Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ujKOMhBZodODSRi9H7nXBbiw8ls.roa
File: ujKOMhBZodODSRi9H7nXBbiw8ls.roa (raw, json)
Hash identifier: KAAFhASPXgJtzjE5iyGV1f22YjBS0UVawtVURfOJeKs=
Subject key identifier: BA:32:8E:32:10:59:A1:D3:83:49:18:BD:1F:B9:D7:05:B8:B0:F2:5B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019422200C79B451B4FC8B778DDAE1F8BF62
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ujKOMhBZodODSRi9H7nXBbiw8ls.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 14.102.231.0/24 maxlen: 24
85.208.10.0/24 maxlen: 24
194.36.32.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0c:79:b4:51:b4:fc:8b:77:8d:da:e1:f8:bf:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba328e321059a1d3834918bd1fb9d705b8b0f25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:72:52:11:39:97:af:c7:13:fa:7b:59:b0:
0e:ad:07:5f:03:11:a6:37:f7:e4:6a:c1:e6:7a:a5:
c5:84:51:f3:51:d6:89:32:74:20:2b:05:c5:bb:f1:
e3:a1:85:ac:7f:b9:dd:15:51:f2:f7:33:2f:aa:a1:
b9:23:4e:c5:37:db:6f:e7:4d:9f:fc:60:1f:2b:9f:
d5:e1:6f:6b:aa:2c:e0:26:57:53:75:4c:7b:f2:ce:
34:82:64:e0:14:08:a9:f1:f0:31:15:ca:9d:18:b0:
fd:c9:de:16:f0:ae:73:85:4f:1c:c9:e2:1b:e3:a5:
61:4a:87:33:29:21:1b:06:2d:d4:51:ed:7f:22:31:
96:b4:c4:f3:9f:34:fd:2e:0e:ac:09:7c:38:17:81:
c4:b3:c2:dd:d7:2c:8a:1d:2f:a7:59:51:6d:4b:af:
70:49:5a:ac:7f:3b:47:dc:ce:2c:a2:5a:6a:f8:64:
73:ae:ab:8a:fb:19:0a:41:ed:08:48:a6:11:89:51:
bb:79:a7:ed:35:bc:f0:1c:05:bd:67:c6:61:53:2f:
77:53:18:26:87:d4:23:8b:f0:12:ee:b0:6f:ba:8a:
b2:ea:52:b3:aa:87:02:f7:ca:8b:c9:ff:ce:22:08:
ff:50:5a:70:96:08:d1:66:85:75:f2:db:44:b9:8b:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:32:8E:32:10:59:A1:D3:83:49:18:BD:1F:B9:D7:05:B8:B0:F2:5B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ujKOMhBZodODSRi9H7nXBbiw8ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
85.208.10.0/24
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:f4:2f:cb:74:e6:b2:d0:5c:23:40:49:74:28:bb:bc:f0:3f:
2f:b9:ac:7f:79:c1:94:d0:e1:eb:18:5a:50:35:9e:3e:19:2b:
ec:cb:96:a2:a0:f3:fa:33:2d:d0:34:47:45:f1:00:1b:21:e4:
33:39:d4:c2:87:30:63:fd:94:9b:17:a3:c1:d4:83:01:bc:fa:
ec:2e:43:d8:c1:36:87:44:85:76:38:4a:ee:d5:7c:9d:cf:86:
9d:33:fa:a6:4e:02:9b:9d:17:ad:6d:f0:46:47:bf:6c:e1:04:
f9:8d:7f:52:27:8e:43:39:5f:28:39:97:9c:52:78:f4:ac:5a:
f9:6f:ea:a4:e8:e9:8e:b1:a3:85:b2:1e:65:18:e4:f2:b0:d1:
47:5a:1d:3e:58:5e:20:8e:fb:5d:5e:60:14:30:41:5f:be:7a:
9d:c6:d0:7e:91:df:41:cb:12:b2:9d:6f:02:f9:fe:fc:04:d4:
dc:b0:c0:8e:53:de:91:d3:f7:b7:b3:3f:dc:3e:bf:14:a0:35:
07:44:3a:0a:bb:43:70:8b:4a:91:e1:1f:cf:56:96:ae:ea:a3:
4b:39:3a:24:4f:b2:77:3a:45:d2:35:05:ab:6b:1c:63:a8:d9:
e0:8f:c6:4e:58:0b:c9:12:ac:2f:22:3b:4c:cb:dd:1e:04:30:
79:ba:2e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:16 2025 by rpki-client