Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RboZyW6M_aosYRQ_cFvmKhWbda8.roa
File: RboZyW6M_aosYRQ_cFvmKhWbda8.roa (raw, json)
Hash identifier: U4V4GzWeq7pvGVEfERwGUoxuzstslo+y7pGUsxEZyI8=
Subject key identifier: 45:BA:19:C9:6E:8C:FD:AA:2C:61:14:3F:70:5B:E6:2A:15:9B:75:AF
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0186750E01B2A1AE989C635144A9DF31D921
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RboZyW6M_aosYRQ_cFvmKhWbda8.roa
Signing time: Tue 21 Feb 2023 17:38:17 +0000
ROA not before: Tue 21 Feb 2023 17:38:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 14.102.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:0e:01:b2:a1:ae:98:9c:63:51:44:a9:df:31:d9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 21 17:38:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45ba19c96e8cfdaa2c61143f705be62a159b75af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:84:12:14:ed:00:30:7d:c8:27:08:af:70:
a1:05:50:25:24:ca:8f:f1:6b:01:41:75:b3:42:5c:
cf:9c:8a:22:6b:87:34:f9:94:3f:c5:1c:38:a1:17:
70:eb:a8:61:1a:e0:ab:5d:67:bd:07:e1:5a:d5:d8:
d5:4a:b8:e2:1a:b2:80:ec:ec:de:8a:37:d9:d0:d8:
55:a0:2a:1c:7d:25:bb:ee:1b:b8:57:70:f2:bb:99:
ce:b1:76:4f:b0:57:c3:3b:e3:14:40:46:06:9f:8c:
ac:c2:ab:06:2f:5a:ae:2e:92:ba:48:2d:5d:56:04:
8b:7a:55:c8:41:39:dd:76:ac:77:f0:ea:f8:a0:6f:
93:e1:3d:e2:0b:53:5a:29:d3:8b:01:1f:f6:95:4c:
9c:92:1d:75:55:af:3b:89:ea:fb:a5:5a:29:1b:55:
71:1b:e1:73:91:99:39:ee:88:eb:fe:0a:cc:31:4e:
66:d1:c5:fe:62:a2:56:a3:bd:21:e8:52:d2:e1:22:
6a:64:f7:d6:2c:b7:dd:3a:57:af:ed:08:40:b6:32:
33:30:c6:89:11:33:81:19:a7:7f:f9:48:52:9b:3b:
88:f4:12:f5:d4:63:40:d4:8c:5f:e8:c4:70:e8:16:
be:76:51:c1:a2:df:96:6b:96:41:56:41:48:25:91:
78:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:19:C9:6E:8C:FD:AA:2C:61:14:3F:70:5B:E6:2A:15:9B:75:AF
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RboZyW6M_aosYRQ_cFvmKhWbda8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:fb:f1:c9:12:46:e1:2f:23:f6:dc:b0:f4:8c:d3:37:93:5a:
fc:ba:9e:54:63:40:01:6f:3f:eb:c4:fd:eb:aa:4c:24:3c:aa:
2f:b2:d5:cf:41:73:0f:34:a6:aa:0f:0a:07:81:11:e2:52:9e:
c8:22:e1:20:0b:b7:3b:58:f9:18:08:44:6f:ce:2c:9b:92:43:
49:ed:d3:04:c1:da:92:ab:c1:10:ef:6b:d3:27:1e:7f:08:ae:
d1:5d:1f:ba:8f:26:98:e8:6b:e1:4d:16:21:f6:b6:09:c0:94:
16:48:b3:e4:12:21:05:8b:bb:ee:13:02:86:df:ea:65:5a:92:
16:84:41:dc:49:b9:34:6a:28:95:66:03:44:74:54:ed:65:79:
e0:07:b9:04:7f:af:da:7e:07:ab:e9:6a:3f:1a:0c:cc:db:ee:
81:46:5a:00:92:56:23:32:60:a2:1d:0e:41:94:9b:50:80:e0:
9e:c9:eb:38:9c:77:23:24:75:1a:a3:33:a4:64:4d:3f:d8:ad:
2c:0d:fb:70:d7:27:a5:d4:0c:84:3e:92:60:62:15:29:96:3b:
d7:56:9d:7d:b3:9b:10:72:6f:1d:74:12:45:a1:e3:a0:3d:49:
0c:42:a0:d5:d5:ac:8e:c4:92:37:fe:58:c3:e4:01:0a:21:5d:
01:e2:c4:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ1DgGyoa6YnGNRRKnfMdkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjMwMjIxMTczODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWJhMTljOTZlOGNmZGFhMmM2MTE0M2Y3MDViZTYyYTE1OWI3NWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtCEEhTtADB9yCcIr3ChBVAlJMqP
8WsBQXWzQlzPnIoia4c0+ZQ/xRw4oRdw66hhGuCrXWe9B+Fa1djVSrjiGrKA7Oze
ijfZ0NhVoCocfSW77hu4V3Dyu5nOsXZPsFfDO+MUQEYGn4yswqsGL1quLpK6SC1d
VgSLelXIQTnddqx38Or4oG+T4T3iC1NaKdOLAR/2lUyckh11Va87ier7pVopG1Vx
G+FzkZk57ojr/grMMU5m0cX+YqJWo70h6FLS4SJqZPfWLLfdOlev7QhAtjIzMMaJ
ETOBGad/+UhSmzuI9BL11GNA1Ixf6MRw6Ba+dlHBot+Wa5ZBVkFIJZF4mwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEW6GclujP2qLGEUP3Bb5ioVm3WvMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvUmJvWnlXNk1fYW9zWVJRX2NGdm1LaFdiZGE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADmbiMA0G
CSqGSIb3DQEBCwUAA4IBAQC1+/HJEkbhLyP23LD0jNM3k1r8up5UY0ABbz/rxP3r
qkwkPKovstXPQXMPNKaqDwoHgRHiUp7IIuEgC7c7WPkYCERvziybkkNJ7dMEwdqS
q8EQ72vTJx5/CK7RXR+6jyaY6GvhTRYh9rYJwJQWSLPkEiEFi7vuEwKG3+plWpIW
hEHcSbk0aiiVZgNEdFTtZXngB7kEf6/afger6Wo/GgzM2+6BRloAklYjMmCiHQ5B
lJtQgOCeyes4nHcjJHUaozOkZE0/2K0sDftw1yel1AyEPpJgYhUpljvXVp19s5sQ
cm8ddBJFoeOgPUkMQqDV1ayOxJI3/ljD5AEKIV0B4sRJ
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:02 2025 by rpki-client