Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ArhdTtz8Q7RDL5uOQnDJioygsrM.roa
File: ArhdTtz8Q7RDL5uOQnDJioygsrM.roa (raw, json)
Hash identifier: fyhzUD8616Jhzljsh15wh1gWun5ixmAekz6hH8V9z3o=
Subject key identifier: 02:B8:5D:4E:DC:FC:43:B4:43:2F:9B:8E:42:70:C9:8A:8C:A0:B2:B3
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01870A4E2897C2C4A521FACC9117B0E4AA42
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ArhdTtz8Q7RDL5uOQnDJioygsrM.roa
Signing time: Wed 22 Mar 2023 17:11:47 +0000
ROA not before: Wed 22 Mar 2023 17:11:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 14.102.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0a:4e:28:97:c2:c4:a5:21:fa:cc:91:17:b0:e4:aa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 22 17:11:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02b85d4edcfc43b4432f9b8e4270c98a8ca0b2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a7:eb:4f:c4:ed:2a:be:7a:57:54:94:74:9c:
a0:ec:a1:71:e1:25:84:e1:9f:d7:f0:55:e7:ba:12:
c9:a7:1d:01:16:65:86:88:ca:47:35:87:b5:a5:ab:
ad:18:7f:69:6a:e6:d8:81:ee:36:de:28:89:2d:5f:
d7:8b:d7:c1:51:e1:31:e2:72:ea:f0:c9:ca:11:5a:
d4:aa:fd:93:2d:48:c8:b1:73:74:38:bc:58:8e:97:
84:aa:de:43:22:b6:53:4f:55:2c:bb:97:f9:57:1a:
31:2c:13:c6:f7:00:53:cc:3c:23:85:7f:4a:89:7a:
c6:49:c5:1d:36:5a:81:0b:24:47:c0:a2:0c:1c:17:
d0:67:6a:1e:85:f8:62:19:e7:e1:06:f1:6e:46:61:
12:6e:b8:88:05:28:39:7a:76:03:56:c3:f2:9a:ae:
02:c3:c5:06:06:ee:8a:58:a4:0e:d9:00:cc:e4:71:
ec:fc:0a:09:a5:fb:a4:b2:4f:fd:a4:48:46:13:cb:
e9:01:59:ae:88:87:92:2c:4a:90:f4:eb:9d:e3:3d:
c1:31:77:89:0f:11:6f:38:9b:ac:28:07:c5:dc:ac:
a4:96:3e:1c:18:93:89:cc:24:a9:00:51:12:3b:f8:
55:ac:3a:df:cd:27:a9:9c:e8:95:c1:ea:88:66:d8:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B8:5D:4E:DC:FC:43:B4:43:2F:9B:8E:42:70:C9:8A:8C:A0:B2:B3
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ArhdTtz8Q7RDL5uOQnDJioygsrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.227.0/24
Signature Algorithm: sha256WithRSAEncryption
e0:34:92:8a:dc:28:0d:b4:b6:60:24:25:ea:7f:0c:a0:4a:7e:
be:03:cb:9d:07:2f:97:ec:ce:5b:6f:a3:d4:d6:b1:8e:f1:7a:
9f:2f:e8:ec:5f:c1:3b:20:be:d4:20:e0:9a:80:2f:c1:ad:10:
ef:a3:52:ba:c3:a3:b4:32:a3:63:ae:b2:4f:b9:88:21:1c:c0:
eb:b8:e4:4d:03:5e:ad:7f:61:fd:27:e1:07:50:ae:56:e5:13:
48:d6:76:61:7c:4f:bd:20:85:be:b3:a1:27:0a:38:56:0d:b6:
aa:d6:b9:d4:14:6d:ee:7e:b6:95:6b:6e:a3:0c:87:d9:ff:da:
f0:14:b5:e9:cd:71:6d:60:9d:86:1d:a1:49:cb:72:60:0f:d7:
f6:ab:27:41:b5:92:80:a4:6e:a3:a2:56:55:88:be:3a:4f:84:
0a:f6:a1:e6:13:0a:86:be:9e:c5:b5:cf:4d:a9:9f:7d:1a:f2:
f2:3d:f8:8c:b1:b4:b1:51:a8:55:b7:31:52:88:04:78:55:0e:
ed:72:03:89:f2:8c:9e:39:f2:1a:5f:7c:0b:b4:16:54:70:a4:
08:a3:e1:03:a7:fb:65:4d:97:0c:c2:16:29:29:bc:9d:39:34:
73:7d:c2:06:e4:b2:b2:12:36:02:a7:11:09:d6:8d:7e:29:1f:
ca:60:21:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:25 2025 by rpki-client