Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DVKQA-V3l8p73T1BptnIC0JPYG0.roa
File: DVKQA-V3l8p73T1BptnIC0JPYG0.roa (raw, json)
Hash identifier: A9spkmJuAt5NuaKXaZqjXMGh2T9OJZxxgg/zOJjq9ns=
Subject key identifier: 0D:52:90:03:E5:77:97:CA:7B:DD:3D:41:A6:D9:C8:0B:42:4F:60:6D
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018CF96A46112656B6EB256B670C1B8199F2
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DVKQA-V3l8p73T1BptnIC0JPYG0.roa
Signing time: Thu 11 Jan 2024 16:45:40 +0000
ROA not before: Thu 11 Jan 2024 16:45:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 103.47.59.0/24 maxlen: 24
14.102.231.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:6a:46:11:26:56:b6:eb:25:6b:67:0c:1b:81:99:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 11 16:45:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d529003e57797ca7bdd3d41a6d9c80b424f606d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:ef:7c:7a:c7:a4:58:cc:c5:07:72:ca:4c:
dc:e8:a7:44:d7:36:ee:bd:00:5b:b8:58:a2:5a:ea:
11:4b:f4:96:87:75:a1:f6:94:11:35:10:6e:4e:fc:
4e:d4:44:1f:3a:21:7a:d7:02:51:75:02:0e:64:51:
e8:65:e7:dd:1d:18:bf:3e:2a:9b:e2:e6:1b:57:96:
e1:11:8e:cb:05:d1:30:d4:16:aa:28:15:3e:72:b3:
db:45:3d:03:8e:3b:92:a2:f5:0e:c6:82:5d:14:fb:
4e:1c:cf:42:4d:2f:e8:66:e2:87:8e:97:38:04:0a:
de:4b:2a:3f:5e:75:3b:5d:c7:59:95:90:58:5f:44:
eb:aa:e6:0f:3f:5f:41:44:17:e5:b1:b6:5e:1e:67:
fe:fe:77:9e:ee:55:3f:87:6a:a2:54:0c:1b:ad:5e:
d5:53:3b:ea:2a:e9:b3:7d:ab:6f:8e:46:94:e1:42:
01:2f:93:66:64:cd:09:b3:a1:97:68:53:b2:b5:0b:
30:ef:8d:06:63:f3:cb:80:de:9c:40:1c:6e:df:68:
65:6d:64:79:1e:2e:3a:15:dc:aa:72:73:6c:6a:c5:
a3:32:de:f5:a9:ad:ab:b4:b1:ff:55:b2:41:5b:29:
96:67:7a:2e:e9:44:f9:54:89:38:d6:6d:b4:e0:86:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:52:90:03:E5:77:97:CA:7B:DD:3D:41:A6:D9:C8:0B:42:4F:60:6D
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DVKQA-V3l8p73T1BptnIC0JPYG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
14.102.234.0/24
14.102.236.0/24
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:7c:4a:09:71:c4:c9:ef:8f:ab:03:e1:12:11:87:9c:2e:4e:
90:19:f7:78:b0:0a:9e:8a:65:3b:e8:b4:6b:38:63:b4:57:dc:
89:3a:a2:27:7c:ad:d5:65:cd:e6:e8:34:82:e3:16:c1:95:41:
c6:14:1a:17:1e:93:01:fd:49:d2:ca:d2:cb:ee:dc:45:0b:b4:
ee:16:05:60:66:7f:13:72:1c:52:8b:f6:e2:e1:ad:42:5e:0a:
47:e7:60:ac:64:5e:02:4d:d2:f8:e8:8f:fc:4e:a9:65:38:4b:
22:49:18:fe:a1:a6:8e:f6:8c:2a:95:c0:4d:4c:2b:fa:8a:df:
d4:63:9d:72:b7:54:8c:db:ac:b8:18:e7:2c:bc:f1:4a:69:ab:
84:ba:58:5c:a1:90:71:50:96:29:01:c7:4a:38:20:6a:a6:da:
21:ff:de:1e:b5:d4:9a:64:28:8f:16:85:a7:56:28:93:bd:3a:
91:ff:e5:dc:7a:15:c5:e7:bb:f5:be:ae:e8:62:5e:98:2f:54:
b4:c1:e9:0a:9e:02:71:ed:64:4e:ff:84:30:ad:45:c1:b3:aa:
06:18:3b:97:9a:1f:ba:64:8f:ff:c0:27:32:ee:3b:73:9d:40:
03:34:38:fe:d6:29:27:40:78:86:aa:c3:ed:fc:f7:02:aa:ea:
57:9c:61:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:29 2025 by rpki-client