Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/f1fNFkBRt-hhuPfzrsFbbzHHoAw.roa
File: f1fNFkBRt-hhuPfzrsFbbzHHoAw.roa (raw, json)
Hash identifier: TUaEgYF8HOYQXV5OcuKeh9gLJYrnrHID59aFsya07FY=
Subject key identifier: 7F:57:CD:16:40:51:B7:E8:61:B8:F7:F3:AE:C1:5B:6F:31:C7:A0:0C
Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Certificate serial: 0194228D393E7D05EE6A288EF83EBA682312
Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/f1fNFkBRt-hhuPfzrsFbbzHHoAw.roa
Signing time: Wed 01 Jan 2025 15:47:48 +0000
ROA not before: Wed 01 Jan 2025 15:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 185.13.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:39:3e:7d:05:ee:6a:28:8e:f8:3e:ba:68:23:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0
Validity
Not Before: Jan 1 15:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f57cd164051b7e861b8f7f3aec15b6f31c7a00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:a6:4e:74:27:3d:f8:1a:43:21:70:38:05:
02:f6:c4:d9:0e:7f:4b:11:ae:8c:61:25:09:29:a5:
3a:80:d8:c5:e5:f1:64:1d:b9:e5:a3:25:e9:59:d7:
7e:b2:ea:51:58:85:d9:b4:4a:76:4b:1e:21:c2:b8:
03:74:c8:d6:47:5b:e0:3f:d6:ea:81:92:0a:da:65:
20:87:63:38:c5:f5:4f:e8:36:8d:de:97:30:d4:93:
e3:96:5f:3e:a5:99:63:83:36:76:66:8c:30:a6:cc:
5d:42:8e:d8:b2:76:f9:47:60:8f:a0:15:c0:8d:4a:
dd:e1:6f:f6:df:8d:b2:4d:2e:8b:2b:71:a4:da:74:
02:22:ff:61:8a:95:86:98:09:7d:a9:30:24:e5:5e:
3e:97:75:2a:c8:1f:9f:b7:17:84:e3:2a:4c:a9:80:
36:4c:8f:19:ff:f3:48:36:05:2a:a4:0d:5e:85:fd:
a4:46:3b:c9:d5:e3:b8:9b:c2:f6:22:22:03:fd:ca:
e1:3a:09:ad:d6:21:96:ea:af:6e:5d:87:44:d1:de:
eb:ea:f2:a6:50:36:32:87:e4:18:1b:6f:c1:43:42:
9c:7b:cc:51:ae:f8:da:a7:3c:10:9b:2a:8d:0c:df:
4b:7f:aa:86:c8:aa:2b:4d:db:d8:a6:25:63:cf:a6:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:57:CD:16:40:51:B7:E8:61:B8:F7:F3:AE:C1:5B:6F:31:C7:A0:0C
X509v3 Authority Key Identifier:
keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/f1fNFkBRt-hhuPfzrsFbbzHHoAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.14.0/24
Signature Algorithm: sha256WithRSAEncryption
65:2e:e4:49:b4:ab:03:d7:e8:72:30:32:b2:60:07:b8:a9:6a:
bd:01:32:67:a3:de:bc:23:db:de:fc:86:d8:16:37:62:f3:43:
c2:c0:07:17:69:09:a1:9e:8b:53:42:e9:72:98:f0:d6:05:6e:
8c:f3:ed:97:79:5a:f3:3a:24:dc:25:45:58:75:f3:51:93:5d:
63:b8:38:20:54:33:1c:a3:61:31:24:d2:31:2e:53:36:42:80:
69:02:01:12:d4:1c:c7:d8:4a:48:76:94:84:a8:e7:e0:b1:b2:
38:b3:fc:0e:97:ca:de:00:5b:11:81:ec:e0:d3:aa:c9:a8:82:
db:07:76:43:6e:09:4a:2d:37:09:ab:31:5a:39:19:e5:a8:d8:
74:23:ae:3c:ac:35:61:dd:ed:85:99:f4:29:2b:0a:e4:2c:ca:
00:4c:96:87:d5:64:3b:ea:c9:24:e9:f6:cd:ca:bb:55:f4:df:
f7:42:9f:4a:a4:7d:38:93:00:4c:93:7b:ad:3e:33:cb:33:c5:
a9:1c:04:69:65:be:8a:ea:0d:59:39:2e:29:0a:fa:c0:b1:a9:
e9:48:83:86:9e:d6:67:9b:10:79:fa:d8:3e:78:04:09:cf:30:
f5:b5:5e:7c:61:85:a0:18:cf:c4:47:82:bc:17:a5:43:2d:74:
ee:63:11:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:22:33 2025 by rpki-client