Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8-q6_TMIGYic-rIKHHbuIhqgNfs.roa
File: 8-q6_TMIGYic-rIKHHbuIhqgNfs.roa (raw, json)
Hash identifier: rawJqJTxppR5MWNUlzFAP+/oV4PqLS3Tz8ljf8wy+Os=
Subject key identifier: F3:EA:BA:FD:33:08:19:88:9C:FA:B2:0A:1C:76:EE:22:1A:A0:35:FB
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0190EC06C3AF3E54ABF24CDA036E43E01A47
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8-q6_TMIGYic-rIKHHbuIhqgNfs.roa
Signing time: Thu 25 Jul 2024 22:33:04 +0000
ROA not before: Thu 25 Jul 2024 22:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 14.102.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ec:06:c3:af:3e:54:ab:f2:4c:da:03:6e:43:e0:1a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 25 22:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3eabafd330819889cfab20a1c76ee221aa035fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ba:52:32:76:a0:d6:56:67:09:73:c6:db:d3:
58:af:6f:08:7b:38:b8:a9:85:39:7b:93:1e:97:0a:
96:34:d2:0b:6f:2a:4f:2d:3b:72:66:0c:b1:2c:d4:
48:88:1d:23:0e:dd:15:9d:00:42:48:99:84:81:ac:
eb:cc:f0:e8:f5:b9:99:bf:15:0b:cc:71:b7:a2:17:
58:80:3f:cb:55:1c:dc:04:6b:7b:a9:0a:ed:9d:38:
f8:f9:77:41:e4:1a:a4:bb:ea:d0:04:db:e2:9a:c7:
1e:51:74:3a:b3:06:b7:f6:c1:86:19:78:aa:e7:af:
58:0f:53:ab:42:4f:27:a6:14:ff:ec:6f:96:da:74:
f1:89:d0:4a:7e:0f:59:12:c1:63:95:3a:e0:a6:44:
55:c6:e1:5d:71:ea:50:ed:a1:7d:2f:c8:51:4d:41:
b0:66:9d:21:22:26:31:73:42:0b:8e:50:9c:29:4e:
6c:c6:ff:a7:7c:0d:8d:a6:01:1f:80:c7:ec:62:81:
e4:60:0e:dc:60:b1:ea:cc:9d:de:a4:05:dc:4e:6c:
5b:8b:a3:97:df:8f:ac:5c:ce:81:48:b1:c2:e6:59:
a7:fa:fc:3f:bf:7a:4c:75:06:dc:77:23:38:07:92:
17:82:e5:8e:36:1b:f4:8f:ca:63:aa:f9:41:a5:e9:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EA:BA:FD:33:08:19:88:9C:FA:B2:0A:1C:76:EE:22:1A:A0:35:FB
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8-q6_TMIGYic-rIKHHbuIhqgNfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
Signature Algorithm: sha256WithRSAEncryption
08:5f:90:cc:97:c4:ed:8c:5a:c4:74:68:d7:ea:e1:12:50:c9:
37:b7:66:5d:ee:cc:8a:c7:ee:27:70:71:ed:78:ed:08:7c:13:
53:ce:e1:05:f3:52:4f:e8:7c:c8:a3:a5:25:e4:07:80:39:9f:
61:00:c7:70:46:d8:1f:18:c9:0b:2d:e5:c4:90:a2:95:87:80:
70:54:8d:df:8e:ee:d9:2c:41:03:fe:fb:b7:52:44:23:e5:75:
0d:33:a1:f6:ad:9d:a2:99:98:28:d6:65:48:62:60:9a:53:94:
6a:f0:2a:08:94:67:c5:51:fd:83:30:e6:03:5b:74:e2:b7:e1:
be:e9:91:33:35:23:a2:c3:37:93:eb:67:83:f9:16:9c:7a:e8:
74:ce:de:dd:89:e6:05:09:96:e2:11:31:35:6b:c1:b7:15:fe:
32:ac:d9:dd:b0:e9:40:a0:b4:e5:05:b4:c1:5b:63:a8:f0:a8:
35:94:79:3c:3f:51:22:6b:27:27:79:a4:ea:29:16:bf:9d:cf:
0c:0e:b3:7e:97:81:2e:62:68:e5:8d:68:4d:d3:53:e0:c0:05:
ba:9a:ea:fd:32:a2:93:51:94:db:c1:4e:6b:8c:09:c4:02:49:
28:71:b5:e2:ca:08:25:30:b1:14:74:99:98:b3:4e:a4:ae:2b:
d7:4b:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:29 2025 by rpki-client