Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gw2Yu5GTBcjmop7UX00AbSmQjHY.roa
File: gw2Yu5GTBcjmop7UX00AbSmQjHY.roa (raw, json)
Hash identifier: rp20o5L5ZZCbwPdbh6rRG3zhPY27mxOjmY7YdFVgvZw=
Subject key identifier: 83:0D:98:BB:91:93:05:C8:E6:A2:9E:D4:5F:4D:00:6D:29:90:8C:76
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018670E54017EB30D21E3F4456143A4E3895
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gw2Yu5GTBcjmop7UX00AbSmQjHY.roa
Signing time: Mon 20 Feb 2023 22:15:17 +0000
ROA not before: Mon 20 Feb 2023 22:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 14.102.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:70:e5:40:17:eb:30:d2:1e:3f:44:56:14:3a:4e:38:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 20 22:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=830d98bb919305c8e6a29ed45f4d006d29908c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e1:0e:22:f2:81:82:1c:14:d0:02:68:0a:cc:
0a:f1:45:75:d0:e6:33:61:28:04:62:ad:66:cd:a3:
c7:c7:94:2c:3e:4c:ec:7a:37:5d:fc:68:b0:f9:3d:
c4:b9:ee:bd:27:99:23:d0:dc:7b:d8:7b:d5:87:3c:
02:b5:c2:f4:16:8c:50:2a:af:5a:eb:30:0c:e3:bc:
ac:b8:e6:11:84:72:96:0f:80:50:f2:ed:c7:fe:ec:
8e:0a:ba:9c:16:e1:6a:c2:6a:6c:c7:3a:8c:ab:84:
c3:35:45:c9:65:f4:11:30:49:f2:64:09:16:62:43:
26:05:19:15:5f:6e:80:7a:f5:a1:09:de:49:0a:d0:
05:88:38:04:cb:df:a5:49:6f:51:77:87:e7:7e:49:
8c:8b:f9:35:73:ed:ef:f1:e0:37:7a:1d:67:67:05:
ac:b2:58:d4:0c:f0:6a:20:94:26:0b:3c:85:3d:84:
9b:c1:d6:66:cf:4f:26:8e:8a:44:39:68:23:7b:39:
21:6d:db:75:ca:16:1f:e7:ab:bd:fb:96:14:29:f2:
03:2e:a1:58:a0:b0:f7:c0:5d:da:bc:72:87:b9:c4:
98:50:31:c5:2b:94:a7:d1:24:c6:1a:5d:68:44:7c:
88:d8:66:7e:60:ff:1e:fb:52:e1:c5:14:c1:ea:ca:
d0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0D:98:BB:91:93:05:C8:E6:A2:9E:D4:5F:4D:00:6D:29:90:8C:76
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/gw2Yu5GTBcjmop7UX00AbSmQjHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.228.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:1f:99:52:f5:44:ce:9f:0f:86:27:f2:30:64:87:f9:10:12:
98:02:bf:07:91:e7:f3:39:8b:bd:d6:05:1e:a3:b9:49:1d:90:
dd:9d:49:49:df:2a:18:51:0b:17:ae:bf:cd:5e:b9:db:90:c9:
9a:8b:d6:84:34:ef:88:23:ca:f9:4b:55:60:8b:08:49:d2:21:
3c:fa:e2:39:a7:9c:3c:85:a4:15:bf:fd:83:67:9d:35:e0:8c:
54:d7:7a:bd:b2:6d:c0:54:4d:1c:4f:3a:33:78:34:e7:cc:93:
e8:83:09:b7:2d:6c:19:65:b4:1a:19:60:6e:38:e9:92:a8:22:
d7:c5:e8:71:bf:48:0c:91:a6:dd:c8:0c:5e:75:a8:e9:d4:8c:
e3:6e:f9:73:86:3d:51:18:88:91:af:fc:ba:b9:4b:b6:c3:ac:
db:27:57:9d:20:33:70:06:0f:e5:89:82:70:8e:e3:d6:90:16:
92:0e:29:75:94:9d:17:12:85:44:6f:7c:cc:3e:97:49:2d:4a:
38:6d:3b:d1:4a:7b:a7:b0:82:14:1e:54:9d:27:ad:94:c3:72:
63:cc:25:fa:83:6e:e6:74:6a:8d:ed:e1:fa:29:e3:4e:eb:ce:
b9:5c:b2:e3:bd:c6:c5:29:a4:fe:90:02:d6:89:8c:a1:95:f8:
70:b7:cb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:25 2025 by rpki-client