Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/ASUGNfdEr-zmHuBMKbmczWEEyX0.roa
File: ASUGNfdEr-zmHuBMKbmczWEEyX0.roa (raw, json)
Hash identifier: XbBf6Nfds25faGeda9A9EZrA0jUpRsOTRIO73TfrGdU=
Subject key identifier: 01:25:06:35:F7:44:AF:EC:E6:1E:E0:4C:29:B9:9C:CD:61:04:C9:7D
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 019423D76B3CEB7945641A486454A7C16280
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/ASUGNfdEr-zmHuBMKbmczWEEyX0.roa
Signing time: Wed 01 Jan 2025 21:48:27 +0000
ROA not before: Wed 01 Jan 2025 21:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209817
IP address blocks: 185.253.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:6b:3c:eb:79:45:64:1a:48:64:54:a7:c1:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Jan 1 21:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01250635f744afece61ee04c29b99ccd6104c97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4d:7d:b1:c3:58:46:91:ed:41:bf:35:0d:d9:
bb:50:44:ac:9a:f6:3f:df:64:90:16:66:33:c0:c0:
b1:e2:a3:d3:60:25:20:de:2b:5d:93:f1:80:78:22:
6a:b4:96:0c:90:c7:ff:5c:83:4d:cd:ca:2d:c1:ac:
d6:02:da:56:b9:9c:9a:d8:ab:a0:de:a1:18:bf:23:
1c:f1:7e:90:3e:a5:26:fc:6c:da:c0:f0:fe:e0:22:
76:1a:1f:e3:10:91:77:af:83:0e:f5:47:33:b9:2a:
6f:e3:65:da:3c:7f:7c:af:da:13:f5:4c:31:9d:db:
9c:85:77:2c:36:93:3b:f4:a7:7a:52:72:a8:d6:45:
f3:9f:ab:44:b9:29:7f:f5:11:b8:3e:74:46:5c:11:
08:64:7f:f3:52:10:da:8e:ca:e5:cf:6b:88:16:5d:
7b:53:22:ed:a3:c8:fa:bc:58:75:dd:36:a4:84:30:
2a:a0:59:67:60:34:97:30:50:7d:2c:fd:df:7a:ea:
5f:91:c3:93:20:e4:d4:12:17:a7:6c:94:53:ef:d5:
c6:08:3a:62:79:64:01:41:ff:a3:a5:7d:02:3d:4e:
f1:d7:e0:95:51:02:bc:4b:e5:da:fb:a8:88:57:c4:
9b:7f:fc:7c:1f:33:04:b8:3c:2f:af:10:a6:52:4f:
13:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:25:06:35:F7:44:AF:EC:E6:1E:E0:4C:29:B9:9C:CD:61:04:C9:7D
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/ASUGNfdEr-zmHuBMKbmczWEEyX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.235.0/24
Signature Algorithm: sha256WithRSAEncryption
56:eb:9a:15:55:66:7b:13:d0:84:87:23:04:63:e5:92:1b:c2:
34:73:7f:fc:c0:16:b0:43:1f:e0:19:4b:06:84:da:7f:a0:76:
83:ec:60:af:35:0f:1e:99:4c:83:96:dc:77:b6:2e:7f:a3:62:
58:a1:8b:70:ab:c0:f0:7a:4e:6d:0e:66:e9:e8:42:53:2a:59:
96:85:3e:9b:fd:3e:25:e3:57:90:bc:9a:e8:30:de:15:05:b7:
75:6c:99:ff:3b:6f:51:c1:6d:b9:eb:aa:47:1a:f4:76:50:ec:
59:42:b5:ef:d3:99:a2:04:bd:e0:36:1f:ea:47:57:46:26:bf:
c6:92:3a:e7:fd:90:4d:18:2f:cb:e9:0e:fa:d9:40:65:c3:2c:
cf:6d:5b:d6:d9:eb:55:b6:53:f8:49:bf:ac:8e:a4:d6:1f:c0:
12:8d:49:52:49:bb:69:c5:e8:9e:66:fb:d0:1a:33:80:1d:5d:
26:bc:b1:d6:92:78:75:90:a7:3c:a4:ee:0f:5b:cc:a9:20:e9:
94:a6:bd:35:8f:e9:b1:a1:3c:37:a3:91:45:08:83:cf:9d:a3:
50:d8:70:c2:b6:5a:04:a0:35:09:19:16:86:0c:3b:60:40:a2:
1e:59:b8:ee:fc:80:16:45:12:aa:39:f0:26:11:3f:66:a5:10:
09:2e:2e:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj12s863lFZBpIZFSnwWKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh
N2IwYmEwHhcNMjUwMTAxMjE0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTI1MDYzNWY3NDRhZmVjZTYxZWUwNGMyOWI5OWNjZDYxMDRjOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E19scNYRpHtQb81Ddm7UESsmvY/
32SQFmYzwMCx4qPTYCUg3itdk/GAeCJqtJYMkMf/XINNzcotwazWAtpWuZya2Kug
3qEYvyMc8X6QPqUm/GzawPD+4CJ2Gh/jEJF3r4MO9UczuSpv42XaPH98r9oT9Uwx
nduchXcsNpM79Kd6UnKo1kXzn6tEuSl/9RG4PnRGXBEIZH/zUhDajsrlz2uIFl17
UyLto8j6vFh13TakhDAqoFlnYDSXMFB9LP3feupfkcOTIOTUEhenbJRT79XGCDpi
eWQBQf+jpX0CPU7x1+CVUQK8S+Xa+6iIV8Sbf/x8HzMEuDwvrxCmUk8TKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAElBjX3RK/s5h7gTCm5nM1hBMl9MB8GA1UdIwQY
MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt
ZGZiZmEzZmNmMDIxLzEvQVNVR05mZEVyLXptSHVCTUtibWN6V0VFeVgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx
LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf3rMA0G
CSqGSIb3DQEBCwUAA4IBAQBW65oVVWZ7E9CEhyMEY+WSG8I0c3/8wBawQx/gGUsG
hNp/oHaD7GCvNQ8emUyDltx3ti5/o2JYoYtwq8Dwek5tDmbp6EJTKlmWhT6b/T4l
41eQvJroMN4VBbd1bJn/O29RwW2566pHGvR2UOxZQrXv05miBL3gNh/qR1dGJr/G
kjrn/ZBNGC/L6Q762UBlwyzPbVvW2etVtlP4Sb+sjqTWH8ASjUlSSbtpxeieZvvQ
GjOAHV0mvLHWknh1kKc8pO4PW8ypIOmUpr01j+mxoTw3o5FFCIPPnaNQ2HDCtloE
oDUJGRaGDDtgQKIeWbju/IAWRRKqOfAmET9mpRAJLi4C
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net