Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/5J5YJ6UE_SK5RdCSy-xNr5MLQtY.roa
File: 5J5YJ6UE_SK5RdCSy-xNr5MLQtY.roa (raw, json)
Hash identifier: dFQJKIGz/EYSyh/JN9NooXPIw4R7tY4yZk7NGeA/UIY=
Subject key identifier: E4:9E:58:27:A5:04:FD:22:B9:45:D0:92:CB:EC:4D:AF:93:0B:42:D6
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 01856C53C7392C392C5D8B3A150F7F361459
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/5J5YJ6UE_SK5RdCSy-xNr5MLQtY.roa
Signing time: Sun 01 Jan 2023 07:55:07 +0000
ROA not before: Sun 01 Jan 2023 07:55:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202603
IP address blocks: 103.23.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:c7:39:2c:39:2c:5d:8b:3a:15:0f:7f:36:14:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jan 1 07:55:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e49e5827a504fd22b945d092cbec4daf930b42d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:95:da:83:f7:a4:e1:bd:f3:31:8c:a6:90:ec:
f1:60:a9:27:8b:25:09:3c:22:77:10:a5:ca:07:4e:
a8:80:57:d1:99:6d:f7:4a:40:8f:97:99:53:26:02:
5d:02:3d:49:94:04:f2:5f:2d:c6:2f:0c:5c:e0:a6:
5d:43:43:ea:af:7f:00:11:f2:c0:4a:54:86:51:c1:
2d:0e:f1:47:82:0c:5c:77:4e:34:e6:89:f0:f1:24:
f4:6a:19:40:53:ea:97:0e:3d:ee:7b:fc:e1:f5:14:
a3:82:d5:42:3e:95:c7:57:5e:e3:d7:51:a0:e7:43:
e6:1e:47:3c:b6:65:4b:85:79:66:d4:4e:47:27:b8:
28:f0:d2:62:2a:4b:94:a5:b6:a7:3a:63:6b:2d:66:
7a:c4:89:3a:79:90:bd:59:0a:35:78:21:1c:07:39:
0a:99:87:1f:72:96:2c:58:ec:c6:1b:d6:02:f6:07:
26:41:82:ad:1e:d2:c7:42:96:0d:31:0a:bc:62:ed:
aa:48:88:ee:83:cc:dc:46:63:8b:f4:57:49:fa:44:
29:38:5d:8f:d1:2e:aa:96:f5:fd:92:2f:4f:15:ee:
2c:f5:1a:dd:94:65:d6:73:4d:3e:d3:52:5e:a5:80:
aa:f5:a3:40:f7:54:3f:e4:18:99:2e:bc:b2:3e:bf:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9E:58:27:A5:04:FD:22:B9:45:D0:92:CB:EC:4D:AF:93:0B:42:D6
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/5J5YJ6UE_SK5RdCSy-xNr5MLQtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:07:9d:9d:1b:d3:5a:9f:f4:94:f4:15:0d:c2:b8:6e:b6:0a:
7f:f3:6c:51:fb:9d:d9:63:d0:86:4e:79:7c:a9:d7:b1:38:14:
4c:41:9e:cb:b1:db:9d:be:23:4f:25:ad:6c:51:60:6b:43:0a:
f2:77:18:bb:68:76:58:0f:fe:4c:e8:cc:02:27:62:78:ac:4f:
c0:33:18:6e:3c:29:0b:2f:5e:bc:24:e7:cb:c3:7d:1c:70:b5:
75:56:88:ff:00:4e:30:89:a5:3a:d1:07:c4:40:cb:41:36:2e:
27:3e:30:17:da:3e:3e:a4:a2:d4:05:c0:ac:15:fa:fa:4f:aa:
b0:f7:ff:9d:e4:f2:42:a2:6a:7c:a0:2c:cc:6c:e0:31:6f:59:
1e:aa:c1:ed:23:95:d4:eb:c5:06:e1:0f:40:f5:8a:c3:7d:d4:
c6:66:41:64:52:76:50:c8:da:75:ac:b4:f8:db:fd:f3:bd:62:
a5:06:49:76:99:1b:1e:a7:79:30:9a:40:4d:d2:29:30:d0:f7:
2a:0d:c0:8a:f0:72:6c:a6:88:ad:5a:9b:49:61:fe:36:8d:6e:
28:c7:de:00:a0:12:80:af:c8:0a:4a:dc:34:cb:7c:f9:fe:74:
6c:16:b6:b3:9f:92:e0:1c:43:4c:d3:a1:78:5c:ee:3f:2c:ea:
cf:01:93:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:03:04 2025 by rpki-client