Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_WS5fZnP5fz_3gXaeiwMdZel4ig.roa
File: _WS5fZnP5fz_3gXaeiwMdZel4ig.roa (raw, json)
Hash identifier: WzmL7hDzg3sx2XZNrsrW/YeMs+mS71YlsPopUr1gx/M=
Subject key identifier: FD:64:B9:7D:99:CF:E5:FC:FF:DE:05:DA:7A:2C:0C:75:97:A5:E2:28
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01950F7ECB68EA894CDF24C7995CB32AD9B1
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_WS5fZnP5fz_3gXaeiwMdZel4ig.roa
Signing time: Sun 16 Feb 2025 16:02:02 +0000
ROA not before: Sun 16 Feb 2025 16:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.231.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.97.0/24 maxlen: 24
85.208.10.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
194.36.32.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:7e:cb:68:ea:89:4c:df:24:c7:99:5c:b3:2a:d9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 16 16:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd64b97d99cfe5fcffde05da7a2c0c7597a5e228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3b:4f:28:89:6b:58:11:f4:de:63:72:9a:83:
76:bc:33:61:5a:8b:8d:58:47:62:cc:62:2b:3b:b7:
69:be:27:40:c1:99:b4:0b:c4:a0:93:8f:c2:5d:6b:
1d:10:0d:58:a0:f8:bc:da:f4:1b:d2:f9:10:db:33:
16:17:58:6a:d3:93:8e:ce:c3:ee:10:be:5f:b4:8f:
23:4f:aa:84:de:f0:d2:b4:0d:39:ae:45:cd:14:79:
d3:bf:64:b9:e7:4b:bb:40:36:80:3e:72:e3:ca:5a:
55:fb:bf:7b:e6:cc:17:e8:f4:d2:06:dd:47:32:2e:
e7:66:ea:c4:5a:46:73:be:5b:21:9a:15:0e:92:25:
81:4a:48:74:19:eb:31:89:bd:f7:00:9b:17:6a:f6:
54:e7:63:69:bf:3a:b8:9c:56:b8:e4:30:4e:f4:37:
4b:41:49:18:31:37:39:07:5e:a4:4c:f4:65:3d:12:
bf:0e:8a:9a:e8:97:23:17:72:39:27:3b:cb:72:e1:
c9:fc:63:f0:07:e9:8f:80:ba:07:69:b6:e3:52:e7:
e0:9a:ca:97:df:d9:be:ea:be:73:58:64:17:f2:0a:
bc:95:c0:57:e6:3b:92:71:45:c5:b1:38:4a:b9:cb:
b1:49:51:89:94:46:86:08:f8:a7:7d:12:c7:d0:8a:
74:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:64:B9:7D:99:CF:E5:FC:FF:DE:05:DA:7A:2C:0C:75:97:A5:E2:28
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_WS5fZnP5fz_3gXaeiwMdZel4ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
14.102.231.0/24
77.111.96.0/22
85.208.10.0/24
94.229.212.0/24
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:0e:e4:8a:b2:a6:20:78:c7:73:d7:c5:41:c9:34:a5:99:22:
e5:97:08:19:57:f9:c2:52:b5:88:ad:f7:07:d4:43:da:8e:48:
47:e9:f9:79:fd:2a:6e:23:11:8d:10:25:e1:d8:a9:ce:88:ce:
1e:68:95:ac:51:52:b1:cb:40:46:a3:7d:de:c8:78:8f:4f:84:
4a:b8:27:2b:88:ac:34:c6:94:17:78:cd:53:e9:eb:e2:9b:22:
25:44:2e:ca:20:41:5c:8d:50:58:3d:af:90:4a:ca:67:55:6b:
f7:99:93:4f:8a:1a:a3:3d:f4:63:cc:b4:70:e8:48:ba:eb:9c:
e5:93:f4:c7:df:9b:af:06:e4:8c:50:72:40:a0:b8:0d:84:be:
f7:38:62:4b:14:10:b9:63:5a:98:4e:83:c3:fd:ed:0d:09:33:
eb:61:88:a5:7d:85:d3:c3:fb:8f:ea:e7:03:d8:4b:b2:47:c1:
43:b3:cb:40:d8:9f:7f:c3:8b:28:14:88:af:03:da:50:15:c7:
b0:c2:8f:c7:da:bf:bb:8c:4e:39:9c:9c:4b:85:ce:72:0b:ad:
27:45:0e:c7:a0:46:89:ec:40:b2:bd:94:51:67:a8:09:9a:40:
10:23:3a:06:62:6c:5b:a8:8f:c3:90:99:84:29:34:0c:02:0f:
78:f2:cd:23
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZUPfsto6olM3yTHmVyzKtmxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwMjE2MTYwMjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDY0Yjk3ZDk5Y2ZlNWZjZmZkZTA1ZGE3YTJjMGM3NTk3YTVlMjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmztPKIlrWBH03mNymoN2vDNhWouN
WEdizGIrO7dpvidAwZm0C8Sgk4/CXWsdEA1YoPi82vQb0vkQ2zMWF1hq05OOzsPu
EL5ftI8jT6qE3vDStA05rkXNFHnTv2S550u7QDaAPnLjylpV+7975swX6PTSBt1H
Mi7nZurEWkZzvlshmhUOkiWBSkh0Gesxib33AJsXavZU52Npvzq4nFa45DBO9DdL
QUkYMTc5B16kTPRlPRK/Doqa6JcjF3I5JzvLcuHJ/GPwB+mPgLoHabbjUufgmsqX
39m+6r5zWGQX8gq8lcBX5juScUXFsThKucuxSVGJlEaGCPinfRLH0Ip02QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFP1kuX2Zz+X8/94F2nosDHWXpeIoMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvX1dTNWZablA1ZnpfM2dYYWVpd01kWmVsNGlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBDmbiAwQA
DmbnAwQCTW9gAwQAVdAKAwQAXuXUAwQBwiQgMA0GCSqGSIb3DQEBCwUAA4IBAQCn
DuSKsqYgeMdz18VByTSlmSLllwgZV/nCUrWIrfcH1EPajkhH6fl5/SpuIxGNECXh
2KnOiM4eaJWsUVKxy0BGo33eyHiPT4RKuCcriKw0xpQXeM1T6evimyIlRC7KIEFc
jVBYPa+QSspnVWv3mZNPihqjPfRjzLRw6Ei665zlk/TH35uvBuSMUHJAoLgNhL73
OGJLFBC5Y1qYToPD/e0NCTPrYYilfYXTw/uP6ucD2EuyR8FDs8tA2J9/w4soFIiv
A9pQFcewwo/H2r+7jE45nJxLhc5yC60nRQ7HoEaJ7ECyvZRRZ6gJmkAQIzoGYmxb
qI/DkJmEKTQMAg948s0j
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:42 2025 by rpki-client