Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/AfCPGnH0XTGKl3szMp2_prsuI58.roa
File: AfCPGnH0XTGKl3szMp2_prsuI58.roa (raw, json)
Hash identifier: A59pxXHefJ5PaH4w+W6NyzJ1r/d4oE81aLi8vUWlOp0=
Subject key identifier: 01:F0:8F:1A:71:F4:5D:31:8A:97:7B:33:32:9D:BF:A6:BB:2E:23:9F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0190DB8536E3B6370A810E11B32D7FF80C68
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/AfCPGnH0XTGKl3szMp2_prsuI58.roa
Signing time: Mon 22 Jul 2024 17:37:38 +0000
ROA not before: Mon 22 Jul 2024 17:37:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 14.102.230.0/24 maxlen: 24
14.102.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:db:85:36:e3:b6:37:0a:81:0e:11:b3:2d:7f:f8:0c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 22 17:37:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01f08f1a71f45d318a977b33329dbfa6bb2e239f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e3:cb:d9:01:ac:da:78:8f:f4:ab:ce:ad:b4:
65:21:ad:e7:c2:23:c3:d6:79:b8:92:02:99:dd:35:
e0:c6:b9:d4:45:25:83:95:d4:80:a7:00:c4:32:53:
d6:4c:f4:7d:99:64:75:e2:5b:46:a2:1f:33:c9:20:
1c:06:47:27:4a:37:b2:5b:0c:e1:f6:cf:83:dc:d3:
09:15:e5:00:f8:a5:80:24:c0:44:17:91:d0:58:dd:
20:34:da:f0:53:42:fc:97:bd:6a:d0:f8:ec:b5:3b:
9e:e1:c5:49:4a:a4:79:49:b4:49:48:31:dd:9b:96:
11:f5:85:f1:c3:b8:8d:4e:92:cc:b0:1e:e1:1d:50:
31:c5:72:ad:e8:db:98:75:2e:49:a2:a1:9a:05:03:
00:57:86:e5:51:f6:70:94:05:5a:50:ea:da:d4:3c:
3c:53:52:15:00:5b:44:ab:38:0a:29:3e:88:93:4a:
c3:7a:f5:d3:42:99:a1:b4:69:e7:a9:04:8a:4f:bf:
2f:52:1f:2d:25:04:cb:94:7c:87:e4:02:f3:d0:76:
50:80:85:b8:f1:d5:ed:f6:48:bb:ca:6d:7a:85:75:
63:57:6c:da:db:61:50:52:60:33:e8:26:4c:e3:22:
0d:bb:10:c7:a2:42:d0:b8:4e:91:e4:48:b6:ab:3a:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F0:8F:1A:71:F4:5D:31:8A:97:7B:33:32:9D:BF:A6:BB:2E:23:9F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/AfCPGnH0XTGKl3szMp2_prsuI58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.230.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:ab:52:00:ab:64:cd:30:31:aa:4c:23:9e:30:ce:52:d8:5f:
4d:e6:05:28:5d:f6:9d:3f:02:01:26:65:0e:74:07:2f:22:33:
2f:81:8b:63:6c:b5:df:0c:7c:02:ca:66:91:cf:9e:47:41:37:
d2:76:00:42:45:d8:96:ec:a2:15:8d:ca:ff:7a:b1:9c:03:e3:
e6:d3:a3:92:53:96:e2:64:ca:25:54:ac:32:b6:53:f8:52:0e:
07:6d:3d:67:73:ff:cb:66:de:6c:6e:19:2d:34:9c:68:6f:78:
c0:74:02:8c:0f:bc:33:ca:b9:f4:61:a6:da:d8:9b:9d:7b:45:
18:df:f4:bd:4d:23:d5:cb:86:7a:9c:23:b8:30:ac:af:80:36:
43:73:ec:5a:a1:49:ee:cd:54:05:41:88:fd:64:d1:60:b7:d8:
b0:a9:43:40:f1:77:b7:a3:ca:2a:3f:21:e4:33:ed:67:e0:b0:
26:4a:09:ff:a4:a7:52:0a:c2:cf:5e:63:a4:99:f2:71:4f:73:
63:ca:7c:f7:d9:ab:88:7a:94:a6:57:cd:6d:6a:e6:55:c4:9a:
b3:74:9f:95:b9:26:8b:e3:46:24:25:68:6b:af:73:12:2f:4b:
5a:6e:0a:91:bd:d7:c6:5b:82:14:ea:1f:07:2e:08:2c:e6:1d:
39:a7:01:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDbhTbjtjcKgQ4Rsy1/+AxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjQwNzIyMTczNzM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWYwOGYxYTcxZjQ1ZDMxOGE5NzdiMzMzMjlkYmZhNmJiMmUyMzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguPL2QGs2niP9KvOrbRlIa3nwiPD
1nm4kgKZ3TXgxrnURSWDldSApwDEMlPWTPR9mWR14ltGoh8zySAcBkcnSjeyWwzh
9s+D3NMJFeUA+KWAJMBEF5HQWN0gNNrwU0L8l71q0PjstTue4cVJSqR5SbRJSDHd
m5YR9YXxw7iNTpLMsB7hHVAxxXKt6NuYdS5JoqGaBQMAV4blUfZwlAVaUOra1Dw8
U1IVAFtEqzgKKT6Ik0rDevXTQpmhtGnnqQSKT78vUh8tJQTLlHyH5ALz0HZQgIW4
8dXt9ki7ym16hXVjV2za22FQUmAz6CZM4yINuxDHokLQuE6R5Ei2qzqM4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAHwjxpx9F0xipd7MzKdv6a7LiOfMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvQWZDUEduSDBYVEdLbDNzek1wMl9wcnN1STU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBDmbmMA0G
CSqGSIb3DQEBCwUAA4IBAQCjq1IAq2TNMDGqTCOeMM5S2F9N5gUoXfadPwIBJmUO
dAcvIjMvgYtjbLXfDHwCymaRz55HQTfSdgBCRdiW7KIVjcr/erGcA+Pm06OSU5bi
ZMolVKwytlP4Ug4HbT1nc//LZt5sbhktNJxob3jAdAKMD7wzyrn0Yaba2Jude0UY
3/S9TSPVy4Z6nCO4MKyvgDZDc+xaoUnuzVQFQYj9ZNFgt9iwqUNA8Xe3o8oqPyHk
M+1n4LAmSgn/pKdSCsLPXmOkmfJxT3Njynz32auIepSmV81tauZVxJqzdJ+VuSaL
40YkJWhrr3MSL0tabgqRvdfGW4IU6h8HLggs5h05pwFO
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:23 2025 by rpki-client