Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/z6m9WxpDgDoLf4lFQ6-3riSMGBo.roa
File: z6m9WxpDgDoLf4lFQ6-3riSMGBo.roa (raw, json)
Hash identifier: DdTxEazjHwj9S4/2pF5uXHejE6sdQfki7PScehxeU80=
Subject key identifier: CF:A9:BD:5B:1A:43:80:3A:0B:7F:89:45:43:AF:B7:AE:24:8C:18:1A
Certificate issuer: /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial: 0194266AF9D621558A3D7EC35EC7C2BCEE5A
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/z6m9WxpDgDoLf4lFQ6-3riSMGBo.roa
Signing time: Thu 02 Jan 2025 09:48:52 +0000
ROA not before: Thu 02 Jan 2025 09:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 185.101.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:f9:d6:21:55:8a:3d:7e:c3:5e:c7:c2:bc:ee:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
Validity
Not Before: Jan 2 09:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfa9bd5b1a43803a0b7f894543afb7ae248c181a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:88:09:f7:01:b9:5d:00:c1:5e:7f:c3:71:
1a:ab:e4:6d:2b:42:1e:1d:f6:53:25:e9:7a:c4:3e:
21:30:8e:a2:33:9a:46:bb:92:e1:ae:30:5f:02:34:
24:e0:48:53:c3:39:33:0b:cc:18:96:6c:46:aa:4d:
ad:77:ed:ed:c7:08:41:7a:59:26:c1:be:ad:d6:27:
42:ea:95:0f:05:7a:c8:55:78:6c:ce:17:cd:96:87:
42:f1:68:3c:09:71:0f:65:2e:f5:ca:77:12:18:87:
93:fd:9d:44:85:6d:e5:da:5d:7f:41:4d:a6:34:b7:
1c:1c:97:11:e6:f9:1f:a5:2a:ad:8d:45:52:05:8a:
5e:b6:c2:c0:d6:f0:3c:a4:ad:17:9e:73:10:63:11:
06:d9:3b:cb:77:8b:c0:ac:29:00:26:f1:ce:82:d5:
31:86:b2:09:a6:86:ed:ab:17:17:3d:ff:a2:5d:c3:
ef:39:a3:22:65:68:fa:d5:a9:9d:89:4f:26:57:91:
9c:37:e1:59:f3:aa:f6:ea:bf:53:a4:dd:a7:f1:81:
9c:62:39:ae:24:cb:0a:be:90:5c:2e:42:75:41:46:
eb:f2:57:da:74:ec:3e:c3:52:d9:19:7f:e4:37:0e:
fe:23:f9:35:a3:0e:e3:3f:a0:3f:fa:7a:ad:9e:1e:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A9:BD:5B:1A:43:80:3A:0B:7F:89:45:43:AF:B7:AE:24:8C:18:1A
X509v3 Authority Key Identifier:
keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/z6m9WxpDgDoLf4lFQ6-3riSMGBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.14.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c4:ce:e4:f5:3e:54:ca:0f:60:64:e7:22:4d:1a:64:9f:a3:
83:83:95:83:53:7e:c9:2a:eb:d4:a7:1a:99:b3:5d:9b:80:90:
ee:4d:0d:53:1f:e3:48:b7:98:2f:6f:23:bc:b6:2b:78:b8:8f:
c7:68:7f:8d:7a:2a:6b:6c:73:00:8c:cd:9b:a0:a6:a2:24:9b:
0c:96:ed:78:7a:ec:39:3c:dd:91:ac:83:56:3e:8d:c7:46:1c:
b2:6e:5b:fd:04:6d:11:ab:78:9e:28:ad:5c:09:34:3c:de:21:
82:04:4f:78:ca:52:c8:e9:a4:93:bc:d1:a2:42:5b:dc:91:c3:
6d:e5:13:1e:6c:a4:61:25:d0:17:08:d2:81:30:97:46:ab:fe:
8e:e8:19:76:15:04:fc:ca:7b:91:90:5a:32:d7:75:8b:5a:47:
d5:93:45:73:eb:57:12:5b:10:35:4e:61:17:82:a5:19:54:bf:
56:9f:50:b9:2d:17:7a:10:92:25:96:19:7a:46:32:69:67:ca:
56:eb:86:16:20:f0:65:dc:15:7e:b7:50:f9:bc:69:00:76:d5:
a8:b4:35:98:d8:cd:6c:b1:4c:c1:d9:52:66:06:e4:0d:81:a5:
12:56:d3:4a:41:51:a8:e6:3b:92:0a:55:fd:9c:2c:4c:c1:be:
6d:f1:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:15 2025 by rpki-client