Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ec_0G3vMx-5UZ1kcUBaOcbIx6VU.roa
File: Ec_0G3vMx-5UZ1kcUBaOcbIx6VU.roa (raw, json)
Hash identifier: fZhUgCN5FWeFE0aooWRNgfvwrCWcuzbMGfUeX0ROUx8=
Subject key identifier: 11:CF:F4:1B:7B:CC:C7:EE:54:67:59:1C:50:16:8E:71:B2:31:E9:55
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018DD1AF14815296C3119052297A9BE6135C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ec_0G3vMx-5UZ1kcUBaOcbIx6VU.roa
Signing time: Thu 22 Feb 2024 16:38:48 +0000
ROA not before: Thu 22 Feb 2024 16:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201575
IP address blocks: 14.102.234.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:af:14:81:52:96:c3:11:90:52:29:7a:9b:e6:13:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 22 16:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11cff41b7bccc7ee5467591c50168e71b231e955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:b7:9d:74:2c:e0:8f:67:f8:bf:bf:bb:f9:
4d:17:f9:f3:67:6c:9e:f9:fd:e8:7d:16:24:7f:14:
d3:c6:26:aa:41:82:3a:cd:a3:14:f0:d9:be:17:30:
af:aa:a7:d2:29:6a:47:a1:14:02:ba:1d:2b:12:af:
9a:f7:44:1e:7e:93:36:d8:bf:e0:af:d6:fc:2b:69:
c5:c2:be:75:dd:78:9f:37:00:24:fc:c4:1f:5c:cd:
55:e6:5c:c9:74:79:27:62:6a:d8:c9:10:99:6a:5e:
3f:de:3b:4e:96:1f:0e:4f:9d:ee:0c:cc:0d:60:c0:
58:03:ff:e0:4d:3d:7a:ef:89:66:ca:7e:ea:1c:b8:
3c:0a:19:9a:4e:b3:f1:d2:14:2a:4f:17:d3:34:bf:
9f:3c:cf:9b:2c:77:71:d6:f3:86:ce:8f:45:9c:7d:
a5:62:08:67:dc:7a:b0:ed:93:9e:36:2b:24:51:80:
88:2f:12:de:16:00:53:83:68:c2:fa:22:c8:94:8e:
ad:c7:f3:36:63:7f:fa:f9:e9:4f:01:7b:46:41:06:
68:55:db:8e:69:23:f3:93:d9:7d:94:15:67:d5:b1:
4a:55:03:22:02:9f:77:21:96:45:cb:c7:f1:55:f7:
a5:a5:22:c2:a2:8a:2a:a8:4a:53:7f:45:4e:f7:5e:
b2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CF:F4:1B:7B:CC:C7:EE:54:67:59:1C:50:16:8E:71:B2:31:E9:55
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ec_0G3vMx-5UZ1kcUBaOcbIx6VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.234.0/24
14.102.236.0/24
Signature Algorithm: sha256WithRSAEncryption
42:40:44:3e:bd:3e:3f:e9:a8:5f:55:d6:20:35:e3:02:24:9b:
b3:be:31:25:51:29:8d:31:33:19:21:0e:ac:8f:59:ac:17:b1:
39:0b:56:a2:c2:23:88:ac:30:94:37:8c:a4:ec:b6:14:03:f4:
c0:5e:02:68:a3:23:59:97:b6:f9:a0:70:50:61:39:68:b9:3f:
49:a8:6b:e0:22:6d:c1:34:67:54:9e:d0:3d:36:44:28:c4:3e:
47:97:37:b8:0c:a1:f3:73:69:48:15:58:8c:6b:ce:25:f2:ab:
c7:04:99:d0:dc:16:19:6a:23:db:fb:ed:94:f8:7b:43:74:53:
c1:59:75:c9:bd:cf:7c:61:64:f8:35:cd:1b:17:fe:d4:a3:a7:
40:de:b2:8d:fd:fb:ac:55:b3:e5:55:16:cb:bd:9f:ba:de:a8:
2c:8c:17:1d:1c:96:2e:29:13:91:85:cc:7b:a0:54:df:54:c3:
49:84:76:d8:a1:0d:81:dd:79:70:46:6c:a6:29:d2:ca:46:02:
40:2d:1a:aa:07:92:a3:4a:2c:03:b2:37:01:5d:09:6e:a8:3f:
ce:f8:29:d9:47:56:df:ef:8b:8b:9c:57:6a:62:66:bc:93:ae:
b2:95:17:29:f4:c0:17:06:98:72:2b:d3:2e:63:2a:65:2a:53:
25:f7:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:41 2025 by rpki-client