Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/kyAzjnv0nUH25AOinhIVzLY6P7c.roa
File: kyAzjnv0nUH25AOinhIVzLY6P7c.roa (raw, json)
Hash identifier: SQiPtkZG6xmYTm9x2csmKQ6IrIn57WCQkamimZAGJLQ=
Subject key identifier: 93:20:33:8E:7B:F4:9D:41:F6:E4:03:A2:9E:12:15:CC:B6:3A:3F:B7
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA3DE826BD48BADFCE598A4559DD60
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/kyAzjnv0nUH25AOinhIVzLY6P7c.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215389
IP address blocks: 185.14.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3d:e8:26:bd:48:ba:df:ce:59:8a:45:59:dd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9320338e7bf49d41f6e403a29e1215ccb63a3fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:30:6d:12:63:c4:8a:69:57:18:e9:9b:25:
5c:d4:87:6d:cb:76:52:58:0e:dc:46:e3:d7:ae:bd:
d8:22:6b:22:2f:99:df:22:67:3a:ee:5d:e7:0e:45:
1a:2b:10:9b:e5:6f:b9:db:e2:50:6f:f7:1f:dd:a6:
1e:45:e1:71:91:8d:7d:bf:f8:47:eb:92:3d:7c:b2:
1f:cc:be:8c:b8:5f:1f:7b:a5:2b:40:7f:3e:e8:78:
33:2f:40:ee:c9:aa:f6:b3:55:94:4f:a2:0d:c2:d3:
fd:1c:da:9c:3f:47:8d:a8:25:7f:73:5d:32:29:6e:
36:7d:90:f4:20:7b:6e:99:67:18:b0:cd:78:b3:c3:
30:f4:16:68:8f:17:02:04:ee:33:42:a1:58:1a:b3:
bb:a5:ff:9d:92:6b:16:f6:4c:7f:5f:8e:44:dc:14:
88:2f:3e:63:9c:01:3d:96:37:53:54:bb:9e:3b:07:
ee:aa:be:fe:d4:95:af:bd:70:76:d8:2f:9e:a3:16:
9c:c3:e1:9c:a5:1a:7c:59:86:89:8b:34:b5:dd:81:
76:0e:0b:3c:96:a2:f7:fa:09:e9:75:6f:5d:80:a6:
91:d3:33:74:c4:0b:dc:af:10:2c:d2:d5:37:14:1a:
65:a4:d3:02:fb:dc:29:9a:e3:17:92:3d:d5:af:3b:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:20:33:8E:7B:F4:9D:41:F6:E4:03:A2:9E:12:15:CC:B6:3A:3F:B7
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/kyAzjnv0nUH25AOinhIVzLY6P7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.94.0/24
Signature Algorithm: sha256WithRSAEncryption
48:1f:75:63:2d:fe:68:e3:63:7d:f8:46:5c:1b:b9:c8:3c:02:
d7:69:6a:04:47:86:0b:68:eb:b5:fa:6c:ee:2a:00:2a:a0:91:
71:41:f4:67:04:3b:fb:7e:0d:ce:13:a4:d3:af:d5:33:ab:3c:
68:00:bc:be:22:82:7b:64:a9:a2:bb:47:6e:a1:a5:e8:60:92:
21:73:a2:f3:12:de:a5:6e:19:f7:73:d4:2c:7f:be:20:2b:a9:
9a:b2:46:32:f7:2e:d4:8f:0e:55:66:b0:ea:6f:69:59:2a:24:
30:2f:37:a1:fe:53:f6:71:bb:a0:08:36:69:30:32:d3:d1:e1:
f1:89:f8:d7:39:47:ef:b4:a7:6e:5e:f5:54:b9:06:4d:d4:e8:
60:7a:c4:20:0a:c3:76:d0:cc:3a:7e:d8:78:50:61:65:72:5a:
7e:51:56:12:35:16:ad:69:47:ac:95:76:2f:47:7c:c0:97:db:
4b:97:94:ca:f9:b3:07:17:6d:89:30:b7:2e:7f:f9:ef:08:1c:
33:e7:a5:2f:03:ea:4f:83:ac:8a:f4:f6:0f:a7:86:23:c2:02:
47:dc:fc:a5:1e:3a:fd:82:1d:42:cd:ae:6a:6d:6e:0e:65:f9:
4d:3f:c2:b5:8b:28:67:f9:1b:8c:59:c4:bc:31:23:c1:88:f0:
94:9a:11:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:29:48 2025 by rpki-client