Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/79hU1LDcdaIz410DlM7maXTjRc8.roa
File: 79hU1LDcdaIz410DlM7maXTjRc8.roa (raw, json)
Hash identifier: fKW8gLJY8MMCAzY44l/236iKkr703RFeQCN627I9mqE=
Subject key identifier: EF:D8:54:D4:B0:DC:75:A2:33:E3:5D:03:94:CE:E6:69:74:E3:45:CF
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01926CEC818D77E59EB492E51C9316A58DAA
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/79hU1LDcdaIz410DlM7maXTjRc8.roa
Signing time: Tue 08 Oct 2024 16:18:11 +0000
ROA not before: Tue 08 Oct 2024 16:18:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.47.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:ec:81:8d:77:e5:9e:b4:92:e5:1c:93:16:a5:8d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 8 16:18:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efd854d4b0dc75a233e35d0394cee66974e345cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8e:9e:41:bb:39:41:98:72:24:b9:84:95:3c:
91:09:48:25:ed:70:91:5c:9b:22:4d:a8:a0:df:3e:
db:9d:94:f8:ad:98:9c:d6:da:a2:eb:6f:ea:9b:77:
51:75:fd:69:71:5b:03:68:08:6b:b9:fc:d1:b0:e3:
40:e2:4f:64:87:0d:ef:e8:f8:51:ef:cc:dd:cc:bb:
04:c1:48:59:04:5d:2e:7b:e3:e7:b7:ce:ca:78:23:
28:5c:c6:a9:07:2a:00:c5:7b:aa:6b:3c:c7:7d:c8:
48:e9:ea:13:e3:04:56:6b:80:53:6c:8b:67:f7:06:
f9:7a:bb:c8:d2:3e:f4:14:bc:23:dd:0e:73:ba:e9:
66:7a:ec:34:5d:8f:d6:92:86:d4:61:e9:a4:42:51:
13:b7:d9:83:26:c1:77:59:46:87:ad:d5:3e:b6:3e:
3c:f8:32:80:13:1b:aa:28:85:4f:db:98:da:fe:b9:
a2:a1:40:f4:4d:b6:b0:1b:6a:f9:7c:ac:74:65:28:
da:1c:12:43:11:80:41:9b:e8:ef:36:5e:2f:eb:a1:
75:23:e7:d7:ac:21:2f:37:0b:cb:64:7f:74:17:1f:
b0:86:82:5d:94:4c:88:b2:54:ea:62:f9:8c:e5:fc:
3a:8b:32:06:0f:c5:fd:22:c0:cb:4b:5a:1e:11:db:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D8:54:D4:B0:DC:75:A2:33:E3:5D:03:94:CE:E6:69:74:E3:45:CF
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/79hU1LDcdaIz410DlM7maXTjRc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.56.0/24
Signature Algorithm: sha256WithRSAEncryption
20:26:88:08:36:82:06:be:87:06:35:79:ae:a7:1c:1b:67:16:
54:c3:8e:88:8d:1c:c4:d0:f0:06:e9:08:1e:af:75:c2:7a:d8:
d4:da:35:2a:09:83:e6:bd:14:14:3c:25:1b:84:28:bd:81:50:
7b:3e:83:66:a3:1c:7b:f0:bd:3b:ce:48:37:bf:34:2a:29:1a:
1f:4c:99:14:b0:c8:4e:09:cc:d1:dd:54:de:49:ed:bd:d4:7d:
80:27:37:9b:38:27:b1:d2:07:d9:47:67:1c:a6:c6:05:a4:57:
a9:14:5c:05:31:9e:2d:af:bf:2b:aa:ac:e3:cb:43:bd:40:54:
84:48:5c:a2:d0:11:ef:20:da:35:44:a5:33:91:7c:7a:35:d4:
af:15:13:83:ab:d7:22:32:28:6c:5a:3e:b2:cd:9f:f0:a8:c9:
9d:67:a0:35:2a:fd:3e:d9:30:b7:45:20:b4:92:33:6f:c1:08:
4d:bf:5a:ce:b2:f1:0e:54:7f:21:80:36:d1:91:31:13:fa:fc:
2a:2a:97:9e:85:45:97:6a:2f:9c:58:f0:4f:23:9a:92:63:06:
b5:b4:74:3d:39:fa:25:bc:fb:ee:5b:c7:c7:ec:42:6a:8c:b1:
66:22:87:1b:24:6f:e1:bb:df:f3:c7:bf:de:89:59:3f:06:f4:
01:2a:2a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:48 2025 by rpki-client