Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/57FgojkG37hIggjKaqawMzmVQIA.roa
File: 57FgojkG37hIggjKaqawMzmVQIA.roa (raw, json)
Hash identifier: /Zm5Ajg0glma0yotkqGrQyyakkaI1JlH4aKh3LmAvVc=
Subject key identifier: E7:B1:60:A2:39:06:DF:B8:48:82:08:CA:6A:A6:B0:33:39:95:40:80
Certificate issuer: /CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Certificate serial: 019425FC204DEB914E85F266C0470ED5F280
Authority key identifier: 40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/57FgojkG37hIggjKaqawMzmVQIA.roa
Signing time: Thu 02 Jan 2025 07:47:47 +0000
ROA not before: Thu 02 Jan 2025 07:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61136
IP address blocks: 185.253.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:20:4d:eb:91:4e:85:f2:66:c0:47:0e:d5:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Validity
Not Before: Jan 2 07:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7b160a23906dfb8488208ca6aa6b03339954080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:88:21:f9:93:98:2a:48:b4:ea:8c:38:e2:
47:85:54:d8:92:a9:1e:5b:9d:92:eb:0d:75:3d:56:
ed:3f:8e:0a:9e:a0:ea:12:d5:c5:db:f8:70:12:a8:
fa:21:4c:6d:70:ec:0c:c7:3c:24:49:6b:5c:79:f3:
54:c9:05:4a:e5:e3:8c:cc:ea:4b:ea:91:e0:ca:38:
1b:be:f6:52:c4:32:ce:5b:90:d4:24:0e:64:b1:09:
f9:69:b3:dd:dc:59:a3:af:20:a1:c0:ae:1a:94:c5:
71:f6:0c:82:ff:87:69:a6:e7:3e:77:e9:b0:52:6c:
16:a5:df:62:ba:f4:c1:e4:49:c0:7e:9d:1f:ec:7f:
3e:2a:52:ce:e1:2d:f2:ed:51:29:1a:07:ea:25:39:
13:43:00:48:bd:f7:3c:fa:57:5f:c3:7d:fa:6c:87:
5d:78:f3:9b:5f:1b:97:88:24:21:5c:78:63:cc:f7:
9d:a3:c1:96:1b:31:08:d9:2d:78:f3:1c:79:f7:dc:
b2:62:16:7d:f9:f1:f7:04:db:29:57:dd:55:f0:b0:
d8:37:4d:1a:68:a9:be:cc:fa:f4:2f:b8:00:eb:5c:
71:4b:fc:8c:6b:b9:46:df:8c:ea:cd:10:8c:0e:76:
df:16:f0:51:29:40:99:5e:7c:ef:50:48:3e:ff:f3:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B1:60:A2:39:06:DF:B8:48:82:08:CA:6A:A6:B0:33:39:95:40:80
X509v3 Authority Key Identifier:
keyid:40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/57FgojkG37hIggjKaqawMzmVQIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.132.0/22
Signature Algorithm: sha256WithRSAEncryption
98:d1:1d:58:1c:62:46:5f:b1:2f:17:1f:d2:e0:95:14:8e:e8:
27:92:76:c8:33:05:3d:9e:2c:9a:ab:5b:e7:02:2b:7e:ba:22:
56:a2:f7:1d:90:f2:b7:08:4e:17:a1:5c:69:a6:d8:0d:5b:d5:
4c:b3:80:17:63:00:8d:d2:a2:66:37:f8:c7:9b:29:d2:5c:c8:
df:da:97:e3:60:8f:bc:46:39:32:03:ee:3d:b6:c9:7b:07:eb:
76:bf:9c:9a:c1:32:da:dc:a1:63:d5:ac:c2:b5:47:ac:ca:66:
d5:a9:21:0d:56:bd:2a:36:45:d5:2c:e4:41:2a:e2:6e:e7:b7:
d1:13:4c:90:99:3c:9c:b0:85:41:7d:2e:59:83:95:ff:df:b0:
19:82:aa:8f:8d:e2:65:06:24:89:80:c9:93:0d:ba:b4:73:e8:
cf:19:c5:0f:1d:85:bd:8b:54:03:dd:c8:52:b2:df:fd:37:1e:
da:2e:a5:65:14:8b:f9:3c:d7:da:c2:15:4e:e1:44:70:75:7c:
87:2b:66:f3:b7:b3:f8:31:36:23:d3:fb:00:f6:fd:07:c7:ca:
72:be:cf:d8:59:29:a3:b4:84:eb:1d:df:61:16:ea:ed:93:9f:
7d:8b:22:9b:d5:4a:16:f3:36:5f:6e:30:b8:06:20:42:03:ad:
d2:c2:ad:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:07:54 2025 by rpki-client