Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/9SKc1OPZn-eLWfpLDmHLKp6N8Ss.roa
File: 9SKc1OPZn-eLWfpLDmHLKp6N8Ss.roa (raw, json)
Hash identifier: aMPoo7LYnaS7eWYIaQDX/Es2RSQYrk3CqkkwnLvbGQ8=
Subject key identifier: F5:22:9C:D4:E3:D9:9F:E7:8B:59:FA:4B:0E:61:CB:2A:9E:8D:F1:2B
Certificate issuer: /CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Certificate serial: 01942521954B6F4256213334ECC6F02FE53E
Authority key identifier: E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/9SKc1OPZn-eLWfpLDmHLKp6N8Ss.roa
Signing time: Thu 02 Jan 2025 03:49:05 +0000
ROA not before: Thu 02 Jan 2025 03:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55195
IP address blocks: 185.159.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:95:4b:6f:42:56:21:33:34:ec:c6:f0:2f:e5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5cbde75d536e91b28a23469349d1cf28b884a3b
Validity
Not Before: Jan 2 03:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5229cd4e3d99fe78b59fa4b0e61cb2a9e8df12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f7:a9:d1:69:66:b2:9d:86:ac:13:2a:f0:2d:
95:8a:55:88:4c:7b:33:da:32:c0:fc:c7:4d:55:5d:
64:97:b8:11:75:07:1f:7f:c8:91:d2:9c:08:57:99:
f2:c8:fd:80:6b:9f:7a:09:dc:8d:a4:d8:2c:0d:b0:
91:04:98:97:c9:f2:90:26:af:de:08:29:38:45:39:
52:a2:a6:c7:d0:37:49:c5:13:15:12:c7:1f:0c:18:
f4:b1:fb:94:62:46:27:43:5e:c7:b8:cf:97:6d:82:
c7:05:40:8d:c4:16:53:4d:d5:21:3f:52:89:5c:b8:
5a:af:2f:14:06:79:d4:ac:a1:ce:b9:36:bf:20:b4:
62:d3:e7:18:3a:ed:99:11:0a:18:e7:d8:9b:76:ff:
ad:66:4c:b5:73:6d:d0:67:28:6a:77:df:7f:8e:2c:
63:10:32:b5:4e:e1:c3:36:ce:9d:c5:ef:25:ed:b2:
bc:ec:b9:4b:8b:26:d0:fe:1f:96:28:c1:ab:91:a5:
f5:1d:36:27:d9:1b:6e:ae:5c:c1:f3:1a:f0:e7:98:
27:36:88:ac:28:ab:1f:c4:fb:7f:77:72:9e:59:d9:
b4:f1:9f:86:05:be:cf:aa:01:05:1e:fd:a4:e0:94:
9e:f3:f2:8e:72:59:9a:ff:ef:30:2f:10:d7:0e:6d:
b8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:22:9C:D4:E3:D9:9F:E7:8B:59:FA:4B:0E:61:CB:2A:9E:8D:F1:2B
X509v3 Authority Key Identifier:
keyid:E5:CB:DE:75:D5:36:E9:1B:28:A2:34:69:34:9D:1C:F2:8B:88:4A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cveddU26RsoojRpNJ0c8ouISjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/9SKc1OPZn-eLWfpLDmHLKp6N8Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/015e90-5204-4d09-8b26-fceacbd73845/1/5cveddU26RsoojRpNJ0c8ouISjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.197.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:be:81:20:db:b6:f3:0e:f2:90:d8:d3:81:95:ca:94:97:c0:
8d:ef:66:e1:30:5b:f7:b9:4c:2e:56:2f:25:8a:78:2c:f8:34:
d2:af:f4:a8:5b:fa:6b:78:9f:21:0e:53:4c:3e:22:2c:96:3d:
22:e9:90:da:f9:f8:cc:5b:28:0a:86:28:8a:0a:65:73:6b:ff:
00:60:00:29:97:51:9a:f9:79:e2:48:89:ae:8e:a2:fe:18:1d:
43:2e:88:ea:49:78:bc:a4:3d:a5:d9:6b:33:f9:a6:03:c7:fa:
f0:51:bc:b1:f2:4c:7c:03:df:29:66:32:e9:cd:e2:ea:79:b5:
fb:12:7b:58:f9:83:51:5b:93:64:6c:15:e3:7c:7e:f7:33:50:
20:45:35:d3:cf:0a:da:08:40:cc:96:0b:ab:64:bf:da:02:0e:
17:70:49:8a:a4:54:c3:f0:74:46:c9:c2:27:2d:98:3b:99:09:
e7:b3:f7:5d:0a:50:05:a6:29:3b:b0:57:93:7b:f4:29:53:3c:
54:91:98:4f:69:00:12:d1:83:15:16:fe:2c:fb:e0:b2:ad:23:
47:ce:02:89:d5:dd:4b:8b:88:17:f2:fa:c1:6a:2f:f3:cd:f9:
13:65:8a:41:03:a1:5e:70:96:41:2c:89:a9:ad:ff:41:dd:60:
ed:03:8f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:15 2025 by rpki-client on console.sobornost.net