Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XTlrI8b_OC0aV15XZ095e1Ci7Y8.roa
File: XTlrI8b_OC0aV15XZ095e1Ci7Y8.roa (raw, json)
Hash identifier: Mwf78PkxzvQXcCg+XHIcUCVe0mfChUmCbsoGApyDSqE=
Subject key identifier: 5D:39:6B:23:C6:FF:38:2D:1A:57:5E:57:67:4F:79:7B:50:A2:ED:8F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01873FCDA534B27742AF5A4B2355DCFB375E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XTlrI8b_OC0aV15XZ095e1Ci7Y8.roa
Signing time: Sun 02 Apr 2023 02:30:54 +0000
ROA not before: Sun 02 Apr 2023 02:30:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 14.102.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3f:cd:a5:34:b2:77:42:af:5a:4b:23:55:dc:fb:37:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 2 02:30:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d396b23c6ff382d1a575e57674f797b50a2ed8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2e:0c:8d:ca:85:dd:44:d2:13:aa:fd:00:24:
97:3a:a7:01:9b:41:40:2a:df:e4:6c:d1:f1:a6:e7:
bf:12:5b:0a:a2:25:b4:c9:5c:ed:e7:57:a8:df:31:
60:09:a0:a9:66:eb:4e:43:b2:34:92:54:ca:a0:3e:
88:ec:be:88:44:9c:0a:ab:bf:f6:6a:b7:f7:5e:2f:
df:92:08:50:8b:5e:48:ae:b4:02:03:c6:a0:71:91:
ba:63:5f:0e:05:a1:2a:c0:55:a0:f4:9f:ab:0e:b3:
f6:d7:6b:62:e4:d5:87:67:3f:df:ee:05:59:f6:b4:
1e:e4:34:c9:43:92:67:9c:ef:10:4e:c5:ef:07:75:
ef:6c:20:de:eb:c6:5f:31:05:f8:c4:28:f1:f0:b9:
51:c4:e2:ee:d1:51:d5:e5:99:20:96:c0:a0:7a:e0:
c9:c2:8a:ac:ef:cb:2a:9a:5c:2d:96:30:23:c5:51:
73:bd:cc:3c:bc:9c:83:03:ca:9e:25:b9:5f:17:ed:
17:0c:1d:83:1a:66:2d:a3:62:5d:3a:df:57:b7:4c:
38:6f:d7:31:04:29:14:58:30:85:f3:cc:9a:81:71:
97:fb:f9:f3:2f:87:13:56:22:5d:23:db:1a:22:ae:
4b:ad:a2:c5:bb:bd:98:de:94:fa:b2:95:8c:4d:31:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:39:6B:23:C6:FF:38:2D:1A:57:5E:57:67:4F:79:7B:50:A2:ED:8F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/XTlrI8b_OC0aV15XZ095e1Ci7Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.237.0/24
Signature Algorithm: sha256WithRSAEncryption
72:37:ab:b4:a9:a0:99:42:62:dd:aa:49:af:c1:25:dc:cc:c9:
3e:53:3d:38:67:51:62:95:ac:25:c0:2a:88:5a:81:1e:32:d7:
36:1a:5e:a7:78:c2:b4:26:86:ff:de:91:aa:ed:81:3c:31:33:
1b:12:01:ca:af:14:5c:ca:c2:ac:40:3e:25:6e:8e:73:2e:e9:
7c:b7:fc:01:31:20:f8:76:26:ee:30:34:d9:a1:05:aa:a6:b0:
d6:c4:86:55:ad:17:b0:68:c2:0a:18:b4:c4:64:22:9c:d7:06:
97:e4:aa:b0:e9:64:de:1f:72:48:6e:f2:a7:dc:cd:61:3d:fd:
c4:fc:96:26:eb:19:58:9c:97:85:04:6a:fb:e0:ec:5f:b8:f9:
1a:53:08:f9:de:3e:d9:b2:1d:f3:db:a0:f1:f8:c3:35:73:05:
12:57:4c:79:6c:3a:ea:a6:96:a5:cc:17:34:22:fa:11:52:d2:
c8:a7:19:6b:2d:d2:a5:21:98:6d:54:2a:d5:08:18:92:28:b4:
43:46:02:94:f5:cf:81:20:3b:de:63:fb:95:a6:0d:d9:a7:cf:
5b:c3:22:67:a6:fa:1b:bf:e9:35:c2:6f:c9:50:38:3b:25:1f:
7a:4d:67:c3:9d:48:1e:eb:28:40:d3:b1:b8:cc:5c:50:20:e8:
35:56:01:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:29 2025 by rpki-client