Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/9-oSECIUs14k5LRaM1ADhm_-MNk.roa
File: 9-oSECIUs14k5LRaM1ADhm_-MNk.roa (raw, json)
Hash identifier: qFMfjJGMnQ6H8kE0ppiefhcJCnI1MhDUKNSTuZfASzs=
Subject key identifier: F7:EA:12:10:22:14:B3:5E:24:E4:B4:5A:33:50:03:86:6F:FE:30:D9
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA91EC0F4DABB25BCDA554AF0FC5E
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/9-oSECIUs14k5LRaM1ADhm_-MNk.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215314
IP address blocks: 185.42.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a9:1e:c0:f4:da:bb:25:bc:da:55:4a:f0:fc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7ea12102214b35e24e4b45a335003866ffe30d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:a5:63:0f:d2:26:91:1d:b4:a2:ca:56:57:
f7:3f:04:fe:a3:86:83:1a:65:49:fb:9e:09:6d:2f:
7a:1d:f2:de:07:38:15:a5:c3:bc:57:10:78:b2:b4:
0f:04:50:5a:d2:87:a8:a6:b1:79:df:23:9f:8f:32:
76:e0:ac:76:44:64:9f:f5:45:12:a4:70:51:9d:9a:
af:58:eb:f2:01:36:f0:1b:e2:c3:fb:c5:6b:a2:a1:
b2:a5:12:8b:60:6c:5d:f2:dd:3d:9b:5a:49:f1:d9:
6d:36:9a:42:b7:7e:4c:60:f2:9d:33:2a:98:c3:12:
e5:57:e5:2f:f6:f1:6d:65:c4:54:98:aa:0a:4a:eb:
8f:39:89:a1:ec:5c:21:e9:44:b1:95:3b:6e:13:00:
58:45:4b:7c:33:41:fe:30:e1:71:91:59:67:27:33:
8e:34:af:83:10:55:99:ec:a3:11:d2:fe:0a:6d:37:
f3:f1:ea:2e:3e:12:9d:92:6c:66:52:03:19:81:96:
03:de:36:40:d0:be:43:60:6c:98:17:97:38:e1:86:
0c:2d:58:f9:9b:d1:89:03:c2:9e:a3:41:43:95:a0:
a3:c8:28:37:44:aa:7d:ad:15:c1:14:1a:78:16:12:
4e:0e:0a:b0:d5:6d:12:2d:47:cd:f7:85:0b:df:c3:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EA:12:10:22:14:B3:5E:24:E4:B4:5A:33:50:03:86:6F:FE:30:D9
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/9-oSECIUs14k5LRaM1ADhm_-MNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f7:54:db:9a:4c:9b:d8:89:7f:f7:6a:6d:33:c8:dc:51:7d:
4b:bb:5a:3b:07:ab:da:30:1c:c4:07:f4:01:12:34:26:57:0b:
35:1c:44:6a:2d:37:18:b5:e3:1a:58:6a:fb:df:75:61:8a:59:
75:e8:70:af:4e:56:7d:85:65:e0:91:91:83:7b:2c:e4:77:5f:
1e:79:96:55:f3:26:ed:d4:6c:6e:a0:fc:4d:76:41:31:e8:0e:
71:ed:37:4c:6c:03:01:17:25:bf:46:8e:5b:29:43:7a:9e:fa:
f7:ee:dc:c8:ed:6b:dc:c2:2b:10:cf:63:3f:2c:3c:6f:3d:a5:
ab:06:56:ae:d4:99:90:3e:dc:4c:46:67:0e:05:44:8c:20:40:
bf:a2:ea:e4:14:0f:93:f7:18:4c:60:71:2d:83:88:d0:40:ab:
f5:70:cb:5a:6e:96:5a:73:90:a7:06:63:c3:df:dd:fe:54:88:
de:9c:e6:5e:88:26:f6:1d:62:72:42:11:a2:09:43:e5:22:70:
1d:ae:f7:9c:7e:c0:8e:ef:bb:3d:3d:48:74:81:33:44:43:bd:
e3:05:1b:73:b9:e7:2a:7a:d2:33:7b:1a:fe:c4:44:44:0f:8a:
da:5e:fe:16:d7:41:8d:ab:43:5e:d9:fa:11:49:4f:ec:74:0d:
ba:c4:e5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:23 2025 by rpki-client