Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_-qO10O3m5Gjzxaj_fcHYvxqKqg.roa
File: _-qO10O3m5Gjzxaj_fcHYvxqKqg.roa (raw, json)
Hash identifier: Vzp0864sVjQfnQmkhiuT8lW4DtqJV4+iKEMHWoiyXSU=
Subject key identifier: FF:EA:8E:D7:43:B7:9B:91:A3:CF:16:A3:FD:F7:07:62:FC:6A:2A:A8
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0194C4736D50B28AEBC65CE999C246BA4FD1
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_-qO10O3m5Gjzxaj_fcHYvxqKqg.roa
Signing time: Sun 02 Feb 2025 02:18:06 +0000
ROA not before: Sun 02 Feb 2025 02:18:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.231.0/24 maxlen: 24
14.102.232.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.96.0/24 maxlen: 24
77.111.107.0/24 maxlen: 24
85.208.10.0/24 maxlen: 24
94.229.210.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.221.0/24 maxlen: 24
194.36.32.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:73:6d:50:b2:8a:eb:c6:5c:e9:99:c2:46:ba:4f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 2 02:18:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffea8ed743b79b91a3cf16a3fdf70762fc6a2aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:49:13:c7:5b:3b:2a:4a:bd:54:7e:f5:a9:
8b:c9:01:4f:27:3a:df:db:c7:a9:1e:c2:6c:bb:59:
38:60:9e:c8:30:be:dd:fa:4e:55:f7:4c:5a:4a:89:
1f:4c:21:4e:da:07:bb:21:6c:2f:ee:a2:73:45:8b:
e9:de:95:bd:f0:b2:2e:4e:b4:6b:60:f2:96:3f:d2:
bc:b5:8a:e0:fe:87:74:30:c3:be:f3:c8:41:06:60:
5d:b5:c8:e4:d7:81:32:b1:cd:ac:76:1b:e7:4e:f9:
fd:14:cd:02:89:e2:6e:66:2d:05:e6:c8:35:19:3c:
99:df:23:48:59:10:f8:56:b4:fc:ba:00:c0:ce:21:
88:fe:ab:0c:5b:00:ec:53:9a:2b:89:05:2f:4a:cc:
cd:e0:f1:6c:0a:85:a2:ae:ad:2d:82:3f:98:ca:66:
24:24:88:16:af:e7:09:3e:c3:42:d7:da:ec:8c:56:
5f:75:77:09:a9:f5:56:20:58:41:c4:f5:ad:6e:02:
e3:0b:1e:3c:48:74:d8:cf:95:7d:cb:1b:8a:06:19:
0f:9b:05:71:7a:67:00:68:7e:4c:9e:d2:ca:96:dd:
cd:d7:3c:29:b3:51:12:85:fa:2e:6d:ab:e2:ff:ef:
b3:e4:6e:a1:7a:30:05:94:73:4e:31:42:1a:ba:0e:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EA:8E:D7:43:B7:9B:91:A3:CF:16:A3:FD:F7:07:62:FC:6A:2A:A8
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_-qO10O3m5Gjzxaj_fcHYvxqKqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
14.102.231.0-14.102.232.255
77.111.96.0/22
77.111.107.0/24
85.208.10.0/24
94.229.210.0/24
94.229.212.0/24
94.229.221.0/24
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:42:b2:df:44:f7:04:5c:f2:2c:e4:5c:11:7b:a9:14:d7:6c:
42:54:7c:ee:e8:73:5d:0b:a5:48:d5:f8:7c:24:9b:bd:38:9b:
b3:b1:29:55:09:cd:a5:ee:0b:16:f4:04:05:ac:52:83:e6:dd:
e2:7a:4a:47:40:d6:78:d3:1e:27:f2:3b:db:0f:ea:8e:f4:2f:
d9:52:ae:91:1f:de:d4:99:58:3a:58:27:81:f5:5b:a2:f0:60:
c1:0c:65:cf:07:10:61:b1:65:d2:df:4d:e4:c4:b9:66:62:11:
28:e5:8a:e5:d2:a1:73:27:13:eb:3e:c1:5f:52:3a:5a:75:88:
51:c9:b2:a8:8f:32:c2:ba:f0:f3:38:bf:8f:62:75:ed:71:2c:
d7:98:29:0c:9e:fd:d0:00:d8:34:80:62:be:5e:5f:d8:99:01:
8d:b0:c3:38:09:ec:a9:aa:cb:5f:f6:c7:d7:a0:69:5e:b9:9c:
f3:f7:cb:df:01:7d:56:8e:11:b8:eb:72:d2:68:2f:83:9a:95:
19:0e:9f:71:c8:e2:70:22:e0:d6:d9:1b:78:8a:7b:a0:92:cf:
d9:88:69:9f:e4:59:c5:a5:03:ce:78:9f:a5:23:e3:33:58:6b:
04:9c:32:79:ed:a9:60:f2:3c:25:b1:b7:be:dc:24:10:08:99:
63:3d:d3:73
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZTEc21QsorrxlzpmcJGuk/RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwMjAyMDIxODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmVhOGVkNzQzYjc5YjkxYTNjZjE2YTNmZGY3MDc2MmZjNmEyYWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotRJE8dbOypKvVR+9amLyQFPJzrf
28epHsJsu1k4YJ7IML7d+k5V90xaSokfTCFO2ge7IWwv7qJzRYvp3pW98LIuTrRr
YPKWP9K8tYrg/od0MMO+88hBBmBdtcjk14Eysc2sdhvnTvn9FM0CieJuZi0F5sg1
GTyZ3yNIWRD4VrT8ugDAziGI/qsMWwDsU5oriQUvSszN4PFsCoWirq0tgj+YymYk
JIgWr+cJPsNC19rsjFZfdXcJqfVWIFhBxPWtbgLjCx48SHTYz5V9yxuKBhkPmwVx
emcAaH5MntLKlt3N1zwps1EShfoubavi/++z5G6hejAFlHNOMUIaug5XZQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFP/qjtdDt5uRo88Wo/33B2L8aiqoMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvXy1xTzEwTzNtNUdqenhhal9mY0hZdnhxS3FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQBDmbiMAwD
BAAOZucDBAAOZugDBAJNb2ADBABNb2sDBABV0AoDBABe5dIDBABe5dQDBABe5d0D
BAHCJCAwDQYJKoZIhvcNAQELBQADggEBAI9Cst9E9wRc8izkXBF7qRTXbEJUfO7o
c10LpUjV+Hwkm704m7OxKVUJzaXuCxb0BAWsUoPm3eJ6SkdA1njTHifyO9sP6o70
L9lSrpEf3tSZWDpYJ4H1W6LwYMEMZc8HEGGxZdLfTeTEuWZiESjliuXSoXMnE+s+
wV9SOlp1iFHJsqiPMsK68PM4v49ide1xLNeYKQye/dAA2DSAYr5eX9iZAY2wwzgJ
7Kmqy1/2x9egaV65nPP3y98BfVaOEbjrctJoL4OalRkOn3HI4nAi4NbZG3iKe6CS
z9mIaZ/kWcWlA854n6Uj4zNYawScMnntqWDyPCWxt77cJBAImWM903M=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:02 2025 by rpki-client