Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RZBAEgvosei36EKGC95zjB-EsG8.roa
File: RZBAEgvosei36EKGC95zjB-EsG8.roa (raw, json)
Hash identifier: /YsFEZFDXH/JJ4oVu7dNep43c7nFVs2vQQnupUj+4QA=
Subject key identifier: 45:90:40:12:0B:E8:B1:E8:B7:E8:42:86:0B:DE:73:8C:1F:84:B0:6F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01935B8234E928C71AF6B32BE9E5967303E3
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RZBAEgvosei36EKGC95zjB-EsG8.roa
Signing time: Sun 24 Nov 2024 00:11:19 +0000
ROA not before: Sun 24 Nov 2024 00:11:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5b:82:34:e9:28:c7:1a:f6:b3:2b:e9:e5:96:73:03:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 24 00:11:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=459040120be8b1e8b7e842860bde738c1f84b06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:23:03:54:2a:d9:fe:1a:0b:b4:16:bc:78:b8:
a9:aa:f0:28:b9:8c:0a:d6:20:33:9b:ad:30:ba:c7:
4a:e8:85:0a:73:ed:a6:50:3b:7a:4c:01:f6:e5:34:
78:5c:01:d2:fb:f6:4d:90:59:ad:1b:fe:a0:84:5d:
e1:0a:4d:55:45:d6:66:cc:6e:29:ac:98:34:50:ff:
9b:8a:a0:f7:2f:f8:18:b4:49:f0:a7:01:a7:f0:28:
87:a2:9f:77:7d:ee:38:68:3a:e8:64:7b:cc:8a:b2:
26:15:65:bd:d7:0d:73:ed:3a:70:ba:f2:92:83:69:
43:0d:0e:2e:21:50:68:37:84:03:48:fd:10:b4:ba:
e1:f1:d8:92:48:10:c4:f0:b8:51:bb:32:4d:92:71:
db:a9:ba:5f:a9:cf:fc:1a:ed:cd:ce:15:75:95:a3:
8e:64:2e:89:a2:41:ac:fc:da:6c:fa:79:6d:b9:3f:
d9:e0:0e:02:f3:65:2c:5e:0b:66:3a:ae:08:14:e0:
15:cd:f0:67:5e:74:6f:23:38:9a:09:6d:5d:0c:2b:
d9:a0:c8:ff:38:8b:43:2c:64:40:47:85:c6:29:30:
70:e4:9e:26:d4:7e:39:be:16:30:ff:92:5b:6b:4e:
67:94:19:72:29:20:ae:2b:e7:21:2b:7e:b8:e2:f5:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:90:40:12:0B:E8:B1:E8:B7:E8:42:86:0B:DE:73:8C:1F:84:B0:6F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RZBAEgvosei36EKGC95zjB-EsG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.234.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:bc:8a:94:1f:a0:2e:9d:46:4d:cf:15:02:8a:61:57:8a:f6:
81:1a:de:6a:45:83:42:bd:a0:9d:07:fa:9d:e2:79:91:01:43:
19:ba:2c:cf:68:8d:70:91:fa:45:d2:26:b8:2a:b9:cb:f0:5b:
bc:13:fe:94:18:b9:fb:46:80:d4:d2:a9:b0:3c:47:d1:35:ef:
38:22:32:43:9b:f9:09:e5:ea:ae:55:7c:93:87:92:e8:f3:2d:
54:de:95:7f:89:e5:0e:37:bf:d4:41:44:19:a2:73:5e:64:a4:
3f:18:ae:20:13:08:dd:0c:70:ea:7a:10:5f:2a:b2:f4:4a:15:
ee:52:7c:f5:62:83:37:c6:be:01:d9:08:7d:af:28:0e:37:c7:
32:49:32:05:be:48:e1:16:f8:c0:80:6c:0d:a3:a9:1d:55:67:
0e:98:eb:57:21:ef:72:b3:f7:90:b3:bb:44:a5:b2:64:87:50:
ad:34:6b:22:bf:3b:ac:63:79:ae:01:87:87:63:be:34:23:8a:
09:0d:75:84:d8:ee:4c:85:84:dd:01:c4:bd:de:d6:86:60:58:
54:1d:4b:1b:09:3e:aa:40:83:3d:2d:08:4b:c2:0c:c5:12:b2:
f8:06:8f:f1:70:84:db:4f:28:f5:f0:33:8b:e6:ee:03:9c:ea:
38:45:4e:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNbgjTpKMca9rMr6eWWcwPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjQxMTI0MDAxMTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTkwNDAxMjBiZThiMWU4YjdlODQyODYwYmRlNzM4YzFmODRiMDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yMDVCrZ/hoLtBa8eLipqvAouYwK
1iAzm60wusdK6IUKc+2mUDt6TAH25TR4XAHS+/ZNkFmtG/6ghF3hCk1VRdZmzG4p
rJg0UP+biqD3L/gYtEnwpwGn8CiHop93fe44aDroZHvMirImFWW91w1z7TpwuvKS
g2lDDQ4uIVBoN4QDSP0QtLrh8diSSBDE8LhRuzJNknHbqbpfqc/8Gu3NzhV1laOO
ZC6JokGs/Nps+nltuT/Z4A4C82UsXgtmOq4IFOAVzfBnXnRvIziaCW1dDCvZoMj/
OItDLGRAR4XGKTBw5J4m1H45vhYw/5Jba05nlBlyKSCuK+chK3644vXGqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEWQQBIL6LHot+hChgvec4wfhLBvMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvUlpCQUVndm9zZWkzNkVLR0M5NXpqQi1Fc0c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADmbqMA0G
CSqGSIb3DQEBCwUAA4IBAQDXvIqUH6AunUZNzxUCimFXivaBGt5qRYNCvaCdB/qd
4nmRAUMZuizPaI1wkfpF0ia4KrnL8Fu8E/6UGLn7RoDU0qmwPEfRNe84IjJDm/kJ
5equVXyTh5Lo8y1U3pV/ieUON7/UQUQZonNeZKQ/GK4gEwjdDHDqehBfKrL0ShXu
Unz1YoM3xr4B2Qh9rygON8cySTIFvkjhFvjAgGwNo6kdVWcOmOtXIe9ys/eQs7tE
pbJkh1CtNGsivzusY3muAYeHY740I4oJDXWE2O5MhYTdAcS93taGYFhUHUsbCT6q
QIM9LQhLwgzFErL4Bo/xcITbTyj18DOL5u4DnOo4RU4+
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:55 2025 by rpki-client