Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS14618.roa
File: AS14618.roa (raw, json)
Hash identifier: owUwj67Q6W/JVeasqZAg67eeSxFFszzHN6uyScszdmA=
Subject key identifier: F8:47:D8:62:6B:B2:65:A9:0F:B9:70:31:C1:19:4F:DD:A7:9E:DC:8F
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 1AC9A2485411549B5CC36EB656FEC1C8EE3BD157
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS14618.roa
Signing time: Fri 24 Jan 2025 11:58:13 +0000
ROA not before: Fri 24 Jan 2025 11:53:13 +0000
ROA not after: Fri 23 Jan 2026 11:58:13 +0000
asID: 14618
IP address blocks: 193.111.117.0/24 maxlen: 24
193.164.10.0/24 maxlen: 24
194.5.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c9:a2:48:54:11:54:9b:5c:c3:6e:b6:56:fe:c1:c8:ee:3b:d1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Jan 24 11:53:13 2025 GMT
Not After : Jan 23 11:58:13 2026 GMT
Subject: CN=F847D8626BB265A90FB97031C1194FDDA79EDC8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:fe:16:4c:86:8d:a0:a5:6f:03:34:0f:cc:
4b:2e:40:a5:7d:13:b5:18:48:0f:5b:04:03:c0:2d:
0c:80:c5:79:43:3f:72:7b:80:f1:c7:d6:5c:31:3d:
71:52:93:47:c8:69:43:8c:cb:96:4e:35:51:07:e1:
94:03:e0:03:ff:a3:b5:db:07:7b:c5:48:e9:7c:c7:
6a:5d:49:55:67:8c:73:bf:22:b3:a8:bb:60:28:57:
d8:e0:be:c1:c2:d0:9d:a8:77:b0:37:02:87:42:c1:
0a:f4:2c:59:90:18:fd:91:69:f9:4a:7e:36:2a:4b:
96:06:3e:de:d9:83:1d:25:a7:2c:a4:5b:8d:d9:e4:
00:a9:4b:a2:5a:9a:b3:5c:e0:cd:dc:63:f8:38:b1:
4b:db:89:cf:cf:12:e6:92:54:61:a4:dc:2c:cf:3a:
e3:dc:7f:f3:c0:fa:f7:f3:6a:b3:8d:25:8c:57:25:
49:2d:5e:4d:47:0d:1a:c4:31:10:8d:a9:87:9d:9b:
e9:9e:fb:d4:9d:77:8b:04:8b:4a:86:40:9f:de:b0:
ae:71:f7:14:58:9b:6a:10:c0:3a:b3:0b:af:47:ea:
65:35:a7:cb:36:fd:99:9f:0e:63:46:6f:19:4f:2c:
0c:64:0f:cb:85:fc:da:fd:83:1f:c3:d4:fa:3d:86:
13:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:47:D8:62:6B:B2:65:A9:0F:B9:70:31:C1:19:4F:DD:A7:9E:DC:8F
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS14618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.117.0/24
193.164.10.0/24
194.5.147.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d7:4c:ff:4c:46:8b:68:d6:45:ca:42:41:0f:f5:fc:52:07:
c6:74:5f:a2:b2:50:75:42:de:62:6b:d6:24:a0:0f:b0:0a:db:
91:dd:a8:2e:ae:d9:3c:78:63:ac:ce:f6:79:ce:cb:ce:da:d1:
ed:03:f1:7e:92:57:64:2f:66:97:c9:d4:2b:a1:bb:62:75:b1:
3b:fa:72:b4:5d:ea:bd:5f:fd:7e:e9:e0:b8:c9:ea:fd:2d:73:
fd:d3:7e:ab:fa:fc:31:f6:5b:2b:22:f9:20:e2:40:41:36:ab:
7f:1f:2a:39:21:76:4f:71:0a:1a:b1:84:2f:26:2f:a6:68:3c:
ff:8b:2c:6f:c1:5d:f0:33:29:2a:fc:32:ce:89:b4:58:95:0e:
e1:29:8a:23:60:97:cf:f8:c4:47:a2:df:99:f3:6d:39:e7:2e:
dc:89:df:e9:8f:35:ce:48:e0:9c:aa:4e:a4:01:2b:f0:31:84:
11:45:6d:db:f9:7d:dd:1c:81:84:c5:12:3b:0b:34:d5:dc:c7:
60:36:dc:5d:75:d8:71:5d:1d:d8:13:c0:19:c6:e9:f3:14:08:
bc:db:03:03:fc:cc:2b:9a:67:6d:1f:ac:0b:e3:7e:2b:e8:0e:
e5:05:5a:c0:96:66:fd:d3:2a:59:e2:cf:8b:62:b5:8a:4d:bf:
9e:85:20:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:01:58 2025 by rpki-client