Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/dlmSMThgfzEt-EoGdzxxYyd6AvA.roa
File: dlmSMThgfzEt-EoGdzxxYyd6AvA.roa (raw, json)
Hash identifier: II2qv/R+riqTZycAWnh60efymgX6QJpKVeYxCLVnyks=
Subject key identifier: 76:59:92:31:38:60:7F:31:2D:F8:4A:06:77:3C:71:63:27:7A:02:F0
Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial: 0194214423AB577D71B1B8C98567862036E9
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/dlmSMThgfzEt-EoGdzxxYyd6AvA.roa
Signing time: Wed 01 Jan 2025 09:48:21 +0000
ROA not before: Wed 01 Jan 2025 09:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211029
IP address blocks: 185.253.244.0/22 maxlen: 24
185.253.245.0/24 maxlen: 24
185.253.246.0/24 maxlen: 24
185.253.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:23:ab:57:7d:71:b1:b8:c9:85:67:86:20:36:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Validity
Not Before: Jan 1 09:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7659923138607f312df84a06773c7163277a02f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:87:dc:4b:41:8c:c5:4a:8d:8c:75:15:37:da:
91:43:de:3c:22:fb:74:f9:34:2f:df:34:bf:79:cc:
a2:97:3a:b3:bf:bf:3d:ce:de:86:b1:e0:de:ae:57:
df:6b:a1:6f:74:86:83:1b:0a:13:fc:cf:12:c9:30:
f4:96:c6:0a:a6:e6:c6:27:b2:f1:da:1e:6a:db:48:
89:c3:95:a3:b1:b5:77:20:aa:9b:54:0f:46:6a:c9:
f1:c8:92:05:0c:78:f3:73:92:17:c7:32:ec:2b:a0:
8a:e1:c1:ed:45:be:2e:64:ed:87:58:83:0a:c7:3f:
90:c6:8f:06:72:2f:9b:e2:85:af:a4:e1:92:88:7e:
91:6d:98:35:5a:61:a7:6e:1a:57:c8:ae:7f:80:5d:
55:c2:94:50:54:b1:2d:70:b4:20:c0:68:09:2e:d9:
a3:67:12:b5:07:3b:f4:ca:1a:e1:49:8b:32:6c:99:
37:d0:a1:78:e7:3f:74:7d:84:95:88:13:34:2f:f8:
a8:2b:5d:4f:a3:2b:58:6c:47:ab:6e:dc:cc:2c:f0:
d9:ba:f8:79:31:3d:29:99:40:49:e6:a5:84:b4:e0:
37:76:fc:96:84:7f:30:b0:9b:6d:95:17:08:9b:13:
85:de:24:8c:29:49:43:96:35:3c:0b:e8:b9:ab:7d:
ac:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:59:92:31:38:60:7F:31:2D:F8:4A:06:77:3C:71:63:27:7A:02:F0
X509v3 Authority Key Identifier:
keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/dlmSMThgfzEt-EoGdzxxYyd6AvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.244.0/22
Signature Algorithm: sha256WithRSAEncryption
69:b3:35:53:d3:e3:11:30:10:61:f9:3a:1a:c0:74:ac:48:b5:
20:c5:1f:30:0f:93:53:d5:e0:d7:0e:c5:0d:ad:80:c1:b0:fc:
2c:3d:34:cb:73:e0:4c:4e:fc:bb:fb:83:c9:6e:6a:8f:df:28:
e9:f9:bb:d6:de:cb:8b:f5:4b:db:cf:32:a4:e4:8a:13:bb:54:
5e:72:ce:78:f8:12:33:ac:e3:bb:ca:be:7d:70:2c:8d:67:d7:
a5:70:2f:16:39:68:a0:ef:6c:39:0f:43:dd:b1:b3:9c:0d:8b:
0f:5a:2e:0b:a1:10:52:3e:31:20:5e:d2:b7:87:6e:26:78:39:
e3:e6:13:b8:f1:7b:82:f0:5f:6a:92:bb:19:e4:60:e6:6e:3d:
04:1c:6a:74:04:a3:64:22:85:3f:2e:3c:0a:ef:13:01:38:02:
32:ea:19:da:f4:1f:5b:4a:db:6c:e0:a7:af:50:81:cb:9b:10:
ac:95:da:97:bd:4c:47:99:fc:db:d5:7e:64:dd:0c:91:63:41:
57:4e:8f:0b:ec:7a:f0:6d:77:9f:a6:49:e3:80:2d:a8:f2:6f:
d2:bd:c9:a2:9c:26:b2:6a:42:db:c2:42:7f:37:cd:94:c3:2f:
61:fc:99:d5:63:d7:3a:85:3b:9f:20:d9:73:1f:2f:e8:a4:dc:
c6:d5:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net