Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/PTvQgS1qnjLwo9s4LdFb_Ohs-14.roa
File: PTvQgS1qnjLwo9s4LdFb_Ohs-14.roa (raw, json)
Hash identifier: ISrdGe09G63GrIhvFHUR6KGbQ/gtnJbbuoeTtm56a1E=
Subject key identifier: 3D:3B:D0:81:2D:6A:9E:32:F0:A3:DB:38:2D:D1:5B:FC:E8:6C:FB:5E
Certificate issuer: /CN=418d54b55b192a248b847234dba512f9760cabfa
Certificate serial: 019422FB0E1EEEBAF753F681058934093BF8
Authority key identifier: 41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/PTvQgS1qnjLwo9s4LdFb_Ohs-14.roa
Signing time: Wed 01 Jan 2025 17:47:45 +0000
ROA not before: Wed 01 Jan 2025 17:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48252
IP address blocks: 185.14.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:0e:1e:ee:ba:f7:53:f6:81:05:89:34:09:3b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418d54b55b192a248b847234dba512f9760cabfa
Validity
Not Before: Jan 1 17:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d3bd0812d6a9e32f0a3db382dd15bfce86cfb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:5d:21:83:4f:a0:11:1c:d5:71:82:02:15:
7f:c2:64:e6:7b:fb:08:cc:e1:bc:5e:3f:f8:33:9a:
75:0a:4c:54:6f:3f:91:8e:71:3a:98:f0:19:23:b4:
37:e2:88:2a:bf:34:45:57:be:00:90:ac:dc:81:16:
2b:96:4b:70:66:0b:7d:35:b5:2f:d6:2a:f8:4a:b3:
c2:aa:22:70:bb:cd:99:68:99:2f:fb:7b:63:4f:eb:
a1:cd:c2:5f:01:4f:4d:fe:94:7b:d3:19:0b:b3:3a:
27:6a:35:b8:eb:88:f3:f9:e7:bf:a1:cf:07:25:86:
54:9f:c4:7a:1a:dd:3c:a1:58:54:aa:32:4e:48:c7:
9f:71:a3:75:25:a9:4b:be:16:ba:4f:c0:00:62:db:
d9:77:98:30:10:3c:a2:65:ee:14:96:48:18:78:ca:
ba:0e:26:d9:85:5d:2b:5d:14:ff:86:b3:b1:4a:c3:
4b:70:83:6f:92:cf:ed:9d:d1:0e:64:5e:35:0e:10:
7c:ea:e1:bb:82:84:51:92:96:a3:fb:a1:47:4a:c0:
00:bb:e6:04:5c:08:e9:ac:6c:2d:18:ae:60:82:a0:
69:21:fc:5d:ae:2a:14:68:63:92:ab:25:e4:03:ab:
53:8c:b5:c2:d4:21:3a:07:23:c4:51:55:3f:da:bc:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3B:D0:81:2D:6A:9E:32:F0:A3:DB:38:2D:D1:5B:FC:E8:6C:FB:5E
X509v3 Authority Key Identifier:
keyid:41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/PTvQgS1qnjLwo9s4LdFb_Ohs-14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.99.0/24
Signature Algorithm: sha256WithRSAEncryption
30:92:e8:04:86:74:69:74:52:13:18:8f:08:91:4e:90:d5:92:
63:87:4b:2d:21:78:76:6d:28:71:37:87:75:9e:6e:49:e5:0f:
3d:59:bc:40:8b:fe:38:27:12:a6:ab:2a:99:2e:29:40:b6:36:
b4:5e:27:3c:bc:40:6d:18:15:db:83:d1:dd:1b:2b:8b:75:0f:
76:92:d0:22:9a:29:1f:e8:44:f2:11:04:72:02:47:40:1a:59:
3d:33:a3:52:02:77:52:57:1e:b3:18:d8:c2:ec:30:dc:cf:33:
4a:e0:8d:a5:04:4f:bd:31:46:f5:ae:c3:16:3f:ef:83:fe:c7:
e1:1b:5f:fe:f4:fb:5f:9c:2c:5e:16:eb:05:0f:63:7e:c1:ec:
4e:64:23:bf:e8:06:68:7b:d5:9f:11:d0:86:1e:5f:bf:92:d4:
8e:0b:4a:36:68:da:18:59:f2:15:5e:e4:20:90:ba:f2:3b:ce:
09:59:b2:5d:12:4a:15:ff:f5:2b:0b:9a:97:10:ec:9a:56:93:
08:e0:35:65:11:28:a7:8d:44:da:87:af:f0:85:43:c4:ef:b1:
61:c5:13:13:91:11:04:de:75:e2:f1:da:79:5e:3c:5a:f1:75:
8f:13:be:4f:58:15:15:75:94:39:f7:bf:dd:18:ba:80:7d:d1:
da:f5:76:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:06 2025 by rpki-client