Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CA6o7Qa3hvQlxxSdL5VmzM5huSE.roa
File: CA6o7Qa3hvQlxxSdL5VmzM5huSE.roa (raw, json)
Hash identifier: lOm4fKWNuPQIMZFhiLakgTppIkcvfT4YECkDWfCjrCY=
Subject key identifier: 08:0E:A8:ED:06:B7:86:F4:25:C7:14:9D:2F:95:66:CC:CE:61:B9:21
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019415AB0CD802E588A7FE391E88E9D37028
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CA6o7Qa3hvQlxxSdL5VmzM5huSE.roa
Signing time: Mon 30 Dec 2024 03:45:19 +0000
ROA not before: Mon 30 Dec 2024 03:45:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 14.102.232.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
94.229.210.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:15:ab:0c:d8:02:e5:88:a7:fe:39:1e:88:e9:d3:70:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Dec 30 03:45:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=080ea8ed06b786f425c7149d2f9566ccce61b921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:8a:b7:52:69:1e:88:d2:18:98:f7:d2:47:
d8:a6:53:66:fe:e6:56:4e:64:67:1e:1c:ef:b0:2b:
cb:c4:e0:af:6b:97:0f:56:15:5c:ef:17:f4:b3:bc:
8c:b8:b6:22:85:3a:1a:c6:7c:d6:bb:60:53:d9:4a:
b9:03:c8:47:56:ae:01:7d:c4:6d:77:e7:d9:c1:4b:
fc:d0:9b:72:6a:5e:81:94:15:c4:7a:fd:cc:56:27:
13:26:9b:d3:7a:fb:bb:26:c6:5e:dc:6f:15:71:d8:
67:4d:b4:04:60:9a:42:34:df:11:29:02:ee:5f:f3:
55:36:1e:b5:24:16:dd:17:c2:70:34:f0:63:60:d9:
94:bc:71:03:aa:a3:06:07:ab:4b:34:b6:29:9d:83:
a5:5c:5e:c4:59:7c:b4:44:a9:2c:32:e9:a0:6d:fd:
04:9b:5b:ee:44:14:58:42:26:e0:8d:5a:04:49:be:
8f:c3:eb:d5:64:39:c4:59:69:e4:f8:55:6c:f2:d6:
9b:52:03:15:71:8b:da:f4:ef:40:03:7b:56:a1:85:
a7:c5:f7:25:a1:18:e9:c9:e8:a9:5b:a4:14:14:eb:
37:7b:bd:64:42:2b:e5:51:7d:d6:5a:79:ca:77:3f:
97:48:54:38:b6:d6:12:3c:31:a3:4b:8e:31:72:09:
21:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0E:A8:ED:06:B7:86:F4:25:C7:14:9D:2F:95:66:CC:CE:61:B9:21
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/CA6o7Qa3hvQlxxSdL5VmzM5huSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.232.0/24
77.111.96.0/22
94.229.210.0/24
94.229.212.0/24
94.229.223.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:6c:c3:23:4a:17:30:a3:98:86:4d:5c:a8:ef:cc:98:af:2b:
43:50:13:95:40:76:f8:f0:ea:35:29:ab:06:b1:32:fc:a0:b8:
5a:aa:4a:79:9f:a2:93:f7:c4:78:a3:7f:b5:fb:9e:da:cf:2d:
dd:d3:a7:62:d9:82:d7:d6:d1:fb:26:44:96:df:84:73:c6:9f:
b1:7c:65:a4:56:1e:dd:e3:a3:d2:ba:9c:f6:c4:e6:4f:88:df:
80:e9:27:5d:28:89:9c:57:bc:4a:2c:59:77:eb:59:a9:64:44:
ba:9f:21:8c:a4:15:4e:82:80:0d:9a:31:f5:03:29:7c:18:68:
c5:03:78:25:ad:be:d6:ef:5b:36:b1:64:8c:49:45:cb:39:d5:
a9:e1:d4:89:95:fc:2d:6a:d0:8f:f1:a9:04:06:a3:6e:48:9d:
ef:9d:88:b2:39:d0:f6:93:8f:9d:f1:24:58:70:6e:fe:f2:37:
a4:64:23:a6:94:7e:4e:8c:2c:b2:3a:95:cf:79:de:1b:79:31:
95:ba:82:c8:5b:c3:31:e9:c5:2c:98:2e:77:8a:db:23:bb:63:
6b:b5:14:1f:4a:8f:09:7d:04:c3:22:3e:0e:66:ea:63:3d:d4:
35:f6:55:bc:33:e2:b7:71:f5:c1:c1:94:89:0e:5a:47:ca:c4:
30:ec:44:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:56 2025 by rpki-client