Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/4kN15Qz33KWG-k_wyu7EQgr4Ils.roa
File: 4kN15Qz33KWG-k_wyu7EQgr4Ils.roa (raw, json)
Hash identifier: DH8jYa3viVWroHhQ/Zl/Da/2bPMlT/7wPrIYxkW1NQg=
Subject key identifier: E2:43:75:E5:0C:F7:DC:A5:86:FA:4F:F0:CA:EE:C4:42:0A:F8:22:5B
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 0194221F911C52620B7C86F2ED8D228D478F
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/4kN15Qz33KWG-k_wyu7EQgr4Ils.roa
Signing time: Wed 01 Jan 2025 13:48:01 +0000
ROA not before: Wed 01 Jan 2025 13:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200533
IP address blocks: 85.14.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:91:1c:52:62:0b:7c:86:f2:ed:8d:22:8d:47:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e24375e50cf7dca586fa4ff0caeec4420af8225b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:68:0f:68:72:49:db:93:f7:ef:84:32:ff:8f:
61:7e:fa:1c:6c:58:9a:f7:4c:1b:2c:56:b5:21:fe:
c7:86:18:78:ad:dd:d2:79:48:5d:bd:0d:5f:19:2d:
86:31:24:0f:b0:94:c5:5c:8d:32:10:42:13:e7:d1:
b7:0e:11:30:23:fd:ea:25:7d:4f:60:6c:e9:e8:f7:
18:22:a8:74:c4:8c:fc:f6:d6:e4:d0:3b:5b:28:84:
60:d1:ea:28:21:f8:10:ad:30:bc:f3:48:34:ec:4c:
a1:8b:d7:ed:d6:28:c0:cf:0f:1f:90:c7:63:93:2a:
56:0a:a4:9b:14:73:56:34:cb:be:f5:07:aa:7a:b4:
2a:b0:fc:9a:fb:05:30:f5:5e:ee:11:70:fa:6b:5d:
b0:9e:80:52:63:cb:9a:22:17:ca:a0:27:7c:a4:43:
56:51:0f:b6:7c:68:7f:af:c5:81:69:3d:cb:82:79:
6a:d8:cb:1e:80:b1:13:56:b5:12:10:06:bd:bf:a2:
8f:fb:4f:f9:25:9a:64:92:fe:31:54:3b:d6:25:c7:
a0:0d:97:d3:03:9d:d7:54:b2:a5:e0:af:5c:dd:4c:
3f:b5:33:ae:eb:8f:bc:86:c2:9f:a7:87:49:2f:e4:
76:e2:d8:cc:2d:dd:00:b9:60:58:b1:40:1d:61:89:
6a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:43:75:E5:0C:F7:DC:A5:86:FA:4F:F0:CA:EE:C4:42:0A:F8:22:5B
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/4kN15Qz33KWG-k_wyu7EQgr4Ils.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.7.0/24
Signature Algorithm: sha256WithRSAEncryption
33:af:18:4c:0a:0d:f4:04:47:7e:c9:00:e8:f7:bc:29:9c:ed:
bd:2c:1d:0a:ba:05:3a:70:5f:ff:32:bc:26:e3:ca:10:33:0d:
6a:56:87:ea:52:75:b4:b0:3f:73:ed:19:60:e3:cf:92:65:60:
96:cb:46:b9:78:77:ff:c2:50:c7:60:f3:88:e2:7d:21:08:b1:
b8:2e:ad:7e:30:d1:1f:f3:26:53:82:08:0d:de:b7:25:68:14:
30:f4:53:ca:97:f7:1a:63:40:db:58:28:25:86:1f:b8:a6:9c:
47:ba:c5:a9:2c:bf:3f:03:c1:ac:8f:28:61:ca:30:a9:77:5c:
e0:65:db:c9:9f:52:bd:2e:0d:25:8d:46:e8:ce:37:6c:94:75:
a0:b5:ff:b3:be:0b:fe:8f:55:5f:52:b8:ff:be:1d:5e:f3:c2:
8a:20:ec:e3:a6:b3:c1:a6:f5:5c:1e:32:f0:e3:aa:fd:8d:3b:
97:ac:8a:3c:09:bc:44:ee:ef:04:07:fc:fc:6e:74:92:32:7f:
6c:20:27:db:a7:23:2d:da:e6:8d:70:63:94:24:06:45:92:ad:
9b:7e:33:72:3b:64:e8:95:bf:ed:df:7a:0d:56:7a:a9:7a:d5:
aa:20:bc:22:56:11:53:59:c6:a1:76:4a:52:4b:af:9b:88:e0:
dc:92:21:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:43:43 2025 by rpki-client