Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pvHKNxDjzthDHHqVmfAuVkqXsAM.roa
File: pvHKNxDjzthDHHqVmfAuVkqXsAM.roa (raw, json)
Hash identifier: wCMnRqYdDt+3K3XUY/VCE8ngLBZ4GMcW5A3uK6gS3Jg=
Subject key identifier: A6:F1:CA:37:10:E3:CE:D8:43:1C:7A:95:99:F0:2E:56:4A:97:B0:03
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018D9E860D5912B59E97B6F182633C9AF882
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pvHKNxDjzthDHHqVmfAuVkqXsAM.roa
Signing time: Mon 12 Feb 2024 18:13:21 +0000
ROA not before: Mon 12 Feb 2024 18:13:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63801
IP address blocks: 14.102.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9e:86:0d:59:12:b5:9e:97:b6:f1:82:63:3c:9a:f8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 12 18:13:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6f1ca3710e3ced8431c7a9599f02e564a97b003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5c:f6:37:70:c7:75:29:c3:79:eb:88:0b:76:
b0:85:30:ab:a6:4e:97:0d:b4:cf:4d:57:4d:e5:2a:
32:02:42:fc:8d:f1:d4:a3:5d:46:96:9a:23:00:54:
15:d7:35:ce:fa:bb:3c:0d:86:0a:d9:68:6c:f9:d4:
2a:84:6f:63:1a:5f:9d:51:cb:99:67:26:a7:7f:b4:
83:79:86:cf:fb:7c:3c:56:d8:5d:ac:39:69:67:e3:
e3:2c:38:4a:59:08:c9:73:44:c9:1c:40:c9:6c:c7:
a8:87:2b:ad:32:cc:e7:3e:a2:0f:b6:e3:f1:1a:79:
5c:c3:33:34:17:8b:47:75:08:aa:c9:74:1a:53:b7:
78:b4:f2:2c:eb:c0:9a:d1:7f:01:71:bd:41:56:48:
01:e7:64:e4:83:1c:8d:88:46:b9:52:c1:6d:c8:2e:
4c:6c:90:9d:2f:c7:4e:04:98:7b:c7:d0:a5:ee:eb:
8e:15:39:20:9d:df:99:79:1a:8c:4d:f0:ec:3e:50:
98:fa:79:b8:37:1f:47:aa:4d:73:b5:0c:0d:92:b7:
2d:30:bc:8a:11:c0:6c:d2:b1:34:b0:1a:b6:5c:05:
f3:39:6d:53:8a:c0:1c:83:99:2d:32:a8:6f:bc:cd:
b4:b9:aa:a1:e1:eb:85:38:ea:5b:b7:ee:17:9b:19:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F1:CA:37:10:E3:CE:D8:43:1C:7A:95:99:F0:2E:56:4A:97:B0:03
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pvHKNxDjzthDHHqVmfAuVkqXsAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:24:95:b0:c9:d9:20:aa:d4:0c:b3:96:c9:ed:26:59:fb:b4:
4d:e0:7a:93:9d:08:b6:46:a5:c8:37:46:5a:27:4a:de:5a:ad:
5a:29:05:50:07:a0:f1:25:b2:35:22:aa:72:1e:d6:bd:9f:60:
50:96:c2:74:d4:7e:9f:46:b5:1a:fa:57:ee:fc:09:1b:7f:e5:
ea:eb:da:a0:96:43:73:1c:27:fd:09:8e:49:d4:f5:04:94:11:
fb:88:e8:29:3e:cf:18:a5:2d:eb:85:11:a2:c6:f3:23:48:4d:
c2:2b:4b:2f:38:81:b7:5a:c2:0b:03:07:8d:ce:56:87:ae:02:
6a:fe:9e:8f:1a:ce:2f:93:59:f1:39:4c:58:6f:8e:61:78:5a:
ad:00:7d:c8:67:e9:e8:63:6a:55:1a:5f:9d:c2:24:da:28:ae:
aa:e6:42:46:50:a8:86:1d:64:cc:77:97:c3:f2:21:3c:c1:0b:
da:ea:49:04:97:1f:a1:8a:e8:cf:0f:b9:ed:c6:e2:f0:32:7c:
3f:1d:49:d4:8d:1f:8c:49:37:33:fa:e4:18:db:45:51:b6:14:
69:51:f3:72:95:b7:5c:6a:e4:c1:37:3a:3a:12:a2:9c:e7:27:
fd:29:91:a1:c3:3d:38:3f:db:ce:84:aa:6d:be:27:ef:4e:65:
cc:d5:d4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:46 2025 by rpki-client