Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_m_yehh1vcYatH7nosDpZi7N2Qc.roa
File: _m_yehh1vcYatH7nosDpZi7N2Qc.roa (raw, json)
Hash identifier: 4KdzA61b/zDrWNU8kk9S0eaqfd9DB3/WWwqRnDNrqZ0=
Subject key identifier: FE:6F:F2:7A:18:75:BD:C6:1A:B4:7E:E7:A2:C0:E9:66:2E:CD:D9:07
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01958605DFC0807B816D2876ECBEF9452108
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_m_yehh1vcYatH7nosDpZi7N2Qc.roa
Signing time: Tue 11 Mar 2025 16:24:46 +0000
ROA not before: Tue 11 Mar 2025 16:24:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132978
IP address blocks: 103.47.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:86:05:df:c0:80:7b:81:6d:28:76:ec:be:f9:45:21:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 11 16:24:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe6ff27a1875bdc61ab47ee7a2c0e9662ecdd907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:79:15:0f:64:7c:f9:95:42:da:8b:b3:ad:
0e:6c:37:a8:a0:4f:d1:4f:3d:21:29:4e:6c:51:6c:
3e:2b:80:54:82:96:f1:ac:52:c2:81:be:b6:26:5b:
07:73:a9:c7:72:85:ec:8c:bb:10:8a:ef:60:03:d0:
2c:e8:01:34:70:e7:45:d3:9c:5d:d1:1d:12:a8:e9:
06:5c:02:c2:62:dc:ea:7f:b0:18:5b:29:f7:7b:45:
df:d2:32:0a:4c:f2:01:56:f2:83:2e:90:01:ba:1d:
36:15:7a:a6:5e:d2:4b:4b:ed:b7:e3:90:af:38:42:
8e:4b:ab:14:01:26:22:de:74:15:e7:a3:15:87:33:
e5:fa:bb:94:ee:99:3b:1c:50:33:6b:e8:3d:3c:a8:
01:47:b5:d1:7f:26:a4:14:89:24:53:ce:44:d2:83:
ed:d0:83:0a:5f:a3:84:75:c3:f5:7d:92:38:1a:40:
3d:1d:9e:40:4a:c0:c9:d5:3c:fb:0a:23:06:60:84:
e6:18:f0:bf:2a:8d:a9:e1:da:f9:ec:79:bd:c1:b9:
ae:d6:22:0a:c0:d3:43:1b:14:e5:0b:3d:71:a9:a5:
ef:5e:1f:ae:03:82:5a:1f:dc:84:90:a3:85:9a:04:
a1:2c:9d:d1:fc:36:70:65:23:25:2b:30:1f:90:0a:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6F:F2:7A:18:75:BD:C6:1A:B4:7E:E7:A2:C0:E9:66:2E:CD:D9:07
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_m_yehh1vcYatH7nosDpZi7N2Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.56.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:e9:2d:c9:50:54:0b:77:23:a1:43:74:aa:38:be:14:61:bf:
5a:66:d9:96:d4:e6:1a:3b:d5:cb:9f:e5:7d:46:5a:3e:12:98:
ad:1b:47:47:80:62:de:3d:e1:1d:42:8e:d4:a7:9b:c3:f0:58:
8a:75:f8:51:59:b6:96:54:9f:dc:ce:e3:a5:58:14:2a:03:e4:
c0:70:40:07:2f:1b:2b:f7:fd:a5:4e:5b:be:fc:06:22:08:5d:
0f:0c:b7:3a:e7:33:c0:d3:9f:35:77:cb:1e:58:14:15:18:72:
db:70:09:91:ba:7c:02:38:e7:e8:e9:60:12:e1:94:e3:30:a9:
da:c3:6b:23:a7:12:03:5c:07:be:70:e5:f0:ae:0c:f9:99:4b:
41:5f:0c:8d:28:13:96:60:22:d1:b3:83:3b:e1:df:17:b3:00:
6d:2c:88:fe:e2:cd:c4:8b:e9:b5:f7:0d:87:1a:e1:ec:9c:47:
b6:0d:96:ed:c0:34:9c:7d:b7:50:a0:2e:a5:fb:4e:6e:cb:b5:
21:5c:77:7e:be:a5:f5:cc:36:5c:7e:7e:a8:e1:54:4c:f0:d4:
32:ab:10:a5:8b:b6:5d:0c:92:3e:34:78:58:5d:ee:01:e8:64:
d0:18:24:d0:00:83:78:b9:9b:b9:fe:06:48:a8:8d:ba:51:d3:
fc:93:5f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:32:08 2025 by rpki-client