Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/wi9ShNDeHGFKcpo3x4TCBO-no_o.roa
File: wi9ShNDeHGFKcpo3x4TCBO-no_o.roa (raw, json)
Hash identifier: HOcWCSqkdJcEy/+kxm5w7H16DkZ4ngnMfW0NyTPdW2I=
Subject key identifier: C2:2F:52:84:D0:DE:1C:61:4A:72:9A:37:C7:84:C2:04:EF:A7:A3:FA
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019424B26D9F6F2D3953B620D2A6CED47C7E
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/wi9ShNDeHGFKcpo3x4TCBO-no_o.roa
Signing time: Thu 02 Jan 2025 01:47:40 +0000
ROA not before: Thu 02 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214311
IP address blocks: 103.83.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6d:9f:6f:2d:39:53:b6:20:d2:a6:ce:d4:7c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jan 2 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c22f5284d0de1c614a729a37c784c204efa7a3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:18:74:59:4f:c1:ce:5d:ab:d7:91:4f:1e:
1e:d9:d7:22:56:49:dc:8e:e5:e8:16:78:13:2f:31:
a9:92:20:30:c2:20:53:d4:44:da:b2:87:17:fc:8a:
a2:2d:5a:ef:00:f4:e7:0f:41:86:c6:58:42:cc:95:
c1:ef:7b:3b:40:05:fd:9f:af:d1:34:2b:17:dc:7c:
00:34:76:25:3a:d1:6f:46:0f:26:01:9c:4b:de:ab:
49:3c:05:52:a6:cd:f9:31:74:81:bd:17:a4:3d:0a:
b9:85:ab:57:60:bb:03:b7:d8:21:98:9f:60:f6:51:
93:13:8f:0f:cd:d2:bf:80:37:f4:e3:47:99:89:92:
d3:3e:59:fb:9d:79:78:9a:cd:0a:15:63:65:ca:95:
58:e8:65:e6:bd:b5:bb:fc:b4:b3:c1:a5:ba:87:59:
03:12:72:39:34:6a:98:04:48:22:08:83:0d:ca:57:
32:59:2e:5a:c4:68:7f:06:4b:e0:df:fe:57:cc:e9:
71:c0:1c:68:03:15:c1:d2:83:ac:a7:50:a0:c0:77:
46:61:7b:3d:a6:73:6e:91:ec:4d:79:dd:43:1b:fc:
3d:02:66:c7:8f:8f:4b:36:ea:f9:f1:c2:03:ff:3a:
28:9a:84:8c:18:59:4d:2b:16:6b:47:ac:f4:b4:4b:
19:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2F:52:84:D0:DE:1C:61:4A:72:9A:37:C7:84:C2:04:EF:A7:A3:FA
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/wi9ShNDeHGFKcpo3x4TCBO-no_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.86.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9b:20:c5:23:d6:89:78:27:03:d1:a5:54:13:f6:ce:14:86:
2e:70:e2:3b:f7:08:2e:b8:bb:e4:d4:8d:c4:6f:19:ea:de:d8:
0b:cc:59:13:25:65:b5:9c:1d:5c:3a:42:56:5c:31:7f:ef:12:
10:3c:31:43:70:98:8c:5b:1b:bf:b8:82:04:a2:41:38:e9:38:
46:82:e9:c4:9c:3a:c3:55:53:bf:5d:f2:d6:10:94:9c:03:73:
d8:25:74:a8:fa:7d:d6:8f:9b:00:31:1c:f6:48:8e:ac:ff:33:
be:69:3d:65:07:74:14:32:e0:68:b0:89:3f:70:a8:eb:23:01:
b1:46:64:6e:8b:66:5f:89:46:90:f6:7b:11:8f:2d:19:34:a7:
df:6e:5f:69:f8:84:ce:b4:a3:cd:71:e8:bd:e7:be:0e:51:c2:
72:91:e2:6b:ca:46:d8:f8:0e:03:6c:09:8b:60:e7:14:1a:53:
55:f5:9c:76:07:1f:6d:b9:7b:c2:1a:3a:b0:d3:3e:33:4b:ee:
7c:4c:e2:a0:2d:8c:0d:96:e9:ef:49:9f:c9:a6:0d:5c:f7:1d:
cf:87:f7:84:de:1c:aa:e4:ab:41:ee:d5:dc:44:a0:ab:80:c3:
34:fe:ed:b3:98:c0:99:f6:af:53:6e:77:21:2d:16:26:09:f7:
71:37:78:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksm2fby05U7Yg0qbO1Hx+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjUwMTAyMDE0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjJmNTI4NGQwZGUxYzYxNGE3MjlhMzdjNzg0YzIwNGVmYTdhM2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb0YdFlPwc5dq9eRTx4e2dciVknc
juXoFngTLzGpkiAwwiBT1ETasocX/IqiLVrvAPTnD0GGxlhCzJXB73s7QAX9n6/R
NCsX3HwANHYlOtFvRg8mAZxL3qtJPAVSps35MXSBvRekPQq5hatXYLsDt9ghmJ9g
9lGTE48PzdK/gDf040eZiZLTPln7nXl4ms0KFWNlypVY6GXmvbW7/LSzwaW6h1kD
EnI5NGqYBEgiCIMNylcyWS5axGh/Bkvg3/5XzOlxwBxoAxXB0oOsp1CgwHdGYXs9
pnNukexNed1DG/w9AmbHj49LNur58cID/zoomoSMGFlNKxZrR6z0tEsZlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMIvUoTQ3hxhSnKaN8eEwgTvp6P6MB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvd2k5U2hORGVIR0ZLY3BvM3g0VENCTy1ub19vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1NWMA0G
CSqGSIb3DQEBCwUAA4IBAQBemyDFI9aJeCcD0aVUE/bOFIYucOI79wguuLvk1I3E
bxnq3tgLzFkTJWW1nB1cOkJWXDF/7xIQPDFDcJiMWxu/uIIEokE46ThGgunEnDrD
VVO/XfLWEJScA3PYJXSo+n3Wj5sAMRz2SI6s/zO+aT1lB3QUMuBosIk/cKjrIwGx
RmRui2ZfiUaQ9nsRjy0ZNKffbl9p+ITOtKPNcei9574OUcJykeJrykbY+A4DbAmL
YOcUGlNV9Zx2Bx9tuXvCGjqw0z4zS+58TOKgLYwNlunvSZ/Jpg1c9x3Ph/eE3hyq
5KtB7tXcRKCrgMM0/u2zmMCZ9q9TbnchLRYmCfdxN3iX
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:16:13 2025 by rpki-client