Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fU7H6qvXMEZC69myO86XWANztKM.roa
File: fU7H6qvXMEZC69myO86XWANztKM.roa (raw, json)
Hash identifier: vXNW6xIjGz17uEGTStoSxyNlFzUnlRpF/YE3CC77cYk=
Subject key identifier: 7D:4E:C7:EA:AB:D7:30:46:42:EB:D9:B2:3B:CE:97:58:03:73:B4:A3
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0194FB524F7B7C43EE5A25D3BF7017EF2F95
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fU7H6qvXMEZC69myO86XWANztKM.roa
Signing time: Wed 12 Feb 2025 18:01:02 +0000
ROA not before: Wed 12 Feb 2025 18:01:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.226.0/24 maxlen: 24
14.102.232.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fb:52:4f:7b:7c:43:ee:5a:25:d3:bf:70:17:ef:2f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 12 18:01:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d4ec7eaabd7304642ebd9b23bce97580373b4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:45:fe:fc:24:72:88:14:76:d8:6e:9d:06:
76:53:ac:b8:8a:87:83:a8:1b:a2:5d:d1:af:34:7d:
f7:f8:23:17:5e:ce:75:d0:77:95:e7:b4:fc:4b:db:
3b:43:dd:da:48:18:c1:49:83:bb:a2:12:d7:70:8b:
27:53:ee:a7:87:a7:c2:87:d8:af:cd:65:39:d9:7c:
ac:62:d1:32:79:13:cc:12:87:4e:30:11:76:6c:fc:
e8:85:bb:5c:d1:05:4c:35:8e:a9:63:f1:4d:25:7d:
d6:74:4b:8b:a1:e1:1d:2f:ed:75:36:a0:5e:aa:ec:
c9:ab:e4:58:b3:1d:26:d9:d2:b6:e5:6f:8f:ce:bc:
3a:6d:98:8a:51:b3:92:3d:40:e2:4d:29:fa:09:c8:
93:a2:dc:67:43:7a:60:05:d2:2a:7b:e3:b3:96:e7:
fd:db:88:54:3e:47:df:fa:4d:a3:fe:5f:d0:90:d3:
87:2c:0a:f9:fd:d7:08:a5:01:ff:1e:99:1a:19:e5:
cd:a4:58:0c:06:c3:79:87:89:52:69:cc:1f:12:54:
48:e0:68:8a:0e:27:7f:e8:69:12:9f:1c:88:37:67:
70:78:59:8d:41:06:9a:8a:71:08:9f:7b:df:14:b8:
74:d2:56:17:6e:03:43:96:a6:8d:e0:d7:c2:74:23:
76:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4E:C7:EA:AB:D7:30:46:42:EB:D9:B2:3B:CE:97:58:03:73:B4:A3
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fU7H6qvXMEZC69myO86XWANztKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/24
14.102.232.0/24
14.102.234.0/24
Signature Algorithm: sha256WithRSAEncryption
91:bb:b5:63:af:15:0a:30:2c:ca:82:9e:24:08:f0:fc:fd:a0:
64:70:7e:67:24:cb:7c:ea:f6:58:e1:28:96:06:05:61:ec:87:
ab:ba:7c:19:c9:f6:a6:f4:12:5c:2c:31:81:93:08:b5:15:f4:
ee:4c:3e:5d:32:9d:93:f4:e6:5e:46:41:05:6f:14:20:dc:41:
a7:9a:ef:07:24:de:ab:dd:19:03:c6:82:71:95:1d:93:44:9c:
35:63:60:a0:78:ee:61:25:0b:fd:ec:1a:61:4b:2c:de:fd:c1:
96:87:d0:46:f9:fa:37:f7:c2:43:e9:89:94:cb:6f:81:7d:61:
b7:25:bd:46:d1:e0:0c:f8:73:7d:49:4d:6c:42:b7:c0:13:b3:
56:63:31:30:ab:71:8a:9d:db:ba:95:37:63:65:14:ff:bc:b9:
bf:b1:8d:5d:b6:1b:11:ba:de:1a:dc:19:58:0f:bc:05:7b:c3:
e7:9b:a4:cf:6c:99:3e:1b:14:c3:06:90:6a:f9:f0:10:f3:2a:
4b:89:bb:e1:d1:75:74:81:c4:d6:69:76:88:58:d5:29:9f:39:
cb:df:c5:02:63:c9:83:b0:0d:36:19:f7:63:49:01:e8:63:79:
9c:76:ba:ac:2f:36:b1:ac:39:47:2e:4c:13:0b:fb:98:d2:c4:
92:08:da:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:42 2025 by rpki-client