Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/RLUU-ASlO7Yx-WRBqfRsjhYzZwI.roa
File: RLUU-ASlO7Yx-WRBqfRsjhYzZwI.roa (raw, json)
Hash identifier: wfI3uFHBkwt79SULwx52D3uLk6dEfa0tzpjABYA01Qg=
Subject key identifier: 44:B5:14:F8:04:A5:3B:B6:31:F9:64:41:A9:F4:6C:8E:16:33:67:02
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0193F80F7F5B17EB1C06D6FBF1B6C6FD53E1
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/RLUU-ASlO7Yx-WRBqfRsjhYzZwI.roa
Signing time: Tue 24 Dec 2024 09:46:25 +0000
ROA not before: Tue 24 Dec 2024 09:46:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 103.83.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f8:0f:7f:5b:17:eb:1c:06:d6:fb:f1:b6:c6:fd:53:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Dec 24 09:46:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44b514f804a53bb631f96441a9f46c8e16336702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:08:8f:2e:81:02:7e:24:1e:54:0d:01:93:
3b:29:3d:4d:45:1b:46:76:a3:9c:f6:47:af:8a:7b:
be:c3:0f:1c:5d:21:b8:c7:ea:4a:9d:ab:cf:4c:0a:
be:a9:23:c3:a9:a6:bf:d6:a7:6e:2f:9a:c2:17:eb:
22:f7:b8:d7:c7:49:d9:b9:44:e1:c8:e9:f8:84:12:
6c:2f:6a:cc:e5:06:e1:be:68:80:f5:37:60:7b:42:
56:39:ef:18:9c:77:31:27:f1:90:85:f7:9e:a6:25:
5c:03:2b:d5:bb:54:bf:ae:22:9e:fa:11:7a:6e:fd:
5d:21:e1:99:df:15:1e:11:3e:53:23:69:b3:b9:71:
63:2f:5a:68:65:0a:58:b1:d9:2c:93:c2:80:dd:e4:
d7:0e:c5:aa:b5:2c:ba:18:f8:d3:9d:bc:6b:dd:55:
a8:f0:cb:8c:c8:82:40:90:a2:5a:8e:f9:a0:01:99:
a6:c3:b5:16:1d:99:e6:a8:d7:75:4a:d5:11:c6:9a:
25:f1:c3:fa:9b:b7:a5:21:71:71:e3:80:d6:71:a5:
d0:f8:be:4e:25:22:d6:f4:f9:23:6f:9d:c6:a6:3c:
e5:01:9f:96:50:b8:af:28:32:2a:14:f6:38:5b:e7:
da:19:68:c3:04:c5:be:d3:33:28:bf:39:a6:3f:f2:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B5:14:F8:04:A5:3B:B6:31:F9:64:41:A9:F4:6C:8E:16:33:67:02
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/RLUU-ASlO7Yx-WRBqfRsjhYzZwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.87.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:a7:cd:81:2a:23:b0:66:93:20:15:a5:21:fb:d0:74:db:47:
c2:a2:3a:ed:17:fe:36:12:f4:24:e1:be:1d:30:d2:aa:46:bb:
b5:e1:de:4e:ac:64:c2:5b:e3:db:67:8a:d6:87:cd:94:88:6a:
e7:36:b0:da:08:44:ba:2f:bb:33:95:5f:cf:2a:48:bc:6d:e7:
64:1e:59:6d:44:83:4c:a1:df:03:09:20:e5:22:44:4e:f7:0b:
1f:72:3e:18:6e:02:6d:50:5f:ff:05:15:da:e8:82:76:e7:0c:
e5:60:4e:e0:2b:bf:4d:67:ea:50:89:a3:81:c8:96:06:2c:c2:
fe:3e:a6:cb:b5:49:99:9e:95:29:bf:85:8c:86:21:13:b9:4d:
82:2e:55:e7:7b:24:ba:49:fe:17:8e:9c:9d:b9:3d:88:cf:9e:
e6:cc:f6:9b:8b:22:8e:a1:e5:c4:94:83:a4:74:b7:af:a9:6e:
bf:3f:aa:c4:32:6c:06:84:96:81:48:0f:39:fb:67:56:b8:79:
31:5b:50:68:56:b5:d8:e0:70:f2:66:9a:86:0c:97:4f:be:54:
f1:7e:c9:b0:8a:7e:06:27:ae:b8:74:4d:49:96:1e:e2:92:34:
b2:49:f8:97:0c:ce:4a:fd:a8:58:a0:35:8f:db:3a:b8:31:14:
c4:07:a6:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZP4D39bF+scBtb78bbG/VPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjQxMjI0MDk0NjI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGI1MTRmODA0YTUzYmI2MzFmOTY0NDFhOWY0NmM4ZTE2MzM2NzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkIIjy6BAn4kHlQNAZM7KT1NRRtG
dqOc9kevinu+ww8cXSG4x+pKnavPTAq+qSPDqaa/1qduL5rCF+si97jXx0nZuUTh
yOn4hBJsL2rM5QbhvmiA9Tdge0JWOe8YnHcxJ/GQhfeepiVcAyvVu1S/riKe+hF6
bv1dIeGZ3xUeET5TI2mzuXFjL1poZQpYsdksk8KA3eTXDsWqtSy6GPjTnbxr3VWo
8MuMyIJAkKJajvmgAZmmw7UWHZnmqNd1StURxpol8cP6m7elIXFx44DWcaXQ+L5O
JSLW9Pkjb53GpjzlAZ+WULivKDIqFPY4W+faGWjDBMW+0zMovzmmP/JORwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFES1FPgEpTu2MflkQan0bI4WM2cCMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvUkxVVS1BU2xPN1l4LVdSQnFmUnNqaFl6WndJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1NXMA0G
CSqGSIb3DQEBCwUAA4IBAQAup82BKiOwZpMgFaUh+9B020fCojrtF/42EvQk4b4d
MNKqRru14d5OrGTCW+PbZ4rWh82UiGrnNrDaCES6L7szlV/PKki8bedkHlltRINM
od8DCSDlIkRO9wsfcj4YbgJtUF//BRXa6IJ25wzlYE7gK79NZ+pQiaOByJYGLML+
PqbLtUmZnpUpv4WMhiETuU2CLlXneyS6Sf4XjpyduT2Iz57mzPabiyKOoeXElIOk
dLevqW6/P6rEMmwGhJaBSA85+2dWuHkxW1BoVrXY4HDyZpqGDJdPvlTxfsmwin4G
J664dE1Jlh7ikjSySfiXDM5K/ahYoDWP2zq4MRTEB6bo
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:16:09 2025 by rpki-client