Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/OUi5qBFFBiQ3EGmTWiGmad22xM4.roa
File: OUi5qBFFBiQ3EGmTWiGmad22xM4.roa (raw, json)
Hash identifier: KwdKSyLAfkRw0QNUdiy6X/wiXk2JmvHy0XAz3/ojAhg=
Subject key identifier: 39:48:B9:A8:11:45:06:24:37:10:69:93:5A:21:A6:69:DD:B6:C4:CE
Certificate issuer: /CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Certificate serial: 0194236A1B0699152EC00DFE9CDE3D588421
Authority key identifier: 22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/OUi5qBFFBiQ3EGmTWiGmad22xM4.roa
Signing time: Wed 01 Jan 2025 19:49:03 +0000
ROA not before: Wed 01 Jan 2025 19:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61244
IP address blocks: 185.14.12.0/22 maxlen: 22
2a02:f880::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1b:06:99:15:2e:c0:0d:fe:9c:de:3d:58:84:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e48e161e4905923f6d4aa2ae0a21530f2de20b
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3948b9a811450624371069935a21a669ddb6c4ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:47:33:e6:a1:32:fc:50:f4:30:4e:13:aa:64:
19:a6:5a:10:37:ff:3a:ef:30:77:08:b0:fc:99:08:
e3:fa:4d:09:e4:fc:39:ae:cd:51:d0:a5:77:7c:4d:
a0:22:6e:1f:b6:13:64:6d:02:45:de:48:b3:4d:d9:
1d:fd:73:e3:ea:9d:0f:41:f1:9d:73:ed:32:3c:39:
8a:62:a4:cb:68:9a:7b:fe:83:56:1e:7c:d4:35:c2:
14:39:a1:08:1b:67:82:de:8f:65:1f:bb:64:62:aa:
ec:31:07:41:72:97:43:b5:b8:65:70:8e:8f:1e:72:
72:d3:c4:d4:1b:04:ef:6a:de:0e:ad:ef:76:3e:05:
cc:b7:d8:b2:10:b0:4e:be:6a:52:28:52:0c:f5:04:
ab:81:dc:fd:6c:44:db:f4:b7:99:a6:74:f7:b4:7d:
a4:ee:1b:0b:3c:21:14:b1:7d:3b:2a:cd:7e:46:92:
ab:b5:4b:d8:93:f2:a6:36:4a:79:18:23:a3:4b:e5:
19:2e:25:21:e8:83:8e:58:cd:6a:d0:86:95:1d:0b:
50:9d:a6:db:96:61:be:c2:4d:5d:11:48:80:06:80:
ab:f1:d6:6d:52:56:79:4b:dd:bb:cd:d4:db:85:cd:
d3:a9:29:5a:7d:7a:ff:43:47:da:b3:de:54:de:df:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:48:B9:A8:11:45:06:24:37:10:69:93:5A:21:A6:69:DD:B6:C4:CE
X509v3 Authority Key Identifier:
keyid:22:E4:8E:16:1E:49:05:92:3F:6D:4A:A2:AE:0A:21:53:0F:2D:E2:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IuSOFh5JBZI_bUqirgohUw8t4gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/OUi5qBFFBiQ3EGmTWiGmad22xM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c34e9-7559-41a6-9cac-3e6b751a55f4/1/IuSOFh5JBZI_bUqirgohUw8t4gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.12.0/22
IPv6:
2a02:f880::/29
Signature Algorithm: sha256WithRSAEncryption
1c:af:b3:bb:f8:81:07:fb:61:b9:ed:4c:e6:e7:12:90:c8:db:
d0:08:0e:38:04:5e:26:c9:13:28:e9:f7:bc:19:c2:2f:05:44:
10:a2:22:f0:61:44:64:73:ac:d3:7d:1f:7c:e8:cc:ec:64:e8:
a4:23:9d:16:2e:b1:10:30:69:cd:a2:e7:c0:3e:7b:bb:1f:cf:
9f:96:b2:f0:5e:91:cc:80:c4:63:08:40:7c:49:9a:80:54:54:
d8:06:15:f6:88:53:2d:00:38:17:15:89:67:81:7f:d9:9e:f2:
96:46:5c:34:3d:e5:30:0c:f9:73:12:6f:6d:ac:e6:24:f7:70:
24:2a:1a:41:b2:93:4a:b7:59:75:d5:bc:04:21:ec:58:af:b7:
2b:7b:cd:94:24:91:81:63:34:21:8b:d6:5b:0c:b3:11:99:17:
33:cb:e5:56:a0:dd:2c:a8:68:ba:04:bc:03:cd:7a:a8:70:4d:
d9:7b:a4:0e:49:7b:2c:8b:b1:5c:0a:3b:97:ea:d5:fa:ab:0a:
ec:4d:65:0d:83:bf:38:75:c0:c1:b9:6d:d1:39:49:a2:e0:5d:
6d:f6:92:52:df:6a:fb:5c:88:e4:20:ec:d2:98:50:3c:12:de:
0c:8f:99:21:d1:48:13:29:76:d6:47:1e:80:3b:2d:ec:04:da:
b5:5f:9e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:27:52 2025 by rpki-client