Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/WEVbTf-oiwm-VC4_i8mfKQRpIeg.roa
File: WEVbTf-oiwm-VC4_i8mfKQRpIeg.roa (raw, json)
Hash identifier: pgh5kp1RH14w+13PzjOBHCDoUg9XJMStIwg8Mjhf0M4=
Subject key identifier: 58:45:5B:4D:FF:A8:8B:09:BE:54:2E:3F:8B:C9:9F:29:04:69:21:E8
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019422200F2C5535E7353323F914381C0484
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/WEVbTf-oiwm-VC4_i8mfKQRpIeg.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 14.102.230.0/24 maxlen: 24
94.229.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0f:2c:55:35:e7:35:33:23:f9:14:38:1c:04:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=58455b4dffa88b09be542e3f8bc99f29046921e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:5e:5d:2e:fe:f6:f7:60:0b:e2:0a:72:07:
eb:f0:83:85:19:66:64:6e:e5:86:9a:17:90:07:40:
06:75:31:82:36:ac:ce:89:8f:f5:dc:f0:24:0e:3d:
1a:36:8e:0f:91:d4:18:d2:5e:83:01:e2:00:74:81:
bb:77:82:d1:c3:2f:ff:da:8d:74:16:81:e2:14:48:
d5:69:95:52:18:80:df:af:66:70:fc:14:a0:9e:9c:
da:1a:30:3e:5f:c4:59:95:18:c0:cc:37:74:a8:de:
92:74:fe:d3:79:9a:de:76:d3:e0:be:92:5a:e1:50:
f3:15:b7:77:96:94:3b:5a:7f:c0:e3:66:3d:0d:d7:
dc:50:ec:a4:18:7d:0a:45:db:00:cf:3e:df:04:3f:
ba:cb:3a:3e:05:7b:94:98:de:7b:9e:3c:7c:a4:ef:
57:89:c5:56:46:46:f9:8a:b2:62:e7:0d:b5:1e:62:
04:42:3d:9a:d3:9b:1f:8b:25:37:45:5e:7a:7f:70:
e5:7b:a5:46:84:cb:9d:3a:32:0d:24:6a:cd:00:6a:
69:cd:c9:92:19:68:c0:5f:1d:30:41:57:27:39:a7:
fd:ea:56:12:91:97:a0:b3:47:77:91:cc:53:f0:19:
a3:b2:d6:7b:56:92:f2:70:8b:a4:aa:b5:4e:b9:aa:
d8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:45:5B:4D:FF:A8:8B:09:BE:54:2E:3F:8B:C9:9F:29:04:69:21:E8
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/WEVbTf-oiwm-VC4_i8mfKQRpIeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.230.0/24
94.229.208.0/24
Signature Algorithm: sha256WithRSAEncryption
be:44:81:62:ac:d6:39:57:5f:02:12:66:51:f1:66:c2:49:97:
86:e1:af:13:aa:78:bb:c8:02:34:57:5d:13:39:ca:a8:25:3b:
80:39:24:29:24:4c:12:73:7d:9d:88:45:39:ac:43:83:c7:1e:
60:d7:9a:4a:9e:b2:c1:60:7b:fd:67:44:d4:a1:1c:c0:10:af:
ab:92:e8:f8:2b:82:b9:19:0d:de:41:a7:c1:17:ec:d1:04:51:
95:82:f8:a6:e2:f2:24:79:a9:be:e5:31:cc:3a:98:54:2e:7c:
c0:1a:40:d6:81:cb:ac:08:fd:7a:e5:25:b0:61:c7:70:d5:e5:
9d:4b:7e:2f:41:8b:aa:ae:69:3d:9b:41:b6:b3:b3:51:0c:a3:
aa:2d:f3:97:51:0e:47:26:52:e2:19:26:d9:b9:be:fa:29:8a:
d5:d6:5a:73:aa:9d:74:6d:91:d7:36:ba:31:6f:c5:4f:e0:48:
b8:73:0a:e6:d3:ba:68:f9:37:36:4e:5e:36:1d:06:34:62:a0:
ab:f2:87:e7:f6:89:8e:72:af:a9:c9:3a:9b:fc:a6:aa:4d:c7:
44:00:ee:71:95:9d:6a:5a:83:1f:cd:e8:31:f4:c4:6b:f4:bf:
42:2a:82:39:5d:c2:14:fa:ab:65:93:99:7d:68:3f:a8:a8:d3:
37:3e:72:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:01 2025 by rpki-client