Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/APnNY0vdtztGGXZGe50Fxj3LvP8.roa
File: APnNY0vdtztGGXZGe50Fxj3LvP8.roa (raw, json)
Hash identifier: P/mQQAOh2H8I2Es96EXQx4jeYdqJRmYXQF7ohEOiZP8=
Subject key identifier: 00:F9:CD:63:4B:DD:B7:3B:46:19:76:46:7B:9D:05:C6:3D:CB:BC:FF
Certificate issuer: /CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Certificate serial: 19097B7C
Authority key identifier: 41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/APnNY0vdtztGGXZGe50Fxj3LvP8.roa
Signing time: Sat 01 Jan 2022 00:56:51 +0000
ROA not before: Sat 01 Jan 2022 00:56:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60621
IP address blocks: 185.14.197.0/24 maxlen: 24
185.14.196.0/24 maxlen: 24
185.14.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420051836 (0x19097b7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413ffa106ae3fee6be87bac06a87ba57ed1c1140
Validity
Not Before: Jan 1 00:56:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00f9cd634bddb73b461976467b9d05c63dcbbcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:15:c8:a8:79:e4:d3:3b:0f:ba:ed:44:0c:0b:
94:28:5d:db:69:9e:bd:ec:59:96:ca:8b:2d:44:7d:
53:a7:be:2a:bb:3e:ea:40:ca:b7:83:98:ac:f4:88:
11:98:b6:1a:ce:1c:fe:89:4a:e5:66:28:e3:b6:e6:
64:1f:b8:7f:4a:da:34:81:89:b5:36:64:85:36:a4:
f6:8c:eb:6d:c5:82:09:45:4c:f5:b5:11:c5:06:97:
9f:67:31:4b:1d:32:e5:b3:af:f4:d0:0b:71:79:6d:
64:5c:57:06:e4:2f:cb:29:0e:b6:e2:61:2b:53:c9:
59:f4:70:5e:7f:d0:52:14:6c:de:a1:f7:23:51:2d:
19:4f:f7:32:57:61:ec:d3:6f:c9:89:f9:af:98:7c:
f0:c3:7a:a7:7b:07:c0:08:41:9f:8d:76:6a:9a:9f:
42:b2:88:d8:2b:d9:0a:24:99:51:a4:21:6a:98:c9:
b6:1a:48:df:1b:29:c0:73:31:8f:ce:10:e1:95:6e:
60:e1:75:3d:87:15:ef:64:cf:92:07:50:10:20:cb:
00:7f:f3:4f:cc:0c:76:dd:2f:b0:aa:22:76:9e:fc:
52:17:27:9a:63:a9:a7:fc:96:ae:18:7a:a8:64:47:
62:bd:3a:ac:27:45:07:19:99:41:64:b4:6b:0c:65:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F9:CD:63:4B:DD:B7:3B:46:19:76:46:7B:9D:05:C6:3D:CB:BC:FF
X509v3 Authority Key Identifier:
keyid:41:3F:FA:10:6A:E3:FE:E6:BE:87:BA:C0:6A:87:BA:57:ED:1C:11:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QT_6EGrj_ua-h7rAaoe6V-0cEUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/APnNY0vdtztGGXZGe50Fxj3LvP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c79635-bec4-4fb5-892c-fa26ec39faba/1/QT_6EGrj_ua-h7rAaoe6V-0cEUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.196.0/22
Signature Algorithm: sha256WithRSAEncryption
73:e7:20:9f:19:ba:fb:40:a5:ff:01:b3:51:64:3c:ae:e6:54:
f0:72:e9:5f:57:9b:2d:08:fc:95:83:1b:23:62:ff:fc:43:a3:
69:d6:bf:f4:5e:b8:a8:be:67:82:c2:bb:7e:53:16:0a:7a:67:
4a:2e:9e:d7:24:3a:cc:b5:93:67:06:65:8b:8f:e5:86:6d:01:
6b:a4:15:6a:da:90:a1:c8:62:65:5c:d9:fc:2d:ff:77:6d:bd:
20:65:c0:0b:1c:82:10:6d:ff:eb:55:8d:20:92:33:36:64:0e:
42:25:ef:19:9b:5b:cf:f3:f4:80:f7:f6:83:8b:1b:94:1e:e2:
ba:7a:54:9f:f7:f1:43:e8:df:15:6a:b1:c4:18:38:44:1d:a2:
ec:6d:f3:ee:28:96:f3:98:fb:72:e2:72:ff:f1:69:50:f4:72:
8e:7d:c6:99:ec:72:da:d5:6b:44:34:fd:40:77:b7:70:d8:f5:
56:a0:98:60:12:38:3d:a1:fc:7f:ad:e7:9b:9a:a8:e9:2a:db:
7e:22:6e:b2:f0:06:6f:56:fa:00:6d:19:a0:10:d2:f2:4e:6e:
e9:93:54:ad:1c:a3:52:ba:39:6e:e8:4c:aa:16:94:1a:29:66:
67:ca:8e:4d:bc:c9:33:f6:26:47:bf:63:56:f5:d7:ae:db:a6:
22:28:02:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:35 2025 by rpki-client