Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/DO5idF7JefFWyUYzkZhYwCuZL6c.roa
File: DO5idF7JefFWyUYzkZhYwCuZL6c.roa (raw, json)
Hash identifier: AJ1wLkAbsKPjn/aeUEI+0wqiFAaro9i62bH223sEeJk=
Subject key identifier: 0C:EE:62:74:5E:C9:79:F1:56:C9:46:33:91:98:58:C0:2B:99:2F:A7
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 019423D805A9466CE8A59ACC0C037A7A66FA
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/DO5idF7JefFWyUYzkZhYwCuZL6c.roa
Signing time: Wed 01 Jan 2025 21:49:07 +0000
ROA not before: Wed 01 Jan 2025 21:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202603
IP address blocks: 103.23.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:05:a9:46:6c:e8:a5:9a:cc:0c:03:7a:7a:66:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Jan 1 21:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cee62745ec979f156c94633919858c02b992fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:45:4f:e2:22:74:e4:ed:3a:34:55:e0:ec:8a:
20:80:44:34:4b:3b:bf:87:33:15:fe:91:65:47:08:
f9:f1:7d:1e:a6:03:bb:e9:5c:26:73:cd:43:03:99:
68:2c:13:55:f3:76:e6:2a:5a:fb:e9:a2:b4:1e:b4:
47:4b:48:cf:f3:e1:a4:9a:40:52:b5:ee:14:c4:8a:
30:0c:65:07:f0:4f:04:cc:12:a5:06:21:ec:3d:f1:
da:da:98:f5:5a:f8:30:41:c5:7f:62:5d:65:3e:dd:
d0:b7:94:69:06:fc:41:54:5f:54:10:fd:9f:f8:37:
d3:c7:76:5e:83:50:87:ff:0b:36:24:f9:4a:86:0f:
f4:c3:8b:23:4c:0a:5e:e2:fd:de:b4:f3:d5:4e:6c:
90:ff:12:20:f0:52:01:af:a5:32:81:d2:f6:0d:4b:
1e:ef:8a:cc:8e:cc:7d:03:7e:6c:09:2c:60:e4:17:
bf:c3:f1:4c:89:75:31:88:e5:c8:7d:e9:c0:d4:54:
6d:34:e1:91:b1:86:79:79:16:3a:e9:4c:05:a7:f9:
60:b6:85:33:e0:5c:40:79:0c:01:31:f7:ca:12:52:
7e:b8:22:17:0f:02:ce:db:40:61:5c:7e:d8:74:38:
ce:bd:3d:91:d7:4b:ea:b7:c9:b0:6a:10:36:7b:2e:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EE:62:74:5E:C9:79:F1:56:C9:46:33:91:98:58:C0:2B:99:2F:A7
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/DO5idF7JefFWyUYzkZhYwCuZL6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.23.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a5:89:89:4a:72:0c:32:79:5b:6a:b9:9e:d5:be:b2:ac:d8:
1a:19:b8:2f:8d:3a:fd:c6:59:51:66:51:c3:3a:37:82:32:d7:
13:8b:62:af:2e:a4:30:c8:80:09:66:91:12:de:31:fb:27:80:
c0:68:3b:e7:85:90:f0:ed:f1:a2:ca:50:8e:a4:44:3a:3d:f3:
ff:49:2b:58:80:70:c8:60:64:bd:fb:ee:f4:e1:c3:ea:30:48:
3c:ec:03:ed:c5:92:87:b8:39:49:70:a2:da:2a:79:1e:b6:e2:
00:67:d0:86:2c:35:93:5c:68:9f:05:87:06:3e:ad:ff:5d:b4:
bf:0e:81:19:70:a7:21:75:c6:b0:b2:8f:72:7e:82:d1:66:eb:
f5:e1:00:c2:17:51:16:ad:ca:24:fd:0c:b8:77:1f:44:84:2f:
17:b4:57:d5:11:07:c7:45:1c:ca:26:70:b2:09:bc:6c:b4:63:
b9:10:09:3e:31:d5:ed:3f:15:0d:d9:e1:ff:db:66:8e:6c:a2:
1f:8c:6f:ef:e6:3e:d9:0a:91:ff:c3:92:b3:6b:a9:43:b3:d2:
e7:a7:c2:8a:a8:77:37:26:53:d6:11:48:30:37:84:c0:5c:38:
2a:bd:65:f9:b9:23:ab:bb:0d:5d:32:b8:08:ea:bf:2e:1d:ae:
46:ed:bd:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj2AWpRmzopZrMDAN6emb6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx
OWM0NDgwHhcNMjUwMTAxMjE0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2VlNjI3NDVlYzk3OWYxNTZjOTQ2MzM5MTk4NThjMDJiOTkyZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UVP4iJ05O06NFXg7IoggEQ0Szu/
hzMV/pFlRwj58X0epgO76Vwmc81DA5loLBNV83bmKlr76aK0HrRHS0jP8+GkmkBS
te4UxIowDGUH8E8EzBKlBiHsPfHa2pj1WvgwQcV/Yl1lPt3Qt5RpBvxBVF9UEP2f
+DfTx3Zeg1CH/ws2JPlKhg/0w4sjTApe4v3etPPVTmyQ/xIg8FIBr6UygdL2DUse
74rMjsx9A35sCSxg5Be/w/FMiXUxiOXIfenA1FRtNOGRsYZ5eRY66UwFp/lgtoUz
4FxAeQwBMffKElJ+uCIXDwLO20BhXH7YdDjOvT2R10vqt8mwahA2ey4gJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAzuYnReyXnxVslGM5GYWMArmS+nMB8GA1UdIwQY
MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt
YWQyZmRhNDc5ODhlLzEvRE81aWRGN0plZkZXeVVZemtaaFl3Q3VaTDZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl
LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxc/MA0G
CSqGSIb3DQEBCwUAA4IBAQCPpYmJSnIMMnlbarme1b6yrNgaGbgvjTr9xllRZlHD
OjeCMtcTi2KvLqQwyIAJZpES3jH7J4DAaDvnhZDw7fGiylCOpEQ6PfP/SStYgHDI
YGS9++704cPqMEg87APtxZKHuDlJcKLaKnketuIAZ9CGLDWTXGifBYcGPq3/XbS/
DoEZcKchdcawso9yfoLRZuv14QDCF1EWrcok/Qy4dx9EhC8XtFfVEQfHRRzKJnCy
CbxstGO5EAk+MdXtPxUN2eH/22aObKIfjG/v5j7ZCpH/w5Kza6lDs9Lnp8KKqHc3
JlPWEUgwN4TAXDgqvWX5uSOruw1dMrgI6r8uHa5G7b0i
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:57 2025 by rpki-client