Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NWvlicgb7xK0Z6P0wPpjJ3aUCeE.roa
File: NWvlicgb7xK0Z6P0wPpjJ3aUCeE.roa (raw, json)
Hash identifier: mqvwNQWLywKuYScK37GtH+IRIK+nYp1UGioBi1pZz6o=
Subject key identifier: 35:6B:E5:89:C8:1B:EF:12:B4:67:A3:F4:C0:FA:63:27:76:94:09:E1
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01869E4C0BD18CD9431AA5B620A77CCCFB44
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NWvlicgb7xK0Z6P0wPpjJ3aUCeE.roa
Signing time: Wed 01 Mar 2023 17:50:29 +0000
ROA not before: Wed 01 Mar 2023 17:50:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 14.102.233.0/24 maxlen: 24
14.102.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9e:4c:0b:d1:8c:d9:43:1a:a5:b6:20:a7:7c:cc:fb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 1 17:50:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=356be589c81bef12b467a3f4c0fa6327769409e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:44:95:23:48:4f:d0:1a:5b:c5:ce:cf:6f:
58:6e:fe:9a:5b:b3:87:93:3c:15:53:82:bd:b0:a1:
84:a9:e1:4d:a7:4e:7c:f3:d4:50:1a:0f:fa:92:3b:
bb:66:89:02:dd:b0:53:8d:cd:63:f0:c1:40:aa:22:
3c:7e:24:11:4f:aa:78:2b:84:1e:e1:77:0c:9b:d8:
9d:a2:c3:c9:dd:d7:a7:ca:66:ba:33:d8:cd:26:af:
fa:b2:ba:79:d7:fb:c0:fa:d4:41:f1:3e:39:b5:a3:
4c:b5:f7:b6:78:bb:b0:2c:04:c8:4d:2f:51:47:32:
da:20:35:3e:09:69:7e:03:1b:e9:28:a5:5d:a5:4e:
1c:68:5c:cb:ab:0f:c4:94:93:75:e8:f3:f4:81:8d:
b2:42:e7:e0:73:b2:6b:78:96:f1:12:45:aa:af:5c:
d3:a0:dd:69:10:54:da:c1:6f:c3:9f:8c:dc:a6:a2:
b8:70:62:f3:49:ed:0a:b6:9b:34:80:dc:93:b8:18:
66:52:51:2d:a2:51:d8:87:1a:37:d0:5e:11:e1:c8:
f0:e7:a7:28:23:6e:10:a4:f6:64:43:3b:86:63:61:
0f:0a:b2:88:4d:cd:22:21:70:20:21:e9:1b:4e:f7:
8f:b8:67:58:1d:02:79:13:01:61:ed:86:b6:a2:fe:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:E5:89:C8:1B:EF:12:B4:67:A3:F4:C0:FA:63:27:76:94:09:E1
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NWvlicgb7xK0Z6P0wPpjJ3aUCeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.233.0/24
14.102.237.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:fc:2f:f4:0b:e1:c3:0c:65:ac:a8:4e:05:2d:48:3c:a0:58:
08:70:80:e6:fb:25:09:88:e5:14:03:bb:d9:4f:8c:9f:9d:d9:
25:91:59:84:bc:1f:b5:79:aa:6e:91:cb:4e:17:cc:0e:7e:ef:
b6:ff:e3:c9:89:1b:0f:ff:96:f1:b9:16:e2:bf:ad:c6:84:17:
57:d9:c4:2c:e2:9d:9a:95:67:06:9f:9d:8c:8f:aa:8a:d9:c4:
eb:5e:bc:37:af:b3:4a:7c:47:85:a6:9b:f7:7d:74:d7:2b:53:
ff:55:29:b4:cf:98:4f:1b:83:47:d0:95:ac:c5:63:66:f0:42:
54:00:dd:cd:de:6a:56:34:a7:98:1f:34:27:cf:c4:63:9d:13:
f5:af:6a:7a:79:75:85:f7:31:64:c6:25:4e:31:f8:11:f0:d7:
17:71:5f:61:02:51:8e:a8:9e:7d:a0:85:9d:8e:f1:d4:af:e3:
5b:72:54:ce:9b:2d:5d:17:f5:82:06:0d:59:20:32:c9:fa:cc:
ba:a1:f3:7c:b4:ed:30:79:59:96:e9:4d:24:a5:09:73:10:76:
0d:d8:ec:ac:8b:f0:b9:eb:55:e6:70:8b:68:1d:f7:f7:1a:2d:
f8:90:f5:09:5f:3d:a9:0d:de:96:91:e3:5e:22:48:0b:11:3e:
85:f1:8b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:52 2025 by rpki-client