Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Jf79I31rpbTO5W9IPaX7rIB_nKQ.roa
File: Jf79I31rpbTO5W9IPaX7rIB_nKQ.roa (raw, json)
Hash identifier: v37HfVcSPPGTt9P/qQorvZQf7f7Dq5xgbuMnSpO2rw0=
Subject key identifier: 25:FE:FD:23:7D:6B:A5:B4:CE:E5:6F:48:3D:A5:FB:AC:80:7F:9C:A4
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01941F8C4AFB15A24E14B84ECF0354F1028A
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Jf79I31rpbTO5W9IPaX7rIB_nKQ.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56466
IP address blocks: 185.155.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4a:fb:15:a2:4e:14:b8:4e:cf:03:54:f1:02:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25fefd237d6ba5b4cee56f483da5fbac807f9ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:ef:0d:a1:d9:ab:1e:77:22:d9:12:6c:58:
c8:a7:b7:1e:55:9d:79:af:21:3c:44:d2:ac:0b:c7:
d8:df:9e:31:b8:40:5d:5b:88:46:99:96:8a:2d:1e:
dc:af:1c:38:94:cd:eb:96:8b:84:f3:eb:d8:78:ac:
67:13:82:d6:38:86:f8:79:42:fb:a4:59:bd:5f:a9:
1c:09:db:d1:01:c3:0c:19:ed:86:5a:df:38:3a:67:
f3:64:89:75:81:7c:e3:ad:36:a7:f4:73:b3:a0:39:
1b:3e:4d:58:9d:e5:63:09:78:14:3f:32:93:44:89:
f3:e7:7f:1f:6b:29:4f:3c:a8:7b:2f:73:15:f8:24:
32:b7:cc:ef:b8:f0:30:47:1d:30:2a:7d:53:bc:08:
82:3a:22:fd:5a:40:be:62:4b:b4:17:d3:5d:36:73:
24:5c:2f:e2:b1:19:17:8b:17:58:6f:6d:80:b4:6d:
cf:77:70:36:88:01:52:ac:a6:c7:ef:62:5a:00:5d:
b4:b6:0c:f6:92:40:56:d4:0c:96:5a:3c:22:c8:c4:
ab:e0:a4:23:ed:79:bb:57:7c:4d:f9:0a:c2:23:43:
97:57:b9:e0:61:b8:59:a2:78:22:98:cf:f0:cf:63:
2f:55:09:27:fa:75:f5:8f:d2:bb:bb:dc:df:7b:1d:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FE:FD:23:7D:6B:A5:B4:CE:E5:6F:48:3D:A5:FB:AC:80:7F:9C:A4
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Jf79I31rpbTO5W9IPaX7rIB_nKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:a4:9f:b2:d9:db:2a:b7:d5:73:f7:fd:d0:c2:97:00:f4:cd:
13:60:32:00:ea:18:8d:a9:8c:0c:4b:18:6b:c9:85:0c:3d:65:
60:33:2e:a5:0b:97:dc:c4:88:5f:3c:c1:89:89:51:5b:d3:00:
18:e7:ac:cf:a1:ab:aa:3d:cc:48:b1:6a:1b:a2:5f:b3:38:aa:
89:3e:4f:29:8f:b3:05:d2:12:4c:66:30:09:54:32:cb:71:40:
ee:08:6d:d4:98:f5:22:1f:09:43:8d:e3:45:e8:cd:a8:08:1f:
0b:b9:7a:c1:77:3c:ac:0b:e2:bd:de:71:d2:eb:33:45:2b:ee:
a2:ff:74:52:0c:9c:50:53:bf:2a:95:df:9e:ba:d8:9e:d0:a6:
51:0f:b3:d4:1f:40:91:69:09:44:58:47:e5:c4:27:7e:44:57:
3d:1c:66:44:f2:4e:17:1f:6e:75:19:6d:9c:b0:2c:20:21:d3:
c4:a9:2f:e5:86:29:f5:30:08:f7:bc:10:71:2b:9b:34:59:3d:
97:28:b4:50:c3:6d:9d:98:a5:a9:e5:0b:04:2f:32:cc:d2:97:
38:97:c0:98:d2:6a:c0:05:a2:3e:e3:d7:96:20:b4:80:f5:48:
cb:cc:e2:d2:9e:bd:fc:0a:44:fa:51:64:2f:0d:df:2e:6f:f8:
e0:7c:7b:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjEr7FaJOFLhOzwNU8QKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1
OTVlYmEwHhcNMjUwMTAxMDE0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWZlZmQyMzdkNmJhNWI0Y2VlNTZmNDgzZGE1ZmJhYzgwN2Y5Y2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQfvDaHZqx53ItkSbFjIp7ceVZ15
ryE8RNKsC8fY354xuEBdW4hGmZaKLR7crxw4lM3rlouE8+vYeKxnE4LWOIb4eUL7
pFm9X6kcCdvRAcMMGe2GWt84OmfzZIl1gXzjrTan9HOzoDkbPk1YneVjCXgUPzKT
RInz538faylPPKh7L3MV+CQyt8zvuPAwRx0wKn1TvAiCOiL9WkC+Yku0F9NdNnMk
XC/isRkXixdYb22AtG3Pd3A2iAFSrKbH72JaAF20tgz2kkBW1AyWWjwiyMSr4KQj
7Xm7V3xN+QrCI0OXV7ngYbhZongimM/wz2MvVQkn+nX1j9K7u9zfex3zmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCX+/SN9a6W0zuVvSD2l+6yAf5ykMB8GA1UdIwQY
MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt
MTA5ODJlMDQwZDUzLzEvSmY3OUkzMXJwYlRPNVc5SVBhWDdySUJfbktRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz
LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZsJMA0G
CSqGSIb3DQEBCwUAA4IBAQCipJ+y2dsqt9Vz9/3QwpcA9M0TYDIA6hiNqYwMSxhr
yYUMPWVgMy6lC5fcxIhfPMGJiVFb0wAY56zPoauqPcxIsWobol+zOKqJPk8pj7MF
0hJMZjAJVDLLcUDuCG3UmPUiHwlDjeNF6M2oCB8LuXrBdzysC+K93nHS6zNFK+6i
/3RSDJxQU78qld+eutie0KZRD7PUH0CRaQlEWEflxCd+RFc9HGZE8k4XH251GW2c
sCwgIdPEqS/lhin1MAj3vBBxK5s0WT2XKLRQw22dmKWp5QsELzLM0pc4l8CY0mrA
BaI+49eWILSA9UjLzOLSnr38CkT6UWQvDd8ub/jgfHtY
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:21:19 2025 by rpki-client