Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/sqK-dXfjkuLuMLDETIvK5dgvPlQ.roa
File: sqK-dXfjkuLuMLDETIvK5dgvPlQ.roa (raw, json)
Hash identifier: ieH9MHyqqdoYUxdz7rH3H0EkWFaX5eFUHOwP4sN2QZg=
Subject key identifier: B2:A2:BE:75:77:E3:92:E2:EE:30:B0:C4:4C:8B:CA:E5:D8:2F:3E:54
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01920B001AA30CF19991F8BDD81A2E55BBED
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/sqK-dXfjkuLuMLDETIvK5dgvPlQ.roa
Signing time: Thu 19 Sep 2024 15:56:49 +0000
ROA not before: Thu 19 Sep 2024 15:56:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 14.102.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0b:00:1a:a3:0c:f1:99:91:f8:bd:d8:1a:2e:55:bb:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 19 15:56:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2a2be7577e392e2ee30b0c44c8bcae5d82f3e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c9:b4:2f:6e:dc:ad:35:5a:fd:b9:52:57:0c:
5e:31:ce:a2:2d:2f:f2:23:c7:fe:20:96:fa:d4:58:
fe:1f:2f:ab:be:83:e2:89:87:a7:d8:9d:62:ca:0f:
88:f0:89:31:66:66:0b:3d:53:68:6f:69:72:17:e9:
bb:33:cc:fa:93:6e:c1:64:76:6a:36:90:36:29:33:
90:59:ad:37:81:98:c4:49:0b:d7:35:6c:d1:06:bc:
4a:db:83:42:5a:36:70:e3:5b:76:51:25:92:18:69:
ab:77:76:f2:8c:ed:87:12:11:13:ee:7c:a5:26:b5:
e5:83:9d:e7:11:2e:67:4b:ec:2c:e8:78:3c:51:54:
75:59:63:56:1a:da:5e:4c:b2:8f:5e:ed:8c:81:c6:
f1:eb:cc:83:32:fe:78:72:68:79:d7:bb:93:3f:ce:
8d:28:d5:56:5b:91:66:c2:0d:9d:65:6e:05:19:42:
69:a5:77:ba:1c:88:b6:71:00:41:9f:c4:8d:5f:ea:
d3:06:6e:e7:7f:7a:09:3f:63:4d:92:71:07:e1:c5:
ca:d2:ad:c4:ef:80:8c:40:d7:2a:fb:a5:40:a0:e6:
cd:fe:35:57:98:b5:af:1d:fc:e1:15:70:17:53:fb:
78:90:d7:bd:fe:cb:8f:44:95:ca:46:60:19:75:49:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A2:BE:75:77:E3:92:E2:EE:30:B0:C4:4C:8B:CA:E5:D8:2F:3E:54
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/sqK-dXfjkuLuMLDETIvK5dgvPlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:f9:53:bf:d3:e1:26:20:51:c4:38:b6:5f:4e:af:10:78:85:
d6:02:73:f5:49:a6:c5:ff:7a:19:c8:40:51:d0:5a:4d:bd:95:
31:2e:c5:f5:63:b7:14:47:74:f9:69:2a:ca:a7:0a:a2:fb:3b:
b2:1f:ea:79:de:2b:e9:f0:64:91:03:8d:b8:02:6a:68:48:52:
86:88:b4:86:24:27:ef:c5:38:57:37:c5:71:44:a6:f7:64:2c:
39:9e:f7:35:96:ea:da:48:c0:96:42:cf:34:21:ab:ed:a3:47:
41:1d:cb:25:96:3b:86:b9:82:5f:fd:2e:6d:cd:53:13:b5:95:
f5:4c:ac:56:7c:45:b6:c4:e0:00:82:9d:2d:5d:31:6b:25:c8:
7b:e6:45:aa:7f:11:e7:46:1b:89:9b:32:6c:8a:a4:8e:92:26:
19:21:84:2f:37:95:20:65:b3:71:9e:2d:13:2f:f5:2a:77:74:
c6:55:40:27:ed:d1:02:c6:09:71:86:10:ca:cb:f7:24:75:69:
6e:da:9f:93:5f:e7:cd:f7:12:b0:cf:9e:d4:57:35:67:63:72:
2d:a2:7b:59:7f:40:ee:71:d5:cd:a3:c7:e6:d8:c0:95:98:29:
ae:91:bc:99:5a:1b:9f:5e:4e:34:52:96:29:c2:fd:b3:c6:03:
32:9c:a3:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZILABqjDPGZkfi92BouVbvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjQwOTE5MTU1NjQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmEyYmU3NTc3ZTM5MmUyZWUzMGIwYzQ0YzhiY2FlNWQ4MmYzZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsm0L27crTVa/blSVwxeMc6iLS/y
I8f+IJb61Fj+Hy+rvoPiiYen2J1iyg+I8IkxZmYLPVNob2lyF+m7M8z6k27BZHZq
NpA2KTOQWa03gZjESQvXNWzRBrxK24NCWjZw41t2USWSGGmrd3byjO2HEhET7nyl
JrXlg53nES5nS+ws6Hg8UVR1WWNWGtpeTLKPXu2Mgcbx68yDMv54cmh517uTP86N
KNVWW5Fmwg2dZW4FGUJppXe6HIi2cQBBn8SNX+rTBm7nf3oJP2NNknEH4cXK0q3E
74CMQNcq+6VAoObN/jVXmLWvHfzhFXAXU/t4kNe9/suPRJXKRmAZdUmLqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLKivnV345Li7jCwxEyLyuXYLz5UMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvc3FLLWRYZmprdUx1TUxERVRJdks1ZGd2UGxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADmbnMA0G
CSqGSIb3DQEBCwUAA4IBAQAO+VO/0+EmIFHEOLZfTq8QeIXWAnP1SabF/3oZyEBR
0FpNvZUxLsX1Y7cUR3T5aSrKpwqi+zuyH+p53ivp8GSRA424AmpoSFKGiLSGJCfv
xThXN8VxRKb3ZCw5nvc1luraSMCWQs80Iavto0dBHcslljuGuYJf/S5tzVMTtZX1
TKxWfEW2xOAAgp0tXTFrJch75kWqfxHnRhuJmzJsiqSOkiYZIYQvN5UgZbNxni0T
L/Uqd3TGVUAn7dECxglxhhDKy/ckdWlu2p+TX+fN9xKwz57UVzVnY3ItontZf0Du
cdXNo8fm2MCVmCmukbyZWhufXk40UpYpwv2zxgMynKOn
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:32 2025 by rpki-client