:2E:44:B4:BC:9C:E5:FC:CC:3C:32:3F:72:D0
X509v3 Authority Key Identifier:
keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/_QgoRTMtyS5EtLyc5fzMPDI_ctA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.148.0/22
IPv6:
2a0c:3d40::/32
Signature Algorithm: sha256WithRSAEncryption
32:e5:4d:2e:1d:9e:aa:e4:0c:ca:7d:a2:64:c5:88:68:28:29:
dc:6b:2f:21:48:19:55:e8:8c:75:d9:02:e0:94:80:ea:d4:b3:
64:db:cd:21:b2:dd:6f:1c:90:b4:f7:d3:0a:a9:34:cd:ca:11:
d6:8c:d6:6e:99:60:d5:76:05:3d:a3:e7:7f:60:5e:c0:0e:ac:
3c:93:24:20:35:8e:91:e3:0b:f0:a5:ff:01:27:08:e9:71:b1:
98:49:85:9f:c3:0d:4e:32:25:07:6e:56:31:a8:06:62:b1:23:
a0:77:eb:67:10:c2:90:6b:3b:31:94:a3:31:88:8a:74:01:6a:
49:c4:82:c4:e0:24:b0:2a:7e:d3:8e:5d:2b:df:3f:87:af:61:
4d:0c:d0:06:3e:33:06:f7:e9:d1:2f:4d:bb:56:c0:5d:92:b6:
ca:9f:ae:7c:17:75:c0:5e:cd:51:4f:01:ec:2d:20:31:88:09:
a3:30:d0:9e:46:ed:63:39:4c:c3:89:25:d2:79:cb:b3:7b:13:
30:70:88:e2:00:84:30:76:80:23:bd:ed:06:b6:63:5b:e4:97:
85:dc:79:b3:1e:75:7b:ec:07:38:44:f0:b9:10:ee:ae:52:73:
a1:06:09:eb:c3:13:e2:45:19:95:8f:ca:18:38:14:6a:92:ac:
b8:95:c6:f8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQf+gZ4x4lKUEESmvR36GXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWYzMmQ4YmYxNTNjMDRjNjM5M2JlMjRmMDYzMjQzZjdl
OGE3ZTIwHhcNMjUwMTAxMDM0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDA4Mjg0NTMzMmRjOTJlNDRiNGJjOWNlNWZjY2MzYzMyM2Y3MmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdyl1LbACJ9UNvoHTZqYAQcv23gW
fKGyrFvr76/Z7wqZbQSiSsgoptHmb5EuMNBAazJC+iTbY83OAXkbOwVxxOM8yEl6
L+5fzlfmVKB0i4VzGtBaZEFiavrvvdP1qZOSwPVrXoTeIHeKUB1VWpI5gkNxBfBX
3id7s/yT7+lS0mBu1dro0uWdiobWYOPKuPU58fy9+hKtPQsT6k9ipnxPIPlh5sVJ
/9JpTuZ95W79ga51tjnKmx1q/mYf1ytpe2CpDi3Ydos7jQTG1wBT5//k4f1UUGq0
ghBoIr834tr0D9xwhOlLxw719Ij3fNg8rdrD1+oyknBfnLtUHBIEpflojQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFP0IKEUzLckuRLS8nOX8zDwyP3LQMB8GA1UdIwQY
MBaAFBPvMti/FTwExjk74k8GMkP36KfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYt
Mzg3NzA2YzJhODQ5LzEvX1Fnb1JUTXR5UzVFdEx5YzVmek1QRElfY3RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYtMzg3NzA2YzJhODQ5
LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuf2UMA0E
AgACMAcDBQAqDD1AMA0GCSqGSIb3DQEBCwUAA4IBAQAy5U0uHZ6q5AzKfaJkxYho
KCncay8hSBlV6Ix12QLglIDq1LNk280hst1vHJC099MKqTTNyhHWjNZumWDVdgU9
o+d/YF7ADqw8kyQgNY6R4wvwpf8BJwjpcbGYSYWfww1OMiUHblYxqAZisSOgd+tn
EMKQazsxlKMxiIp0AWpJxILE4CSwKn7Tjl0r3z+Hr2FNDNAGPjMG9+nRL027VsBd
krbKn658F3XAXs1RTwHsLSAxiAmjMNCeRu1jOUzDiSXSecuzexMwcIjiAIQwdoAj
ve0GtmNb5JeF3HmzHnV77Ac4RPC5EO6uUnOhBgnrwxPiRRmVj8oYOBRqkqy4lcb4
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:10 2025 by rpki-client