Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/GNgUKrYJtug0aq57pYO7WvdfSGk.roa
File: GNgUKrYJtug0aq57pYO7WvdfSGk.roa (raw, json)
Hash identifier: gtpHAH+L+1EVMmcZlwjxrdzA5bDoxH2ON5vowDZp1XA=
Subject key identifier: 18:D8:14:2A:B6:09:B6:E8:34:6A:AE:7B:A5:83:BB:5A:F7:5F:48:69
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01942220170DF1F4AE6B2DFDF23644DC9F9F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/GNgUKrYJtug0aq57pYO7WvdfSGk.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142036
IP address blocks: 14.102.237.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
14.102.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:17:0d:f1:f4:ae:6b:2d:fd:f2:36:44:dc:9f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18d8142ab609b6e8346aae7ba583bb5af75f4869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:6e:3c:17:34:91:07:72:66:9f:b7:d7:75:
96:a1:e3:9c:0f:48:63:f1:80:7e:32:d6:3a:e4:46:
8b:11:09:da:2e:2c:3b:68:e1:1d:60:0f:ef:6c:35:
84:f8:a0:92:e3:71:fe:7b:f7:f4:77:85:bf:1e:de:
b0:26:44:27:59:f2:b3:16:b9:03:2f:31:c9:6e:1d:
20:82:13:9d:a1:dd:01:90:69:8f:f6:f8:06:a1:e3:
98:7b:ba:d3:e4:2b:17:44:99:86:85:0e:9a:16:e5:
f8:61:f4:8c:f9:80:c7:d1:4b:48:36:c1:5f:e7:d1:
78:fa:fd:61:65:b4:37:2c:4b:e7:9b:3a:24:5c:1c:
25:6a:6c:d1:b6:1b:9f:0a:5d:4a:d5:08:1c:8a:d2:
72:80:bc:e9:3c:0d:74:b9:be:f1:88:f9:90:c2:b2:
a5:e8:65:09:06:30:e6:92:e0:1d:85:d7:0b:a8:86:
e5:2f:24:70:eb:e3:23:32:7c:5b:13:40:2a:d4:d1:
b9:9d:dd:bd:29:58:bb:ba:34:5e:8b:36:6c:79:fb:
db:d9:5e:dd:2f:67:9a:2f:2d:1b:01:92:0e:dd:54:
ee:b2:6f:fa:e6:8b:9a:02:a4:aa:05:a7:71:b2:a7:
60:a9:bb:d5:e5:85:6a:35:2b:b9:4a:38:44:77:9a:
61:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D8:14:2A:B6:09:B6:E8:34:6A:AE:7B:A5:83:BB:5A:F7:5F:48:69
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/GNgUKrYJtug0aq57pYO7WvdfSGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.237.0-14.102.239.255
Signature Algorithm: sha256WithRSAEncryption
6d:e3:a5:a6:7c:6f:c4:d0:fa:ec:7d:bf:92:ae:93:68:9a:84:
a3:98:6e:85:e1:5d:f7:05:f8:9b:1a:5d:aa:43:14:0e:4b:75:
40:3f:ae:8a:57:30:25:39:40:1b:6c:3e:23:74:39:4c:af:b8:
6d:83:60:31:03:cf:8a:62:9a:2a:de:dc:6e:65:55:d8:5d:07:
1c:ff:79:a0:e5:a7:f9:3d:d4:cf:21:c6:99:c6:1c:f0:6d:4e:
7e:77:d7:d4:97:47:2c:91:f8:e9:75:ff:49:b9:e9:56:7d:2f:
82:1a:a5:89:40:6d:7e:2d:f3:ad:97:0a:a1:a0:dd:57:21:2f:
68:4d:88:c2:59:60:62:a0:3b:d5:ae:cf:f2:1d:37:7c:79:05:
cc:48:97:22:2c:67:bb:dd:42:97:1f:29:cf:cd:c2:3d:1e:16:
2c:a1:8c:49:c0:7d:29:c9:6d:cb:ec:f1:58:19:c9:dd:57:f1:
71:39:8b:3a:22:2f:97:f1:c6:e6:03:99:2b:41:25:28:fe:07:
81:fe:c9:af:f6:6a:49:45:55:0f:cf:2c:d4:11:bd:42:d2:b0:
d6:b0:c8:43:eb:80:9b:9e:07:85:36:ae:62:3e:e8:5c:85:56:
96:e1:af:7e:5f:fd:94:41:00:7e:37:c6:8f:ef:13:d1:bf:22:
85:aa:a3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:45 2025 by rpki-client