Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/51Jz4WL5Cj9vEW2Av-8ZTilL2wY.roa
File: 51Jz4WL5Cj9vEW2Av-8ZTilL2wY.roa (raw, json)
Hash identifier: 2UoTf3tF1fYdueH+Y3kBnIXMehaRwiMpW9viBZukgjg=
Subject key identifier: E7:52:73:E1:62:F9:0A:3F:6F:11:6D:80:BF:EF:19:4E:29:4B:DB:06
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0190EC06C3ED4FC9CFF51AFA0FD96B8B8B4D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/51Jz4WL5Cj9vEW2Av-8ZTilL2wY.roa
Signing time: Thu 25 Jul 2024 22:33:04 +0000
ROA not before: Thu 25 Jul 2024 22:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 14.102.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ec:06:c3:ed:4f:c9:cf:f5:1a:fa:0f:d9:6b:8b:8b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 25 22:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e75273e162f90a3f6f116d80bfef194e294bdb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f2:0c:94:9d:73:a2:ac:28:6c:72:76:82:dc:
20:9c:fa:33:4f:17:0c:17:94:25:5e:67:c3:60:dc:
11:d8:a6:4d:24:ff:31:af:99:f0:d7:87:5d:4a:1f:
ae:61:93:c8:b0:f6:07:3c:6b:4c:d5:85:6b:d5:3c:
5c:1e:d3:89:a6:fc:01:67:53:ae:cd:91:db:2c:57:
51:be:ee:50:c8:74:53:8d:fd:c6:55:00:99:37:d7:
35:e4:0a:c1:ad:28:92:9a:8a:76:ae:a2:9b:7d:61:
22:3f:40:a3:92:98:be:5a:ee:f5:9f:2c:b0:70:20:
41:12:87:38:8c:2a:10:96:71:33:bd:d7:32:5d:db:
33:3e:0e:09:be:ef:8b:97:d1:b6:bc:9f:ac:67:75:
68:41:f1:2c:04:14:50:1b:6e:fe:0b:22:67:fd:cf:
32:99:8d:94:cd:c5:5a:08:e6:9d:f4:53:29:65:8a:
f4:b8:62:d6:04:b4:ee:59:39:1e:28:dd:25:48:9c:
b8:50:d7:e2:d4:ae:23:6e:0f:ee:6d:2c:6e:a8:74:
d8:3c:1a:fc:f4:e1:d0:c5:a4:42:bd:23:ac:7e:72:
2a:dc:d5:36:b3:8e:5b:dc:2a:9a:90:42:4e:44:c3:
91:b2:77:84:d1:e4:58:66:a9:5c:ff:46:fe:8b:50:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:52:73:E1:62:F9:0A:3F:6F:11:6D:80:BF:EF:19:4E:29:4B:DB:06
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/51Jz4WL5Cj9vEW2Av-8ZTilL2wY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.230.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:66:d3:42:08:ae:06:b3:b2:5f:54:0b:2d:75:14:50:5d:f6:
23:e7:90:47:04:8d:06:e8:45:28:b9:c4:c3:1c:ea:e9:ec:c3:
32:02:25:b1:2d:c3:29:ea:70:61:f0:0c:27:59:ed:8c:2e:9b:
e4:4f:83:97:f3:4c:3a:90:31:16:aa:6b:2a:e3:64:ff:df:f8:
11:b3:83:54:45:3e:7e:60:c6:1b:f3:d8:26:d1:63:16:6a:35:
dc:58:ca:b0:8b:0d:cc:b4:6f:94:87:34:c4:30:a6:95:3d:84:
07:46:a7:1c:ee:ec:b9:c6:5a:31:c9:18:65:9a:03:df:6c:fe:
f0:c4:34:35:45:2a:0c:58:f0:38:d7:68:da:c4:94:fb:1a:a5:
57:62:a4:8e:3f:3e:94:59:bf:6c:44:2a:2f:d9:25:6b:85:f5:
2c:87:eb:6c:32:26:19:39:cf:cd:e4:e0:0d:82:73:5a:7f:50:
4e:5b:a3:c7:09:cf:f3:6b:46:14:28:9b:cd:99:8c:be:88:14:
9c:27:53:6d:e3:66:a0:e2:67:02:77:d0:f9:01:d0:03:43:96:
b1:3b:2f:88:73:40:50:d3:c2:0c:e8:10:5e:49:81:5f:e5:6f:
53:2c:d5:67:17:6c:14:d6:dd:71:a7:48:01:a7:85:fe:f0:41:
f6:d2:eb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:21 2025 by rpki-client