Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/AA9TTBVuFWslCy5vvjpWPMn0jio.roa
File: AA9TTBVuFWslCy5vvjpWPMn0jio.roa (raw, json)
Hash identifier: 4UWYCe5hkyOUoqYXrj1KodMiu0qNyY7mLnSAc6dVCQ0=
Subject key identifier: 00:0F:53:4C:15:6E:15:6B:25:0B:2E:6F:BE:3A:56:3C:C9:F4:8E:2A
Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial: 0194228D39EAEA9EFEE667AAFD6E534E470E
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/AA9TTBVuFWslCy5vvjpWPMn0jio.roa
Signing time: Wed 01 Jan 2025 15:47:48 +0000
ROA not before: Wed 01 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.13.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:39:ea:ea:9e:fe:e6:67:aa:fd:6e:53:4e:47:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Validity
Not Before: Jan 1 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=000f534c156e156b250b2e6fbe3a563cc9f48e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:27:f6:97:63:6d:db:81:84:39:45:8f:48:75:
d7:39:db:68:e1:70:be:20:e1:22:98:e7:34:53:04:
10:62:a5:76:20:b2:ff:15:90:b9:15:1d:32:9a:d1:
f2:c2:2a:3d:df:07:0e:76:dc:9f:70:01:2d:aa:9e:
a0:e9:0b:bc:a3:f4:3b:20:75:77:05:0b:f3:93:ed:
21:71:63:46:58:cf:40:b3:de:85:57:dd:e0:1b:76:
51:2d:2e:44:51:d3:19:f1:ba:bb:f0:c0:9c:db:97:
16:6e:c7:1a:b5:95:bc:96:55:06:22:d3:eb:e8:76:
ed:ab:6a:da:9c:63:b5:2a:55:b1:d6:66:25:4b:0f:
d4:d1:17:fc:7b:9a:03:ea:9a:88:26:02:a1:c8:b5:
20:02:c1:b3:1f:0d:bc:81:70:aa:10:07:2e:10:5c:
06:f8:3a:05:26:e8:15:55:f5:5d:44:46:96:c6:ed:
f4:4e:05:dd:b3:4e:29:eb:08:52:85:92:79:9f:e5:
07:78:21:3d:3b:78:6e:e4:88:93:be:a1:69:fe:97:
c0:a2:4e:89:2a:15:f6:11:4a:78:66:18:ad:ee:69:
59:a9:22:a1:78:a4:bd:b7:e8:80:80:8a:75:29:2d:
c4:83:62:5d:81:c2:68:72:96:03:dc:a0:99:a3:67:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0F:53:4C:15:6E:15:6B:25:0B:2E:6F:BE:3A:56:3C:C9:F4:8E:2A
X509v3 Authority Key Identifier:
keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/AA9TTBVuFWslCy5vvjpWPMn0jio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.14.0/24
Signature Algorithm: sha256WithRSAEncryption
67:24:81:50:6a:5a:56:04:32:32:88:4d:02:9b:85:38:dc:5f:
94:66:f1:5c:94:6e:97:eb:ab:99:57:40:50:af:3c:81:70:4a:
43:fe:8a:f1:a0:e7:fa:79:35:08:b6:fb:3c:dd:a2:f4:bf:f4:
85:4e:39:66:03:d5:44:ba:77:2f:23:40:2d:9b:61:72:aa:8c:
ad:9b:ca:3a:51:2e:89:fe:09:80:c1:9f:18:08:12:d0:76:64:
fb:2e:f7:2e:ef:9a:77:39:a6:74:1c:4b:81:f0:c2:90:78:6e:
e0:a4:e0:04:0f:be:45:39:ef:a8:84:9f:82:c2:28:65:a0:f8:
aa:b3:42:29:44:31:3b:5e:33:e3:ca:81:b3:ca:a6:f4:ef:57:
27:f6:9c:04:0f:c9:1f:d1:3c:5d:31:84:2d:bf:0d:ca:c4:0f:
28:59:0f:c2:f3:42:69:05:53:82:f4:f4:f3:e5:18:4f:98:92:
fa:c7:46:fd:6e:d4:23:02:2a:25:dd:18:52:df:d9:e1:7b:6f:
d5:6c:65:d8:3e:92:65:50:42:dd:cd:8b:5d:24:78:e8:2f:2d:
49:4d:65:7b:08:42:93:92:50:b7:eb:f6:53:5d:62:77:56:b2:
c9:62:c7:09:c3:87:6b:46:b9:39:26:a1:cf:ee:61:71:41:6c:
c2:9a:13:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:32 2025 by rpki-client