Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/sb5KuCZiu-5ACxri0gW5zR_erP8.roa
File: sb5KuCZiu-5ACxri0gW5zR_erP8.roa (raw, json)
Hash identifier: pb+5t6MyLclpsW1Mlfs3S8BaH1gMocTBim3z6vvxrLM=
Subject key identifier: B1:BE:4A:B8:26:62:BB:EE:40:0B:1A:E2:D2:05:B9:CD:1F:DE:AC:FF
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019422201C80511BD1C0E16445042F6BEA29
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/sb5KuCZiu-5ACxri0gW5zR_erP8.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1c:80:51:1b:d1:c0:e1:64:45:04:2f:6b:ea:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1be4ab82662bbee400b1ae2d205b9cd1fdeacff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:9f:78:86:7e:b7:01:e3:00:2a:e2:fa:73:
96:29:56:99:e8:94:0f:3f:68:ec:7e:12:a7:fe:91:
e7:18:ba:dd:68:be:97:75:1b:e9:51:d1:3d:76:5c:
ea:9f:28:45:b0:72:75:08:5c:28:8f:1f:b5:63:f3:
cf:41:3c:aa:73:4d:77:6a:9e:82:80:83:9d:f7:ce:
8e:4f:8a:21:09:6d:03:7a:df:6b:e4:56:3c:53:5b:
e1:92:72:1b:7d:7e:3d:48:ac:59:f7:39:f3:0d:11:
0c:63:e6:fa:06:7e:ea:ac:fd:4b:5b:8d:ea:75:5d:
0b:df:4c:4a:e0:bc:2d:b6:2e:38:09:10:f2:72:4e:
c9:43:52:93:11:ee:77:39:77:96:a3:ac:8b:54:bf:
92:3b:91:20:88:f5:92:3f:89:d6:11:96:0a:48:50:
26:3f:91:f3:7e:56:da:2c:63:1d:a7:48:bb:6f:d0:
92:55:cb:c4:0d:ed:4d:10:9a:6f:5e:9a:30:7b:09:
99:97:7e:53:41:1f:14:bd:24:27:f2:21:7b:62:68:
99:d1:3c:db:06:8c:c6:be:ff:f8:9f:fe:54:53:62:
ac:1f:93:89:fe:13:08:b0:cd:5c:14:d8:01:c4:50:
87:c5:15:38:76:16:6c:27:49:10:71:3b:46:a0:b5:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BE:4A:B8:26:62:BB:EE:40:0B:1A:E2:D2:05:B9:CD:1F:DE:AC:FF
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/sb5KuCZiu-5ACxri0gW5zR_erP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.234.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:24:62:30:c6:22:71:fd:56:39:0b:28:46:17:ee:48:7c:84:
a5:06:fd:27:ec:c6:5a:54:70:df:2e:60:9c:7d:2a:37:45:36:
18:73:2b:22:34:97:97:3a:32:e4:3a:b7:a3:54:dc:49:65:b2:
f8:1f:6b:ac:b7:14:0b:56:cd:eb:c3:ee:0b:11:49:9f:ef:05:
ec:21:d1:39:06:c2:1e:95:f3:45:74:49:cf:16:13:a5:1a:c8:
76:d5:8d:c9:12:39:27:6f:81:b2:44:79:24:7e:b0:ff:a4:b2:
9d:6f:a7:2d:41:79:71:dd:a4:c3:3a:8d:ec:21:21:9d:cf:91:
f6:7a:b9:bb:49:74:72:d2:70:6a:dd:b3:87:fb:36:76:11:94:
9b:fa:44:06:ea:04:17:38:2d:71:33:d6:51:76:97:1b:36:88:
35:f4:64:69:f4:74:2a:ee:7a:75:1e:58:0d:fc:2a:1f:12:12:
13:b7:03:38:25:56:b3:f7:41:bf:e8:2f:bb:1f:e6:fc:c0:c8:
7d:36:50:39:1f:54:8d:33:13:70:36:91:e5:9e:0b:ee:05:5e:
4f:94:77:49:47:0f:6d:f7:31:74:5b:5a:35:f3:0c:bc:2f:58:
36:3a:59:1f:0e:cb:20:69:8b:fe:25:6e:a2:22:ca:4c:af:4e:
93:ab:a6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:27 2025 by rpki-client