Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/QMyz_NDPuQRYBYKMPnThg7olpMU.roa
File: QMyz_NDPuQRYBYKMPnThg7olpMU.roa (raw, json)
Hash identifier: cBptnb6DV+fos+1XSPbwiIQuJ6Eom8ty9tQTm+tOTtA=
Subject key identifier: 40:CC:B3:FC:D0:CF:B9:04:58:05:82:8C:3E:74:E1:83:BA:25:A4:C5
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01878FF8D4C8425080A03470C8BB6B87FB61
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/QMyz_NDPuQRYBYKMPnThg7olpMU.roa
Signing time: Mon 17 Apr 2023 16:07:41 +0000
ROA not before: Mon 17 Apr 2023 16:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48925
IP address blocks: 14.102.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8f:f8:d4:c8:42:50:80:a0:34:70:c8:bb:6b:87:fb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 17 16:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40ccb3fcd0cfb9045805828c3e74e183ba25a4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:40:3f:c5:49:9e:db:3d:4c:8a:64:7c:36:
1e:22:74:99:ba:c9:f2:99:82:c5:be:e6:2f:2a:31:
92:54:d5:5e:58:e1:f4:84:53:88:30:af:b6:c8:0f:
42:f2:36:d5:ca:32:ef:f7:cb:72:1e:de:7b:4a:e6:
f4:7b:84:a3:40:43:a6:57:64:ef:2b:c4:3e:9d:be:
ab:0f:84:80:d5:13:ec:51:1c:f5:f3:ef:1d:2a:46:
24:a2:c0:ec:6a:1d:41:9f:6b:4e:e4:ab:b1:88:f0:
6d:6f:27:3f:0b:73:6e:75:f6:76:be:15:21:40:de:
ae:dc:af:95:04:eb:67:26:0d:09:4a:78:48:09:67:
aa:88:ad:d6:21:76:49:8f:95:00:d6:58:69:ad:94:
13:5a:b7:bb:e5:06:0b:ab:3b:78:21:55:de:02:44:
5c:a2:f0:c4:fa:ab:58:2a:24:f4:69:f5:6b:08:4b:
df:bc:cf:73:90:5b:9d:35:6e:4c:70:6e:22:f6:30:
4c:c2:7d:6d:9a:88:51:db:5e:7d:1e:2e:1e:9c:bb:
b3:41:5a:5b:d1:e8:1e:23:1b:47:a9:2f:65:02:61:
3c:f6:ee:eb:6f:e4:0e:ba:b6:5d:f5:44:b6:d9:27:
36:a6:0b:97:cb:f3:ee:90:27:a5:ea:ab:be:6b:05:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CC:B3:FC:D0:CF:B9:04:58:05:82:8C:3E:74:E1:83:BA:25:A4:C5
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/QMyz_NDPuQRYBYKMPnThg7olpMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.233.0/24
Signature Algorithm: sha256WithRSAEncryption
03:2c:25:a0:91:94:02:fa:d0:a8:0c:9a:e1:4b:da:ed:13:89:
9d:04:b3:00:18:5b:e5:e4:c0:5e:c3:57:67:2c:6b:17:d1:9d:
9b:0f:d9:45:76:80:fa:e0:21:c8:a1:97:27:c0:b0:66:1f:8f:
95:32:39:91:81:89:a1:b0:25:41:90:50:c5:c9:3f:cb:de:23:
13:ab:08:cb:fc:bb:41:e0:ef:25:39:92:6b:df:04:fe:4d:48:
bb:97:63:cf:3e:f1:65:e5:06:2a:79:81:2a:f9:38:19:a8:85:
51:86:d1:f7:84:fb:34:fd:9d:d7:c6:d5:ea:3c:e8:ee:d8:fb:
43:7a:29:64:7c:3b:35:ad:54:59:5e:59:bc:e6:12:67:d9:e9:
b2:dd:ed:84:16:13:02:b0:82:fd:66:11:e6:e5:ff:23:75:64:
03:da:73:97:e9:ad:d6:d3:a2:e5:6e:e3:9e:82:af:b5:b6:66:
0f:28:35:93:03:c6:df:d8:65:48:fe:c6:4d:3c:24:75:ef:d9:
7a:9a:1d:3f:d1:31:6c:2a:35:aa:0e:98:61:99:e3:a6:08:b6:
a6:54:ab:19:c5:53:d7:f2:db:df:c3:44:87:a1:cb:73:01:ad:
b6:c3:7b:e9:b1:f4:19:98:ac:59:0b:dd:d6:51:8b:84:a9:64:
72:dc:ad:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:24 2025 by rpki-client