Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/SxlIEqU4aAnEFMMXOo-NJUOd6XA.roa
File: SxlIEqU4aAnEFMMXOo-NJUOd6XA.roa (raw, json)
Hash identifier: 9ckNDd6dmdkSy7Hu6HMu30Yy8B5vGxMrypN16s9KqOU=
Subject key identifier: 4B:19:48:12:A5:38:68:09:C4:14:C3:17:3A:8F:8D:25:43:9D:E9:70
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018689FF5AC855F77159BE6031FD95F14207
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/SxlIEqU4aAnEFMMXOo-NJUOd6XA.roa
Signing time: Sat 25 Feb 2023 19:14:18 +0000
ROA not before: Sat 25 Feb 2023 19:14:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 14.102.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:89:ff:5a:c8:55:f7:71:59:be:60:31:fd:95:f1:42:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 25 19:14:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b194812a5386809c414c3173a8f8d25439de970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:48:0a:0f:54:a7:52:30:47:e6:c6:c5:83:
5a:9f:86:0a:e1:d9:4e:6e:f4:cd:45:88:c7:88:04:
47:b3:71:13:d6:19:c4:bb:14:3a:8f:34:18:3d:b6:
44:d0:9d:a5:b7:9e:9f:9b:0b:c7:65:22:c9:12:39:
e1:1a:0f:b8:10:e3:02:ac:16:ac:3b:67:08:cb:d1:
de:17:b8:8c:cc:36:41:c1:87:77:da:96:b3:8f:55:
0f:1c:38:5e:7e:2c:55:7d:87:d5:83:e4:21:1e:e7:
d6:a5:7c:bd:3e:3d:57:4f:4a:a8:bd:1e:b8:bb:b5:
2e:67:dd:78:93:39:c6:d4:5e:04:28:80:d5:9c:eb:
b8:a1:18:51:03:3f:54:b8:f6:84:a2:17:6f:db:8a:
a0:ea:72:4b:4a:e4:5d:fc:e5:ab:ce:39:88:03:c3:
af:c6:30:1e:f7:dd:9e:40:89:a8:94:cf:5a:08:f0:
ba:cf:52:23:7a:35:a4:9c:49:fa:4e:5d:d9:c4:e9:
10:d0:ac:96:14:85:1c:a8:3f:24:21:d8:4c:96:d6:
77:27:95:24:be:15:13:5f:92:96:8b:23:31:ca:ec:
c9:a3:df:ef:19:c7:ee:cb:e9:69:d5:b4:82:19:5d:
db:2a:3e:20:1c:5f:c4:3e:f9:9f:a2:14:05:5e:c4:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:19:48:12:A5:38:68:09:C4:14:C3:17:3A:8F:8D:25:43:9D:E9:70
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/SxlIEqU4aAnEFMMXOo-NJUOd6XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.236.0/24
Signature Algorithm: sha256WithRSAEncryption
36:75:42:1a:6a:bb:d7:b8:f7:0b:f8:41:5e:e2:5f:1e:cc:69:
ad:25:42:bb:eb:9d:2a:9a:a0:bd:8d:b8:37:a3:42:c8:ab:c5:
3c:a1:66:b2:1c:7c:7a:fc:bf:71:4b:7a:cd:34:c3:1f:0e:7b:
cb:fa:65:51:e2:ba:4b:73:1a:8a:97:b2:37:91:6d:39:a6:b9:
80:60:cc:47:87:1c:56:1e:46:d9:93:e4:9b:61:ed:81:bd:d5:
cc:87:be:b9:60:f8:78:7b:74:32:fc:6f:83:48:0d:fd:9e:90:
5f:4e:31:06:25:e9:cc:8f:66:b6:01:0e:fa:49:00:34:3d:f6:
3c:82:6a:a4:38:5f:9a:e7:ea:65:2c:a1:3c:77:e4:d1:f3:82:
88:61:a8:1a:18:f4:ff:d3:69:52:6f:3b:fa:cf:e4:1c:0e:94:
c8:84:43:a6:9c:d5:ea:7e:09:0f:5f:e5:d9:27:40:4f:61:40:
0e:70:73:37:f4:e1:88:0a:00:66:c6:6c:fd:65:8a:08:6b:0d:
1f:bb:38:56:47:4a:21:07:ae:3f:11:25:76:0a:00:d1:fd:cb:
5d:b0:cd:21:e2:34:08:8d:35:43:fe:00:c6:35:88:48:0c:1d:
3a:ea:ff:ac:0c:b8:a5:46:99:fc:c5:e0:6b:53:60:1d:8e:01:
b0:6f:15:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaJ/1rIVfdxWb5gMf2V8UIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjMwMjI1MTkxNDE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjE5NDgxMmE1Mzg2ODA5YzQxNGMzMTczYThmOGQyNTQzOWRlOTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRlICg9Up1IwR+bGxYNan4YK4dlO
bvTNRYjHiARHs3ET1hnEuxQ6jzQYPbZE0J2lt56fmwvHZSLJEjnhGg+4EOMCrBas
O2cIy9HeF7iMzDZBwYd32pazj1UPHDhefixVfYfVg+QhHufWpXy9Pj1XT0qovR64
u7UuZ914kznG1F4EKIDVnOu4oRhRAz9UuPaEohdv24qg6nJLSuRd/OWrzjmIA8Ov
xjAe992eQImolM9aCPC6z1IjejWknEn6Tl3ZxOkQ0KyWFIUcqD8kIdhMltZ3J5Uk
vhUTX5KWiyMxyuzJo9/vGcfuy+lp1bSCGV3bKj4gHF/EPvmfohQFXsQu7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEsZSBKlOGgJxBTDFzqPjSVDnelwMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvU3hsSUVxVTRhQW5FRk1NWE9vLU5KVU9kNlhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADmbsMA0G
CSqGSIb3DQEBCwUAA4IBAQA2dUIaarvXuPcL+EFe4l8ezGmtJUK7650qmqC9jbg3
o0LIq8U8oWayHHx6/L9xS3rNNMMfDnvL+mVR4rpLcxqKl7I3kW05prmAYMxHhxxW
HkbZk+SbYe2BvdXMh765YPh4e3Qy/G+DSA39npBfTjEGJenMj2a2AQ76SQA0PfY8
gmqkOF+a5+plLKE8d+TR84KIYagaGPT/02lSbzv6z+QcDpTIhEOmnNXqfgkPX+XZ
J0BPYUAOcHM39OGICgBmxmz9ZYoIaw0fuzhWR0ohB64/ESV2CgDR/ctdsM0h4jQI
jTVD/gDGNYhIDB066v+sDLilRpn8xeBrU2AdjgGwbxXK
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:20 2025 by rpki-client