Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/hyigY5AKMwO9NskoAVX5tFdBHeo.roa
File: hyigY5AKMwO9NskoAVX5tFdBHeo.roa (raw, json)
Hash identifier: 9Aj5FnHwTMr0VVYCO+60j1cA3UPRsR8MLXNB42gLUSY=
Subject key identifier: 87:28:A0:63:90:0A:33:03:BD:36:C9:28:01:55:F9:B4:57:41:1D:EA
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0193C1316F07A85E67682813A14C31C28AEA
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/hyigY5AKMwO9NskoAVX5tFdBHeo.roa
Signing time: Fri 13 Dec 2024 18:04:22 +0000
ROA not before: Fri 13 Dec 2024 18:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 14.102.232.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.106.0/24 maxlen: 24
94.229.210.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c1:31:6f:07:a8:5e:67:68:28:13:a1:4c:31:c2:8a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Dec 13 18:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8728a063900a3303bd36c9280155f9b457411dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:5a:74:46:75:d2:8f:83:34:e0:be:ee:dd:
3f:0f:cc:49:17:d1:9f:3f:d0:1e:39:98:1a:84:ac:
c9:04:07:65:17:65:69:8e:d3:38:8c:18:6d:ed:ce:
6a:7c:eb:d9:65:59:14:6d:ff:84:84:0e:8d:d8:e5:
0d:7c:1e:e1:5b:6b:bf:73:30:d4:22:fa:3e:09:28:
d9:f1:05:f8:a2:ea:72:6c:13:2c:f8:a0:1c:08:8c:
94:a2:9e:76:6b:30:19:87:88:eb:64:4b:f4:28:60:
a7:d4:57:d1:c3:30:cc:26:35:a2:b9:ba:de:11:2f:
17:57:42:71:23:ea:5d:09:c2:9f:11:ed:5d:bf:cc:
c4:a1:20:50:ab:1a:3b:6d:f7:83:e7:a2:78:48:e6:
2f:6b:70:01:a5:05:31:96:84:0e:0f:d3:42:c1:5d:
cf:b0:88:cf:de:ee:b0:55:d6:0a:a1:e1:c2:f6:bb:
ba:6b:4d:2f:42:ff:27:7e:a0:80:a4:64:90:a3:a4:
90:72:3a:b9:0d:07:da:80:c9:f1:01:92:cf:2c:d7:
68:f2:d1:39:a7:3a:96:7f:36:f0:ff:ce:05:f1:be:
06:37:b6:05:e5:da:99:73:ed:ff:1e:86:39:2a:ad:
a6:94:c4:7c:8c:bd:0a:51:f4:a9:8c:b0:34:d3:39:
31:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:28:A0:63:90:0A:33:03:BD:36:C9:28:01:55:F9:B4:57:41:1D:EA
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/hyigY5AKMwO9NskoAVX5tFdBHeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.232.0/24
77.111.96.0/22
77.111.106.0/24
94.229.210.0/24
94.229.212.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:45:8a:3c:30:bf:e6:21:1b:04:72:12:4f:59:94:6a:a0:57:
9c:13:bc:c4:34:c4:b9:0f:4c:e9:72:96:8b:16:47:f1:72:56:
16:6f:91:20:08:4a:01:b9:21:af:73:66:e8:34:19:ac:a9:56:
69:64:e5:1f:f2:e9:70:8b:0f:12:e5:5e:cb:48:53:f0:69:67:
23:ef:cb:8a:cc:2e:61:1e:e9:96:f1:4d:dc:87:f5:7d:cf:bc:
9f:13:86:de:4d:bb:ac:e9:02:64:ec:fe:97:cd:8e:d3:78:18:
0d:a9:c4:75:f9:71:69:92:ae:80:0d:6b:04:87:3c:d3:31:f5:
77:ef:d3:d7:10:ec:4d:36:bf:24:59:25:dc:df:64:5f:64:6b:
41:a3:d9:dd:15:b6:12:dc:dc:c2:8c:06:88:4f:06:01:fa:ca:
a1:6f:19:bb:a4:6f:a9:3a:40:88:4d:b9:fb:8c:da:00:05:7e:
a4:f5:b3:f2:00:87:b7:8e:9c:72:70:0a:76:83:d8:e5:bc:73:
6a:1c:90:a6:46:8e:c3:6e:0a:e1:6b:5c:30:b0:9a:a2:88:a5:
36:a4:bf:9b:d7:ca:f8:4f:5a:0b:17:c5:25:06:60:7c:92:27:
b2:89:27:ed:9f:cf:80:33:29:50:2a:5a:b4:96:96:04:41:1d:
ed:19:2b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:23 2025 by rpki-client