Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f3476e-9f86-4d2c-9c75-d68898b9a129/1/c2UPvE2hYMje-JPmMQ2HKui2htk.roa
File: c2UPvE2hYMje-JPmMQ2HKui2htk.roa (raw, json)
Hash identifier: tAX62oPsAZqh8Ts3HjGhq1Loozm0AibYBkbt6eW1qFk=
Subject key identifier: 73:65:0F:BC:4D:A1:60:C8:DE:F8:93:E6:31:0D:87:2A:E8:B6:86:D9
Certificate issuer: /CN=e2b966f1c18b8ef78b0c3bdbc4dd47f6740b0a1e
Certificate serial: 01856EF0050ED578AADDECAFB8984838D9F9
Authority key identifier: E2:B9:66:F1:C1:8B:8E:F7:8B:0C:3B:DB:C4:DD:47:F6:74:0B:0A:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rlm8cGLjveLDDvbxN1H9nQLCh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f3476e-9f86-4d2c-9c75-d68898b9a129/1/c2UPvE2hYMje-JPmMQ2HKui2htk.roa
Signing time: Sun 01 Jan 2023 20:05:01 +0000
ROA not before: Sun 01 Jan 2023 20:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212315
IP address blocks: 185.198.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f0:05:0e:d5:78:aa:dd:ec:af:b8:98:48:38:d9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b966f1c18b8ef78b0c3bdbc4dd47f6740b0a1e
Validity
Not Before: Jan 1 20:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73650fbc4da160c8def893e6310d872ae8b686d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:55:a4:fc:76:2e:c4:00:db:62:f6:dc:95:e1:
fc:9d:db:a9:87:2e:19:2d:6f:9e:af:ef:2e:83:ba:
74:56:8d:8a:10:da:82:a6:fb:d2:35:95:92:65:27:
aa:23:70:6f:9b:b4:e0:48:07:d0:5a:73:79:27:51:
9e:18:3d:1e:15:e1:e5:17:96:37:81:fb:89:89:f1:
0b:60:b9:81:80:a8:f1:ac:70:8c:85:88:00:86:23:
7f:22:3a:91:8b:cf:59:54:87:98:a1:53:29:82:22:
e4:09:f8:98:c1:a9:32:0b:4b:d1:26:1a:ab:d9:17:
25:4f:af:4a:28:36:43:4d:9a:e1:15:13:3e:e2:91:
1c:46:62:d1:1f:70:7a:4c:d2:03:64:43:4f:34:80:
4a:49:6b:cb:7f:5a:8d:4b:33:e1:8b:cb:43:d3:cc:
5f:73:8d:c1:c3:2c:9c:20:d7:53:14:6f:32:1e:95:
f0:29:20:95:74:7c:ed:ad:62:49:92:f0:d4:3a:6b:
33:19:7a:7d:59:fb:2b:d1:d3:66:cf:13:68:96:ba:
f5:08:45:e7:e6:58:b5:63:0c:72:e5:ce:38:a4:99:
fa:68:de:f0:65:c5:1b:f9:13:13:f1:e9:d7:c3:76:
b6:b4:f2:d8:98:dc:bb:7b:d6:c5:a0:b0:19:33:5b:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:65:0F:BC:4D:A1:60:C8:DE:F8:93:E6:31:0D:87:2A:E8:B6:86:D9
X509v3 Authority Key Identifier:
keyid:E2:B9:66:F1:C1:8B:8E:F7:8B:0C:3B:DB:C4:DD:47:F6:74:0B:0A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rlm8cGLjveLDDvbxN1H9nQLCh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f3476e-9f86-4d2c-9c75-d68898b9a129/1/c2UPvE2hYMje-JPmMQ2HKui2htk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f3476e-9f86-4d2c-9c75-d68898b9a129/1/4rlm8cGLjveLDDvbxN1H9nQLCh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.15.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:4a:1a:33:88:a3:61:20:62:5e:28:2c:02:c4:44:29:7a:4b:
eb:34:44:a1:2f:98:08:eb:2f:55:6d:a7:69:9f:1f:3f:91:23:
33:29:ce:43:0c:0a:da:1c:dc:06:f8:5e:f0:cc:37:b7:08:10:
77:61:2c:b0:e1:b0:1c:e5:18:a0:82:58:e3:80:ca:7b:80:58:
cd:db:27:41:10:6a:d4:f8:05:0e:76:fc:0e:0a:f9:ea:d5:58:
64:a7:d6:f0:de:56:85:8c:d4:12:d1:fa:51:43:64:f9:7e:8e:
18:b1:d8:9a:c2:78:0d:89:eb:1c:2c:bb:ba:12:06:fc:64:c4:
39:4a:2b:01:30:2c:24:89:e3:d7:a0:00:b8:f3:61:e9:17:74:
32:6e:05:c4:04:91:22:71:0b:30:e2:7c:ec:b6:25:ea:4a:96:
5c:81:07:3e:69:3e:5a:f3:a5:e3:e9:a2:bd:f8:13:96:a5:21:
d3:e5:54:3b:d1:03:71:49:3c:43:7d:26:05:cb:f1:5e:6f:ea:
b4:1d:c1:f1:92:65:66:9b:a5:cb:84:ec:7e:76:72:be:24:cb:
3e:f5:2c:c1:0a:7c:54:7a:ac:d8:93:bd:35:61:81:8f:90:e6:
6e:0b:78:38:8f:0b:2f:13:2c:47:ea:34:65:0b:47:e1:2b:ea:
50:34:29:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:23:58 2025 by rpki-client