Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6qBvk8yjUw2g_A4zaXdQMK1S-wg.roa
File: 6qBvk8yjUw2g_A4zaXdQMK1S-wg.roa (raw, json)
Hash identifier: MUYBoP0t3YEQGQS8M84I9NjnBOs6zhQDXwIVt6bO8Zk=
Subject key identifier: EA:A0:6F:93:CC:A3:53:0D:A0:FC:0E:33:69:77:50:30:AD:52:FB:08
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018B817D542B2C5F1F69DACBA65236B67230
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6qBvk8yjUw2g_A4zaXdQMK1S-wg.roa
Signing time: Mon 30 Oct 2023 16:49:16 +0000
ROA not before: Mon 30 Oct 2023 16:49:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.59.0/24 maxlen: 24
14.102.231.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.237.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
14.102.239.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:7d:54:2b:2c:5f:1f:69:da:cb:a6:52:36:b6:72:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 30 16:49:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaa06f93cca3530da0fc0e3369775030ad52fb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:d4:61:4d:50:df:c2:8f:92:1c:f6:a6:3a:
93:da:b6:71:63:f5:a3:87:fd:70:39:58:d2:38:56:
d4:92:4d:8a:46:72:90:49:dc:55:8e:c6:65:1b:55:
e6:c6:91:9a:f5:89:4b:b7:0e:e7:9a:18:d7:b8:c9:
4e:13:c5:fc:0f:85:60:9b:ad:77:ee:23:84:2c:59:
fb:da:16:e0:b1:c0:a6:ce:2d:1b:d5:45:44:88:b2:
f9:5c:f5:bd:08:77:b0:4a:78:23:b2:5f:ac:06:65:
47:b0:ca:62:cf:bd:06:87:95:94:50:c9:ae:3c:91:
f8:02:c6:35:e7:e3:85:aa:ea:1e:18:4e:da:c4:00:
a2:86:34:69:74:54:35:29:fc:64:49:da:ca:1f:f9:
75:9c:55:38:a1:ef:a9:ca:35:11:7c:4b:d0:e2:24:
7b:dd:40:8e:24:9e:9d:92:ef:1f:a5:7c:9f:44:ca:
6e:19:3c:6a:ac:6e:cd:95:1c:88:b0:2a:38:07:64:
57:7a:48:5b:15:70:bc:a6:4b:59:73:bd:4f:40:6b:
b0:34:5b:b1:0a:5a:0d:1b:da:3b:11:3c:5d:d8:3a:
b6:15:80:a3:6e:66:12:9c:00:02:4e:74:83:6b:8e:
71:e0:05:ad:cb:57:6f:79:c1:32:b1:b8:8b:24:1e:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A0:6F:93:CC:A3:53:0D:A0:FC:0E:33:69:77:50:30:AD:52:FB:08
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6qBvk8yjUw2g_A4zaXdQMK1S-wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
14.102.234.0/24
14.102.236.0/22
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f9:45:17:7d:23:ba:cb:20:a4:15:2a:13:b1:eb:28:31:68:
9d:5a:fd:67:4a:15:4e:1e:67:fc:ae:13:61:0c:55:da:66:67:
35:2f:dd:5b:ac:fb:d5:45:72:90:80:96:c0:5f:fd:bc:22:ed:
36:17:35:c6:59:22:79:c4:5a:c8:f3:08:a3:86:cb:09:0f:60:
7e:00:5b:4f:4b:3b:bd:0e:e3:34:63:11:55:12:19:b3:ca:09:
e4:dd:f9:64:c5:23:ef:cd:f4:fe:6b:2d:f2:4b:db:03:03:15:
a9:b6:26:be:c2:ab:db:9f:fb:4b:c3:3c:3f:ac:16:1d:f8:17:
2f:55:f9:8c:ce:87:0d:a1:82:a2:c9:04:0b:a2:f7:3a:5a:1e:
45:3f:44:5b:f2:bd:cf:29:d1:6b:c5:9c:c2:0f:6e:54:fc:57:
97:70:2c:ac:7d:e1:8d:43:cd:ab:31:87:c2:13:8f:96:81:63:
62:81:7f:15:fb:d7:33:fc:bd:28:76:16:3a:12:2c:4b:1d:6e:
20:dc:df:1d:18:54:cf:8c:fa:2b:54:2b:a9:4f:7d:bc:03:ba:
6a:11:b1:42:08:20:b2:55:24:79:d3:ea:a2:ac:13:1f:a0:40:
67:54:bd:f2:cd:73:2a:d5:d3:4f:dd:b7:c6:63:08:3e:f4:0d:
00:55:f9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:25 2025 by rpki-client