Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zOEV-rGPFhtMfrXuMoQ0yozI7FQ.roa
File: zOEV-rGPFhtMfrXuMoQ0yozI7FQ.roa (raw, json)
Hash identifier: Y6JhZr8dfZoPNdez0yOOf9Si2LzL3uRVZQDVujC/fLg=
Subject key identifier: CC:E1:15:FA:B1:8F:16:1B:4C:7E:B5:EE:32:84:34:CA:8C:C8:EC:54
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018DD1AF14201232D66AC4224CFA00549B00
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zOEV-rGPFhtMfrXuMoQ0yozI7FQ.roa
Signing time: Thu 22 Feb 2024 16:38:48 +0000
ROA not before: Thu 22 Feb 2024 16:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 14.102.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:af:14:20:12:32:d6:6a:c4:22:4c:fa:00:54:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Feb 22 16:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cce115fab18f161b4c7eb5ee328434ca8cc8ec54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c8:c1:7e:33:31:19:2f:d7:5f:36:c3:ea:b3:
24:77:06:57:37:5e:0f:e9:78:14:59:79:36:cb:e3:
cc:3b:24:3c:fb:39:95:8e:82:31:68:08:e9:09:cb:
17:72:25:16:04:6b:c5:77:db:52:ff:6d:20:09:99:
e9:51:82:fe:41:c4:53:ef:46:11:a5:b4:2a:ab:ca:
62:d6:4b:a3:f3:70:39:e7:c0:e4:b4:13:12:5e:65:
a1:5c:3d:f4:e9:34:a0:73:57:a5:8b:49:4f:34:f3:
39:dd:54:42:eb:07:c6:0c:3a:82:09:31:ef:4b:97:
9f:95:e9:96:36:4a:4e:df:12:56:21:75:3b:23:36:
be:40:ba:16:2d:7e:88:4f:2f:f0:e6:71:21:a1:e3:
e2:c4:2f:04:6e:c0:18:8a:dd:c8:20:d5:e7:c1:ba:
ee:c5:d5:0e:8b:fb:99:88:4c:38:43:2d:a8:71:7a:
df:f5:2c:03:fb:e5:a9:f1:51:a5:be:f0:61:56:fb:
12:00:3d:44:c3:2f:42:8d:d5:90:50:67:80:c3:b3:
ed:d6:af:46:ad:5e:e3:96:80:91:1d:6d:4d:fe:8b:
af:03:48:9f:86:87:f6:df:45:4c:70:bd:92:a4:1e:
38:1b:7d:6d:7d:b2:f1:22:ee:02:f6:0f:00:e9:bc:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E1:15:FA:B1:8F:16:1B:4C:7E:B5:EE:32:84:34:CA:8C:C8:EC:54
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/zOEV-rGPFhtMfrXuMoQ0yozI7FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
Signature Algorithm: sha256WithRSAEncryption
43:44:b1:db:9e:54:e6:f2:71:1f:f6:cb:5a:d3:ce:b3:2d:62:
83:3a:50:9a:87:f3:f3:de:52:b2:91:be:cb:dc:84:08:02:84:
d6:0b:36:15:20:66:f2:ff:a1:8e:38:ed:f4:01:f8:e2:60:cb:
74:5e:35:ef:61:36:d4:ed:ed:2c:4f:45:85:fa:48:c8:6d:cf:
dc:56:27:2f:ba:71:dd:6b:33:b8:15:e7:02:e1:ad:c1:2b:55:
12:fe:eb:8b:70:d0:7d:79:e2:33:45:c7:e8:e6:3e:c0:97:1f:
20:80:b2:a1:ae:ff:3a:19:f7:d7:1d:f6:84:19:20:9e:1a:b6:
4e:5a:24:a2:34:98:f9:78:80:9d:f4:b1:f0:4e:a6:a6:ea:90:
88:db:68:0c:76:ef:6a:8f:ec:5f:c7:f2:c8:e4:21:c4:86:34:
97:eb:25:04:fd:b9:35:b7:3b:d9:c5:bc:8a:ee:66:aa:d1:b5:
0c:19:7f:99:6d:20:39:8c:cd:61:b9:62:82:ff:47:e4:a2:9f:
f8:c3:1d:39:e8:b4:1d:05:6f:f2:4e:66:85:a5:7c:40:ff:a5:
8b:67:55:48:aa:11:ee:5a:95:5d:0f:49:61:77:b1:17:11:b3:
1a:dc:98:de:19:e2:74:f1:47:d0:03:9b:fa:6c:25:6f:5f:ed:
dd:8f:8b:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3RrxQgEjLWasQiTPoAVJsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjQwMjIyMTYzODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2UxMTVmYWIxOGYxNjFiNGM3ZWI1ZWUzMjg0MzRjYThjYzhlYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsjBfjMxGS/XXzbD6rMkdwZXN14P
6XgUWXk2y+PMOyQ8+zmVjoIxaAjpCcsXciUWBGvFd9tS/20gCZnpUYL+QcRT70YR
pbQqq8pi1kuj83A558DktBMSXmWhXD306TSgc1eli0lPNPM53VRC6wfGDDqCCTHv
S5eflemWNkpO3xJWIXU7Iza+QLoWLX6ITy/w5nEhoePixC8EbsAYit3IINXnwbru
xdUOi/uZiEw4Qy2ocXrf9SwD++Wp8VGlvvBhVvsSAD1Ewy9CjdWQUGeAw7Pt1q9G
rV7jloCRHW1N/ouvA0ifhof230VMcL2SpB44G31tfbLxIu4C9g8A6bxpWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMzhFfqxjxYbTH617jKENMqMyOxUMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvek9FVi1yR1BGaHRNZnJYdU1vUTB5b3pJN0ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQADmbnMA0G
CSqGSIb3DQEBCwUAA4IBAQBDRLHbnlTm8nEf9sta086zLWKDOlCah/Pz3lKykb7L
3IQIAoTWCzYVIGby/6GOOO30AfjiYMt0XjXvYTbU7e0sT0WF+kjIbc/cVicvunHd
azO4FecC4a3BK1US/uuLcNB9eeIzRcfo5j7Alx8ggLKhrv86GffXHfaEGSCeGrZO
WiSiNJj5eICd9LHwTqam6pCI22gMdu9qj+xfx/LI5CHEhjSX6yUE/bk1tzvZxbyK
7maq0bUMGX+ZbSA5jM1huWKC/0fkop/4wx056LQdBW/yTmaFpXxA/6WLZ1VIqhHu
WpVdD0lhd7EXEbMa3JjeGeJ08UfQA5v6bCVvX+3dj4tm
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:10 2025 by rpki-client