Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FSjk1s-vDozoeuB3onw9jLx6OFU.roa
File: FSjk1s-vDozoeuB3onw9jLx6OFU.roa (raw, json)
Hash identifier: c23oUS7B8wy15r6lxiywoB7/T5qhN6ITpb5hBa1WMeI=
Subject key identifier: 15:28:E4:D6:CF:AF:0E:8C:E8:7A:E0:77:A2:7C:3D:8C:BC:7A:38:55
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0187E2F81A16CFB1077756E94DE50779F855
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FSjk1s-vDozoeuB3onw9jLx6OFU.roa
Signing time: Wed 03 May 2023 18:55:23 +0000
ROA not before: Wed 03 May 2023 18:55:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.56.0/24 maxlen: 24
103.47.57.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e2:f8:1a:16:cf:b1:07:77:56:e9:4d:e5:07:79:f8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 3 18:55:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1528e4d6cfaf0e8ce87ae077a27c3d8cbc7a3855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:93:d1:e2:bc:72:77:76:f0:9d:4e:d5:93:
83:b4:9a:17:bc:37:22:0c:39:5b:a3:a8:4d:5a:48:
3e:49:be:ea:ca:5c:b5:8c:ac:96:f5:1c:d3:44:bb:
4f:5f:7e:f8:21:0f:65:ed:62:68:28:f7:d3:e3:2b:
c0:33:6d:a9:61:aa:d7:88:e8:b2:34:6b:eb:30:c8:
42:36:93:6f:e1:7a:47:48:ac:db:09:82:b9:94:eb:
f0:62:96:06:6f:05:59:7b:b6:f2:cc:9e:df:38:4c:
02:54:96:2c:6c:2e:d8:12:f4:96:a0:c8:66:3b:62:
23:88:be:84:15:44:4a:be:90:44:b9:55:5c:24:b0:
8f:32:52:89:fd:f1:79:91:18:33:64:02:f0:42:76:
e6:b2:cb:ab:79:06:5e:b0:09:89:dd:14:af:cc:0c:
be:a6:51:8b:b0:2a:28:6d:71:97:3a:e5:18:e2:5f:
6d:9e:56:e7:fc:dd:b0:76:b3:e0:f6:4d:05:6e:8c:
ed:aa:81:f1:ae:e0:4c:27:64:11:11:4d:f5:ee:81:
71:b4:ab:75:94:53:bf:88:da:a7:69:4f:55:ff:e2:
f6:ef:76:11:73:03:21:c9:89:b2:19:cc:c5:2c:b7:
ee:99:0b:43:f0:27:3b:4e:73:ab:48:1c:c1:56:05:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:28:E4:D6:CF:AF:0E:8C:E8:7A:E0:77:A2:7C:3D:8C:BC:7A:38:55
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/FSjk1s-vDozoeuB3onw9jLx6OFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.236.0/24
14.102.238.0/24
103.47.56.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:9a:c6:26:2c:db:3c:f3:86:54:a9:fc:dc:3d:a1:cc:43:d4:
2e:bb:be:14:5d:9d:08:c3:8d:06:c0:1e:2e:7e:e2:07:e4:ce:
4e:c3:fe:0c:bf:b8:cb:4b:72:15:04:04:d2:2a:37:02:57:00:
54:15:62:2d:35:58:94:91:dd:0d:ff:db:29:3e:7e:91:af:0b:
83:40:7c:82:82:0d:a1:a9:e5:f8:06:c5:bc:c1:4c:b0:4a:e5:
94:4a:b2:2c:a2:d8:13:6e:14:45:05:93:8a:6a:51:17:e5:ca:
b2:58:67:86:f0:ed:f4:62:69:7b:b8:d4:0f:dc:36:58:37:09:
35:7d:53:b1:5e:8e:39:e6:9b:58:a4:30:ac:b0:6e:98:10:c5:
9c:e1:2c:5c:47:81:95:ac:45:1d:15:e3:02:ee:d0:50:a5:54:
7a:6f:5e:a4:fa:e2:c8:1f:05:4c:73:4d:f8:35:87:a6:61:ea:
63:fb:58:c5:83:c5:46:23:50:0e:56:07:55:bf:71:7f:06:81:
2e:d5:a7:72:e5:b8:c3:8e:96:e4:8d:9e:da:ec:04:2e:21:e0:
5b:75:57:00:8f:63:10:fc:32:8d:d8:1c:11:57:fa:44:54:e4:
d3:ef:f2:96:e0:69:ed:14:85:e1:2d:16:15:49:cf:5e:13:df:
38:4a:7a:26
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYfi+BoWz7EHd1bpTeUHefhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjMwNTAzMTg1NTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTI4ZTRkNmNmYWYwZThjZTg3YWUwNzdhMjdjM2Q4Y2JjN2EzODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzqT0eK8cnd28J1O1ZODtJoXvDci
DDlbo6hNWkg+Sb7qyly1jKyW9RzTRLtPX374IQ9l7WJoKPfT4yvAM22pYarXiOiy
NGvrMMhCNpNv4XpHSKzbCYK5lOvwYpYGbwVZe7byzJ7fOEwCVJYsbC7YEvSWoMhm
O2IjiL6EFURKvpBEuVVcJLCPMlKJ/fF5kRgzZALwQnbmssureQZesAmJ3RSvzAy+
plGLsCoobXGXOuUY4l9tnlbn/N2wdrPg9k0FboztqoHxruBMJ2QREU317oFxtKt1
lFO/iNqnaU9V/+L273YRcwMhyYmyGczFLLfumQtD8Cc7TnOrSBzBVgXdcwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBUo5NbPrw6M6Hrgd6J8PYy8ejhVMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvRlNqazFzLXZEb3pvZXVCM29udzlqTHg2T0ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQADmbsAwQA
DmbuAwQBZy84MA0GCSqGSIb3DQEBCwUAA4IBAQC0msYmLNs884ZUqfzcPaHMQ9Qu
u74UXZ0Iw40GwB4ufuIH5M5Ow/4Mv7jLS3IVBATSKjcCVwBUFWItNViUkd0N/9sp
Pn6RrwuDQHyCgg2hqeX4BsW8wUywSuWUSrIsotgTbhRFBZOKalEX5cqyWGeG8O30
Yml7uNQP3DZYNwk1fVOxXo455ptYpDCssG6YEMWc4SxcR4GVrEUdFeMC7tBQpVR6
b16k+uLIHwVMc034NYemYepj+1jFg8VGI1AOVgdVv3F/BoEu1ady5bjDjpbkjZ7a
7AQuIeBbdVcAj2MQ/DKN2BwRV/pEVOTT7/KW4GntFIXhLRYVSc9eE984Snom
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:01 2025 by rpki-client