Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/3W0HyRGkVDTPlT5glEdA-IqdghI.roa
File: 3W0HyRGkVDTPlT5glEdA-IqdghI.roa (raw, json)
Hash identifier: ci1aG/bLmpWQ9TzQANw2I8VKXZy3fpZOj6f6B17cFOE=
Subject key identifier: DD:6D:07:C9:11:A4:54:34:CF:95:3E:60:94:47:40:F8:8A:9D:82:12
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019422201622C0066ED0900ADAEDF59E4ED9
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/3W0HyRGkVDTPlT5glEdA-IqdghI.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63801
IP address blocks: 14.102.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:16:22:c0:06:6e:d0:90:0a:da:ed:f5:9e:4e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd6d07c911a45434cf953e60944740f88a9d8212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d0:9d:8b:1d:48:27:ac:9a:f9:a8:a0:58:a0:
54:56:4d:7c:bd:0a:3c:e5:c3:bd:c7:f7:f5:61:92:
bb:29:88:a3:f4:c6:10:78:29:eb:61:35:b0:d2:c6:
68:1f:58:39:f4:54:55:74:6e:e2:00:bf:03:c1:ff:
72:fb:63:f5:68:25:7d:c1:b6:72:0c:c7:96:8b:e8:
cb:29:22:e6:a4:95:b9:18:23:72:9f:d9:90:ec:9b:
f5:8f:00:0d:18:68:e4:2f:b2:88:ff:1a:f8:f0:90:
86:5f:a1:f6:5c:48:fa:69:80:dc:8c:a1:27:3a:03:
74:af:5a:6c:21:ab:5f:92:b9:b7:14:d8:52:d4:56:
4f:0e:26:6f:d6:bc:95:b2:cf:e3:cc:0b:14:95:ee:
c1:28:54:ce:27:52:e8:c9:a8:31:ea:31:c1:f1:f6:
41:62:cc:fa:2b:53:2a:2a:24:88:99:0e:04:3d:6f:
99:44:3f:7b:d5:25:34:3a:a0:39:93:24:7d:14:0b:
be:bb:99:66:d5:16:14:29:59:08:a6:83:c2:29:a7:
61:54:06:0c:66:78:36:7a:bd:1c:96:28:25:cd:24:
7f:c8:61:c7:8d:4d:41:99:0b:5a:08:19:e8:c4:db:
83:04:b0:0a:04:8b:c3:47:84:03:de:6a:9f:f3:ad:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6D:07:C9:11:A4:54:34:CF:95:3E:60:94:47:40:F8:8A:9D:82:12
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/3W0HyRGkVDTPlT5glEdA-IqdghI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:32:ee:a0:ce:06:9d:f5:b4:14:30:19:4b:ae:a0:be:38:9f:
dd:4c:b4:30:eb:2b:60:50:00:25:38:43:85:46:df:33:dc:a8:
40:f0:88:b0:bc:7c:f1:94:f3:5c:1d:15:54:29:49:20:4c:26:
b1:71:35:b6:d7:dc:97:96:a9:2d:70:f1:5c:cc:4a:db:c3:0d:
bb:68:3f:12:83:9d:1c:15:ff:05:5d:ef:96:6a:ac:f8:a2:9f:
a3:e2:ab:09:aa:27:50:f8:cd:f6:4d:dd:cc:33:36:d0:49:23:
99:40:7f:eb:a9:77:96:d5:5f:75:bd:53:ec:b2:2d:2e:79:cf:
2c:e6:f8:3e:57:07:11:0a:76:f9:7e:cf:96:78:ee:ac:1c:1b:
20:1e:9e:de:9f:ac:4f:fc:bc:d9:1b:20:81:fd:b2:41:77:ed:
09:47:b0:72:0c:c3:ff:97:ca:ee:a9:39:33:44:f5:cf:24:35:
92:4b:ba:09:f9:1e:1f:62:87:97:23:6f:8a:32:92:0d:bd:cf:
ce:aa:16:a0:47:32:27:e5:fb:a7:33:e2:43:c2:54:e4:4b:e1:
17:0a:37:c4:8b:c3:32:f3:f5:47:db:17:e6:09:07:a0:6f:03:
3a:d7:f7:21:fb:56:4a:4a:e4:15:7c:cf:6a:3f:ef:07:d1:b7:
83:43:dc:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiIBYiwAZu0JAK2u31nk7ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwMTAxMTM0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDZkMDdjOTExYTQ1NDM0Y2Y5NTNlNjA5NDQ3NDBmODhhOWQ4MjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9Cdix1IJ6ya+aigWKBUVk18vQo8
5cO9x/f1YZK7KYij9MYQeCnrYTWw0sZoH1g59FRVdG7iAL8Dwf9y+2P1aCV9wbZy
DMeWi+jLKSLmpJW5GCNyn9mQ7Jv1jwANGGjkL7KI/xr48JCGX6H2XEj6aYDcjKEn
OgN0r1psIatfkrm3FNhS1FZPDiZv1ryVss/jzAsUle7BKFTOJ1Loyagx6jHB8fZB
Ysz6K1MqKiSImQ4EPW+ZRD971SU0OqA5kyR9FAu+u5lm1RYUKVkIpoPCKadhVAYM
Zng2er0cliglzSR/yGHHjU1BmQtaCBnoxNuDBLAKBIvDR4QD3mqf862TOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN1tB8kRpFQ0z5U+YJRHQPiKnYISMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvM1cwSHlSR2tWRFRQbFQ1Z2xFZEEtSXFkZ2hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBDmbiMA0G
CSqGSIb3DQEBCwUAA4IBAQC8Mu6gzgad9bQUMBlLrqC+OJ/dTLQw6ytgUAAlOEOF
Rt8z3KhA8IiwvHzxlPNcHRVUKUkgTCaxcTW219yXlqktcPFczErbww27aD8Sg50c
Ff8FXe+Waqz4op+j4qsJqidQ+M32Td3MMzbQSSOZQH/rqXeW1V91vVPssi0uec8s
5vg+VwcRCnb5fs+WeO6sHBsgHp7en6xP/LzZGyCB/bJBd+0JR7ByDMP/l8ruqTkz
RPXPJDWSS7oJ+R4fYoeXI2+KMpINvc/OqhagRzIn5funM+JDwlTkS+EXCjfEi8My
8/VH2xfmCQegbwM61/ch+1ZKSuQVfM9qP+8H0beDQ9xf
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:36 2025 by rpki-client