Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/34DZuatEMnCqZRySjDQb4d8ITuo.roa
File: 34DZuatEMnCqZRySjDQb4d8ITuo.roa (raw, json)
Hash identifier: LPfrfrVMmmpPGghwcb9I/vwCE8hRN8pxi1gSjMgSy9c=
Subject key identifier: DF:80:D9:B9:AB:44:32:70:AA:65:1C:92:8C:34:1B:E1:DF:08:4E:EA
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0188F9CA6C3FFEEE812C5F26D7D41FF69B3E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/34DZuatEMnCqZRySjDQb4d8ITuo.roa
Signing time: Mon 26 Jun 2023 22:19:32 +0000
ROA not before: Mon 26 Jun 2023 22:19:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60504
IP address blocks: 103.47.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f9:ca:6c:3f:fe:ee:81:2c:5f:26:d7:d4:1f:f6:9b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 26 22:19:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df80d9b9ab443270aa651c928c341be1df084eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:88:37:23:76:13:63:bc:c0:df:a0:40:db:43:
95:8a:9c:d9:e4:48:b6:a5:4b:6b:4d:b3:cf:50:09:
4b:35:12:12:22:5e:7e:1e:da:5b:01:96:ea:09:60:
0f:41:06:f9:86:82:7a:99:a9:cc:cb:98:4d:d5:59:
34:c6:dd:62:34:90:e0:65:e7:11:a8:00:90:0c:5a:
82:0f:9b:d4:b9:8f:e7:a8:55:a9:4d:ef:d9:9f:65:
da:0b:ba:e7:25:fa:f8:9d:ed:0e:b4:ce:53:18:e1:
88:2a:04:26:ff:ab:86:ac:3b:05:ac:40:f8:78:1e:
17:99:b8:bf:ea:d7:85:e5:20:c7:c1:53:7e:37:a1:
35:80:bf:84:a2:4a:41:ab:07:ea:75:78:b0:99:6f:
08:ac:db:25:42:19:9e:5c:9c:2d:97:28:18:ac:db:
75:a9:7a:5a:b4:b3:b2:55:5d:cb:48:59:f8:be:a1:
73:21:d0:13:78:e5:9a:dc:b2:db:c3:38:d6:e1:7b:
ac:71:fd:3b:9d:b1:20:0a:78:b4:7c:fb:e1:fe:1d:
7e:30:31:47:5e:85:6e:58:7d:a7:37:79:f1:b0:5c:
85:8a:37:23:8d:c4:21:23:92:d2:06:1f:ad:1a:13:
46:68:d6:b0:e1:1f:eb:39:f1:09:79:28:76:27:07:
c9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:80:D9:B9:AB:44:32:70:AA:65:1C:92:8C:34:1B:E1:DF:08:4E:EA
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/34DZuatEMnCqZRySjDQb4d8ITuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.56.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:99:72:9a:cc:3d:4d:78:e4:bd:75:d3:a7:1b:a9:53:14:88:
29:72:0f:c8:3f:5f:c4:14:71:c6:e0:6c:05:57:52:3f:38:4b:
75:96:8d:86:86:0c:b9:c2:97:a6:8f:55:88:e2:13:0d:07:e1:
e0:e7:3f:cc:5d:3a:b5:8d:7f:3a:1c:f0:01:69:47:f7:88:1a:
2b:e7:df:f9:fd:f8:1e:35:cc:24:28:58:fc:bf:e1:89:17:91:
59:af:01:11:80:9a:97:b4:83:54:58:d9:a1:1f:1a:b0:b0:c2:
4b:65:33:e0:d9:9e:a4:1a:1a:cf:85:e2:01:75:b5:d2:0e:9f:
78:46:e1:12:66:c8:7a:da:84:61:0e:f7:22:51:04:64:ba:20:
37:7b:a0:fd:c8:d3:d1:dc:52:c9:c4:9b:68:1d:7c:9f:10:a7:
9e:26:66:94:80:3e:3e:8a:33:29:a6:f8:7e:20:2a:4f:53:5d:
57:39:bc:37:07:a8:75:06:53:eb:e7:b0:7a:76:c2:2e:bb:17:
3e:a2:29:35:e2:aa:62:48:a9:48:93:f7:f9:5c:f4:f5:a7:ec:
16:b0:bb:0f:25:b8:96:ad:9d:92:13:08:05:a0:ff:87:49:2d:
46:ab:16:7d:3d:6d:7e:5f:55:ab:e7:ec:e4:a8:96:fc:19:b5:
01:6d:11:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:40 2025 by rpki-client