Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/UNP1e93e1Ez_zK47a6o3qwUI2vI.roa
File: UNP1e93e1Ez_zK47a6o3qwUI2vI.roa (raw, json)
Hash identifier: tw5392ws8uh7kKEVwAT455gYPFzQ+aRyyU8mjz8GNC0=
Subject key identifier: 50:D3:F5:7B:DD:DE:D4:4C:FF:CC:AE:3B:6B:AA:37:AB:05:08:DA:F2
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 019422FC1204857B8BCEB34A0E2653EA9336
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/UNP1e93e1Ez_zK47a6o3qwUI2vI.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16347
IP address blocks: 185.14.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:12:04:85:7b:8b:ce:b3:4a:0e:26:53:ea:93:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50d3f57bddded44cffccae3b6baa37ab0508daf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:80:83:f5:dc:11:98:ff:ef:77:07:22:2d:ff:
72:6f:51:57:7a:4c:22:b6:17:b1:91:57:94:03:6b:
3a:03:3b:8a:96:54:b5:90:8a:7b:60:48:4a:7c:36:
90:77:13:11:78:2c:5c:ef:61:cd:5a:a5:69:81:98:
88:de:0e:2a:45:4d:47:03:69:af:bc:4c:e4:02:68:
40:bb:7b:77:f1:81:3d:60:cd:aa:7e:d7:f3:9d:7e:
52:f5:5f:45:6a:fb:a5:ab:0e:5d:35:1c:69:06:1b:
ee:fc:e0:f4:9a:cf:e9:49:c4:32:fb:c0:14:57:83:
63:27:1f:ed:4a:86:48:d8:76:80:7e:d8:c1:bf:f0:
04:b9:68:d0:26:22:71:90:fd:bc:8c:5c:a2:dd:fb:
f4:91:34:c4:a7:72:84:5d:bc:b8:f9:4a:53:1e:b1:
5a:91:22:c6:be:00:1b:bd:69:fd:30:b1:28:65:1a:
06:c2:fa:5e:cb:99:e6:9b:9d:be:e9:44:bf:cd:74:
3d:67:d0:3c:4d:74:24:fe:a9:63:fe:bf:6b:ae:4c:
44:73:f5:ec:6d:ab:9f:6f:82:36:bf:cf:7a:a7:f7:
d0:09:3e:90:b9:d0:e9:e4:27:28:df:e2:05:7d:83:
7b:55:9c:2e:62:42:74:49:b2:c5:d6:c8:f9:aa:f8:
c7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D3:F5:7B:DD:DE:D4:4C:FF:CC:AE:3B:6B:AA:37:AB:05:08:DA:F2
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/UNP1e93e1Ez_zK47a6o3qwUI2vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.179.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:04:23:cf:b8:2e:6c:aa:52:62:45:7c:56:ff:b1:68:d5:0a:
cd:e0:b1:5c:3d:93:fb:58:12:09:33:5b:41:85:d9:b8:c7:94:
a8:cf:ce:f6:8c:6b:e3:db:c2:35:d3:28:80:01:38:d7:e8:25:
05:4f:e6:4f:1c:6f:f7:63:74:f6:ba:5b:34:ce:8e:a9:09:0b:
de:66:42:ed:cc:81:0c:71:00:63:18:e0:69:46:93:18:e2:ed:
d2:3c:e4:e0:88:6f:09:ec:4d:66:ad:18:ff:b3:71:d2:5e:de:
6a:e3:f8:c0:c8:07:8d:06:9a:b1:2b:8b:47:d1:d6:21:de:bc:
5c:18:c6:6a:7a:80:9c:60:55:86:10:eb:68:f7:de:12:3c:bc:
8a:48:de:53:9a:35:3d:de:39:45:63:e1:a0:a0:58:a5:5e:ff:
55:2b:14:51:76:ed:a0:f5:e6:6a:ab:ca:8d:bc:bf:37:34:52:
33:8f:07:84:07:89:97:0a:59:bc:37:6d:ab:e8:7f:bd:6e:78:
72:61:04:5f:e1:4c:77:ae:fe:7f:d4:08:72:70:ea:ea:d1:4f:
8e:31:ac:e9:f4:d2:9c:ba:9a:25:b5:ab:5b:37:ef:3d:4a:7f:
14:8c:47:fa:5a:f6:39:94:d2:a5:86:96:ae:1c:2d:30:ac:68:
69:53:c3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:26:54 2025 by rpki-client