Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/n7YS6z_-8f_yk6d8XTgV-zjFBCI.roa
File: n7YS6z_-8f_yk6d8XTgV-zjFBCI.roa (raw, json)
Hash identifier: 01qdAb8ZjGXcet1+B524xHZRJnGdCYOWKYiFNtsxgCk=
Subject key identifier: 9F:B6:12:EB:3F:FE:F1:FF:F2:93:A7:7C:5D:38:15:FB:38:C5:04:22
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01946B23F6AE9CBA82455A60AF20FA7FA566
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/n7YS6z_-8f_yk6d8XTgV-zjFBCI.roa
Signing time: Wed 15 Jan 2025 18:05:06 +0000
ROA not before: Wed 15 Jan 2025 18:05:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/23 maxlen: 24
14.102.232.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.96.0/24 maxlen: 24
94.229.210.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:23:f6:ae:9c:ba:82:45:5a:60:af:20:fa:7f:a5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 15 18:05:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fb612eb3ffef1fff293a77c5d3815fb38c50422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:85:4b:4e:48:e0:9f:9b:de:05:47:43:05:62:
8f:ae:59:1f:79:bc:04:4d:fb:7f:20:af:65:17:0c:
12:1d:3f:f2:a9:39:1e:a8:9e:76:56:86:30:97:06:
f3:2a:e7:e6:6a:6a:72:7d:74:f3:51:7b:f1:2e:61:
96:49:5c:0c:5c:e0:33:79:fe:8c:cc:9a:bf:1c:b0:
5b:0d:fa:05:38:ed:8c:c9:4c:bd:73:7b:49:f9:22:
49:a0:85:4e:ca:09:e4:00:0e:97:77:bf:c0:ed:c0:
d7:cc:5b:26:0a:6c:3a:65:7e:37:4c:3a:01:22:77:
8c:9a:99:06:48:fb:4a:c4:29:8b:f1:98:ee:58:9e:
ea:fd:a4:86:bc:60:28:80:d6:41:f2:8e:63:eb:e3:
ea:d8:9d:54:58:ac:64:e6:49:4a:2d:ce:4d:09:be:
ca:b3:c9:18:94:62:10:1f:19:68:22:dc:b3:14:a4:
36:a1:ec:e1:bd:8f:14:fc:c4:87:4a:e3:b5:f6:f4:
ce:f1:22:7d:b8:a5:89:bb:dd:a4:42:a8:12:ff:69:
fa:8e:2f:07:8e:19:56:2f:40:c8:b8:66:08:67:75:
ea:73:fc:8a:cb:dc:05:b3:23:1f:ea:f3:b0:bc:f9:
10:bb:16:ea:26:8b:d0:11:3b:18:37:25:f2:5c:55:
d1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B6:12:EB:3F:FE:F1:FF:F2:93:A7:7C:5D:38:15:FB:38:C5:04:22
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/n7YS6z_-8f_yk6d8XTgV-zjFBCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
14.102.232.0/24
77.111.96.0/22
94.229.210.0/24
94.229.212.0/24
Signature Algorithm: sha256WithRSAEncryption
25:5d:60:4d:22:f1:30:f6:f6:0e:d6:a5:c7:20:cc:00:99:69:
33:1f:5f:2d:68:b3:d4:42:46:2a:17:94:df:cc:c6:b9:04:12:
94:ed:11:11:5c:dd:44:73:f8:ca:4f:59:a7:e0:df:2d:eb:d9:
bf:d9:4a:4c:8c:6e:ac:4f:2f:e6:f1:d6:85:a3:d8:b1:6c:3c:
e0:1a:89:40:5c:c8:3e:52:98:71:fc:e5:f6:fe:87:58:3f:12:
9e:4f:86:e4:be:5d:29:79:fe:b6:5b:1a:36:14:8d:1c:f0:f8:
fe:9f:8c:74:ed:1c:5b:2b:fc:87:c3:e7:bb:53:db:d2:66:de:
ff:dc:ed:b0:3c:52:bd:07:e3:86:6d:8f:b7:a1:b1:08:e6:9f:
81:ed:b4:30:fe:b1:cd:07:6f:fa:67:15:67:78:38:43:af:5f:
80:62:b7:d4:d9:e1:22:17:e5:cb:7a:61:20:d6:72:32:4d:ed:
d7:1b:b1:29:23:1d:97:d9:3b:01:02:79:51:e9:b4:4b:f1:1c:
fe:37:ea:fc:59:80:f1:85:1f:66:b8:57:cf:d7:c6:dc:c5:00:
45:7a:7b:61:d1:a1:2f:38:36:b6:a7:2c:57:d3:90:b3:8a:c5:
63:a1:e5:96:af:e3:b2:48:af:db:d1:53:82:6a:74:02:81:e5:
bb:4e:7f:e4
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZRrI/aunLqCRVpgryD6f6VmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwMTE1MTgwNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmI2MTJlYjNmZmVmMWZmZjI5M2E3N2M1ZDM4MTVmYjM4YzUwNDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74VLTkjgn5veBUdDBWKPrlkfebwE
Tft/IK9lFwwSHT/yqTkeqJ52VoYwlwbzKufmampyfXTzUXvxLmGWSVwMXOAzef6M
zJq/HLBbDfoFOO2MyUy9c3tJ+SJJoIVOygnkAA6Xd7/A7cDXzFsmCmw6ZX43TDoB
IneMmpkGSPtKxCmL8ZjuWJ7q/aSGvGAogNZB8o5j6+Pq2J1UWKxk5klKLc5NCb7K
s8kYlGIQHxloItyzFKQ2oezhvY8U/MSHSuO19vTO8SJ9uKWJu92kQqgS/2n6ji8H
jhlWL0DIuGYIZ3Xqc/yKy9wFsyMf6vOwvPkQuxbqJovQETsYNyXyXFXReQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFJ+2Eus//vH/8pOnfF04Ffs4xQQiMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvbjdZUzZ6Xy04Zl95azZkOFhUZ1YtempGQkNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBDmbiAwQA
DmboAwQCTW9gAwQAXuXSAwQAXuXUMA0GCSqGSIb3DQEBCwUAA4IBAQAlXWBNIvEw
9vYO1qXHIMwAmWkzH18taLPUQkYqF5TfzMa5BBKU7RERXN1Ec/jKT1mn4N8t69m/
2UpMjG6sTy/m8daFo9ixbDzgGolAXMg+Uphx/OX2/odYPxKeT4bkvl0pef62Wxo2
FI0c8Pj+n4x07RxbK/yHw+e7U9vSZt7/3O2wPFK9B+OGbY+3obEI5p+B7bQw/rHN
B2/6ZxVneDhDr1+AYrfU2eEiF+XLemEg1nIyTe3XG7EpIx2X2TsBAnlR6bRL8Rz+
N+r8WYDxhR9muFfP18bcxQBFenth0aEvODa2pyxX05CzisVjoeWWr+OySK/b0VOC
anQCgeW7Tn/k
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:55 2025 by rpki-client