Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/F4mpAmsEmKzDmsOwA2vMe-bsQmc.roa
File: F4mpAmsEmKzDmsOwA2vMe-bsQmc.roa (raw, json)
Hash identifier: +XHdVXlUPPxgZIMzSWJa5hklLZS4hvcks8gCB0gvbf4=
Subject key identifier: 17:89:A9:02:6B:04:98:AC:C3:9A:C3:B0:03:6B:CC:7B:E6:EC:42:67
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0190BC6E775EC27717F4FC2433768B3B332F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/F4mpAmsEmKzDmsOwA2vMe-bsQmc.roa
Signing time: Tue 16 Jul 2024 16:44:34 +0000
ROA not before: Tue 16 Jul 2024 16:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 14.102.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bc:6e:77:5e:c2:77:17:f4:fc:24:33:76:8b:3b:33:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 16 16:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1789a9026b0498acc39ac3b0036bcc7be6ec4267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:55:b3:8a:4c:a5:91:7f:15:05:ee:83:28:
b3:dc:d1:09:ff:43:bb:1c:14:28:47:dc:53:dd:a0:
b3:24:61:ae:7a:09:0d:b2:52:65:70:14:4f:e8:c7:
86:bd:42:9a:fd:99:91:6e:88:08:63:ed:be:56:94:
be:2e:98:29:65:f6:3f:ec:da:e2:92:40:bf:1f:51:
bf:0e:cb:cd:ca:49:3f:7d:61:64:28:4b:80:9c:4f:
8c:86:10:62:d6:0d:df:0e:4a:79:09:5e:87:95:10:
ca:71:3b:86:44:a6:ed:21:c2:53:3b:c9:86:5b:91:
05:74:6d:bc:f9:98:53:f9:7c:45:b1:f9:5a:67:d9:
1c:65:52:fd:19:3a:35:1b:cd:1d:9d:05:eb:6d:7d:
2b:6e:85:12:99:30:39:c4:08:98:ae:2c:23:9a:6f:
12:40:bb:9f:d3:65:b8:e3:f5:d5:f5:d2:af:2b:45:
64:c4:8a:a6:02:9d:af:9f:3c:c5:38:dc:f1:d7:04:
ea:8d:31:9e:b4:a0:55:05:a1:e7:73:a6:49:1c:ed:
86:e4:87:c7:bc:04:15:73:e4:89:35:c1:e5:d6:df:
7d:2f:3a:61:8e:32:26:73:26:07:b1:13:33:98:9c:
b5:b3:f0:26:61:e3:a5:e6:be:36:5a:56:86:c6:57:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:89:A9:02:6B:04:98:AC:C3:9A:C3:B0:03:6B:CC:7B:E6:EC:42:67
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/F4mpAmsEmKzDmsOwA2vMe-bsQmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:de:a2:13:51:c3:e5:80:d5:af:2f:7e:f8:61:81:dc:d9:f8:
d4:9d:27:06:04:7b:2d:3a:80:ef:14:15:dc:51:9b:54:70:a5:
92:85:f4:8f:a3:76:f8:ec:ba:6f:5a:20:41:8d:0d:07:59:51:
67:3c:6e:46:39:3c:03:95:e5:ba:d0:df:a1:c7:d0:a2:2f:67:
62:43:33:b6:71:8e:76:d4:9b:6d:e3:85:8b:e3:7e:ad:cb:11:
81:64:65:a6:3a:b8:78:31:48:45:a3:03:53:61:da:6e:41:48:
d6:94:a4:f9:c1:5c:e2:15:39:b0:8d:4f:5d:bc:14:4f:a3:f9:
c4:7e:93:90:ce:9d:3c:2f:bf:2e:e8:d9:c1:f6:99:5c:d7:3c:
19:22:68:94:1f:72:bb:be:57:e2:8f:d2:d2:44:39:b0:4a:5f:
be:a8:ad:f5:20:0d:25:3b:9a:59:28:e3:23:05:fe:cf:a0:85:
85:a9:cc:93:4d:f8:d4:fb:3c:e7:50:14:67:51:01:9e:37:5d:
da:f6:ad:fd:09:ef:18:44:96:72:50:19:13:18:31:40:0c:7a:
7c:56:d3:4f:31:61:19:22:49:09:26:da:50:0d:dc:cb:a1:6b:
cc:c2:21:1c:45:46:b0:25:ed:51:cf:a9:7a:bf:e6:73:b3:70:
26:12:10:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:01 2025 by rpki-client