Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/sQ3JYG1qE-VbpJkkUv7gjERWISw.roa
File: sQ3JYG1qE-VbpJkkUv7gjERWISw.roa (raw, json)
Hash identifier: Eu9amXI9PIYJvHJFlrP4Ds55UyoCv7usyPM4xlXYBx0=
Subject key identifier: B1:0D:C9:60:6D:6A:13:E5:5B:A4:99:24:52:FE:E0:8C:44:56:21:2C
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 019425FD708712F89A10C729CDD73600CA3B
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/sQ3JYG1qE-VbpJkkUv7gjERWISw.roa
Signing time: Thu 02 Jan 2025 07:49:13 +0000
ROA not before: Thu 02 Jan 2025 07:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199562
IP address blocks: 185.207.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:70:87:12:f8:9a:10:c7:29:cd:d7:36:00:ca:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Jan 2 07:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b10dc9606d6a13e55ba4992452fee08c4456212c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:3b:c0:e8:00:78:aa:25:8f:fd:14:8f:00:
42:2c:e6:f5:8d:ad:84:3b:f7:fe:6c:28:9e:0c:d8:
0c:0e:c5:53:9a:2a:92:b6:61:6d:3e:51:00:6e:19:
6d:a1:86:00:35:0e:b8:8d:ec:66:0c:b6:bf:bd:78:
f8:65:1e:d2:50:59:03:f2:d9:01:77:f7:5e:df:d3:
f4:cb:fe:b5:f7:ba:d5:13:1e:c3:8e:01:d8:51:d0:
37:b8:63:f6:c5:b1:1a:7c:9e:42:fa:e2:13:8a:91:
0c:35:f1:24:84:9c:50:69:91:2e:39:30:09:19:8a:
e0:f4:1d:29:8e:9b:8d:ac:51:cb:1b:61:5d:e0:8e:
c2:90:30:27:ac:2c:73:d9:18:d9:66:ff:cd:28:db:
a3:8c:76:c7:df:98:92:2d:c6:cd:c7:56:e2:ed:89:
10:b8:d3:90:9b:9f:b7:72:ef:b6:9b:c3:e4:cb:92:
06:11:16:30:b4:d5:ce:04:40:ff:ab:54:b0:81:10:
05:1c:cf:97:98:49:ae:54:97:fe:c7:79:30:7e:40:
7a:42:60:5a:7d:c6:87:cf:ea:fd:2f:bc:63:1e:34:
33:c9:8e:1f:f1:a6:28:48:0b:35:fa:e1:41:45:9e:
31:1b:c2:69:2a:d0:a1:9c:3e:5b:b4:d9:b2:65:aa:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0D:C9:60:6D:6A:13:E5:5B:A4:99:24:52:FE:E0:8C:44:56:21:2C
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/sQ3JYG1qE-VbpJkkUv7gjERWISw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.215.0/24
Signature Algorithm: sha256WithRSAEncryption
09:99:b9:5e:ed:e0:e9:23:f8:f4:78:8a:16:00:3e:50:4c:78:
a8:29:59:b0:18:58:9f:fd:34:5a:36:95:10:a4:26:08:8f:41:
03:06:51:62:43:44:64:ac:60:9a:a9:e1:64:4f:24:d0:36:c1:
12:7c:ea:81:28:96:c1:b4:ba:c7:6b:3e:cb:d5:0b:5f:88:af:
ea:b4:2c:27:ac:18:fa:22:4c:f2:3d:f5:b6:67:35:cb:d1:95:
66:88:1a:27:b8:1f:d9:e4:84:1c:b7:83:4e:0d:9c:2c:01:d7:
6a:30:e1:02:ff:b4:0d:66:f3:28:aa:0c:dc:ad:42:44:1f:e6:
93:a3:5d:3a:37:32:dd:19:3c:b0:25:ae:88:32:a1:c9:a6:ad:
8b:48:c0:7a:fa:64:f6:7a:dd:11:28:57:7b:b6:f8:d2:86:ac:
d4:c0:c7:c7:d9:af:01:df:6d:92:8d:71:4f:c9:70:8f:f2:0d:
06:56:2d:04:c2:16:83:72:ea:62:c7:6f:45:8d:12:b2:de:0a:
f7:e7:16:f3:a1:b0:11:a5:24:e6:4b:a5:a7:98:1d:33:70:ca:
c8:bc:39:75:a0:73:ba:15:65:c3:8d:65:3d:8f:76:f3:6e:d2:
17:dc:00:8f:af:46:53:cb:f7:98:b9:fd:c3:e8:fc:37:50:50:
47:4c:ca:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:06:29 2025 by rpki-client