Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/E6qX7Mzul3HrXHMaKQgag7TW42I.roa
File: E6qX7Mzul3HrXHMaKQgag7TW42I.roa (raw, json)
Hash identifier: IBZ9TDQOnCrrmRL6gcga4H+dgYwskyMSVJAMbt3R8w8=
Subject key identifier: 13:AA:97:EC:CC:EE:97:71:EB:5C:73:1A:29:08:1A:83:B4:D6:E3:62
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018FA72D6BD88B02DC075E1BDD3950E80F81
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/E6qX7Mzul3HrXHMaKQgag7TW42I.roa
Signing time: Thu 23 May 2024 20:38:42 +0000
ROA not before: Thu 23 May 2024 20:38:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 14.102.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a7:2d:6b:d8:8b:02:dc:07:5e:1b:dd:39:50:e8:0f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 23 20:38:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13aa97ecccee9771eb5c731a29081a83b4d6e362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:1b:4e:44:52:f9:ad:86:95:4d:e7:88:80:
bc:0e:23:58:20:f0:64:94:ba:54:6e:f1:a2:22:2b:
47:d2:06:11:f6:97:c6:64:ec:e1:8e:f5:b3:86:19:
19:49:65:b6:c5:bc:5a:2f:fd:7e:95:1f:0c:77:10:
17:11:7b:4b:03:a7:30:d7:3b:89:fe:e8:95:99:c8:
e8:ed:63:c0:44:bd:8f:c1:49:f6:62:77:f3:e8:4a:
f6:59:79:d3:29:24:e2:f3:1f:f9:67:87:1c:a2:5e:
18:b0:a5:dd:13:5f:53:e8:85:07:0c:cc:74:27:12:
7a:9c:4c:9c:75:5c:48:c5:4c:47:a0:30:9f:9f:18:
90:f0:4d:00:ff:55:48:37:b9:31:5e:a0:13:6d:8b:
93:42:09:e1:87:31:f0:7a:48:82:eb:e1:ee:be:15:
d6:a8:35:6c:ba:9f:06:b4:d2:41:65:90:e0:dd:0b:
ed:37:7b:61:68:06:55:ad:c5:7a:d1:a2:68:2a:1f:
be:50:b7:77:97:aa:f5:12:a8:57:dc:29:88:c2:06:
da:70:a2:ca:0b:bb:c8:2b:36:5d:49:86:f1:bf:7e:
f3:4b:66:f6:79:db:b8:ec:55:3a:e2:5c:9e:b0:c0:
4f:73:32:30:90:c8:a5:c1:18:74:bb:60:a0:d2:bf:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AA:97:EC:CC:EE:97:71:EB:5C:73:1A:29:08:1A:83:B4:D6:E3:62
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/E6qX7Mzul3HrXHMaKQgag7TW42I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:10:82:b0:75:56:12:ec:5d:8b:23:80:31:1d:98:68:09:59:
f8:f6:07:2f:c5:2a:1a:63:e6:d1:c7:f9:eb:4f:14:2f:7f:27:
ed:8b:17:30:08:e5:27:68:de:87:fc:82:cd:bc:b2:e0:62:4c:
01:51:f4:43:75:58:f1:82:58:9c:5a:5f:4b:d5:4b:47:50:29:
86:ef:a1:fd:ac:70:a2:c5:41:75:2d:5a:c8:22:4a:2c:21:33:
2b:bb:46:20:39:01:95:11:70:49:19:a8:26:94:a8:f8:b0:ba:
32:08:1d:a9:0e:86:34:11:1d:ac:7b:79:0b:13:5d:39:4c:e2:
d0:0f:25:59:27:e2:63:52:a1:51:40:65:bc:92:d6:1c:25:47:
50:87:be:85:2f:3e:b1:30:29:fa:bc:23:83:34:f9:66:3f:2d:
21:90:2e:ea:d0:1a:bf:d0:7e:0a:c5:83:60:48:2b:a1:d4:30:
d9:ae:81:a5:08:17:c9:90:52:46:d9:80:c3:f8:c0:c6:aa:75:
3e:8d:56:69:22:bd:c1:82:ad:e8:80:22:56:a2:1d:8f:0c:bd:
77:bd:d7:33:ab:a1:cf:91:be:26:a7:d9:31:20:71:1a:18:8c:
8a:34:cf:de:15:7e:42:f4:a5:d1:ba:c0:4f:3c:3d:b9:f2:c5:
8b:1d:3f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:21 2025 by rpki-client