Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/GAmS70pU9KNTB2t3QASulKLcdIE.roa
File: GAmS70pU9KNTB2t3QASulKLcdIE.roa (raw, json)
Hash identifier: qRmVwaBQ3XuNWNPx2X0KdkVuiN1o/Eed3MfqIGNATyY=
Subject key identifier: 18:09:92:EF:4A:54:F4:A3:53:07:6B:77:40:04:AE:94:A2:DC:74:81
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0187DD21F5B7171F9E62D1FA8F7CA3EDE9F7
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/GAmS70pU9KNTB2t3QASulKLcdIE.roa
Signing time: Tue 02 May 2023 15:43:23 +0000
ROA not before: Tue 02 May 2023 15:43:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.56.0/24 maxlen: 24
103.47.57.0/24 maxlen: 24
103.47.59.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dd:21:f5:b7:17:1f:9e:62:d1:fa:8f:7c:a3:ed:e9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 2 15:43:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=180992ef4a54f4a353076b774004ae94a2dc7481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ad:e7:40:85:02:55:45:97:10:de:9e:ed:21:
21:23:6d:ff:fc:50:dc:6d:6e:2b:ae:d0:3b:92:31:
d0:e3:ea:03:f8:16:1d:05:58:af:5f:d3:81:5d:e6:
16:c8:f4:57:e7:12:73:f5:0f:12:26:82:ec:ae:1e:
71:ab:ef:c9:58:8b:6e:c3:82:63:c9:39:7a:72:ff:
f8:c0:42:3d:bb:0b:20:66:15:ad:5a:08:3e:e9:86:
4f:41:28:cf:af:e3:e5:5e:14:a6:43:2f:ca:7f:b3:
67:39:ef:68:2a:6a:92:9a:88:50:a5:38:b1:3f:90:
44:c9:93:22:87:55:82:ab:0f:1d:05:73:22:29:7e:
cd:58:2e:a7:71:58:62:60:b4:88:89:c2:44:ce:ce:
fa:99:28:c3:fe:fc:1e:97:33:14:08:4b:76:71:67:
1b:96:22:a9:90:ba:b8:15:4f:c7:e5:89:a0:3d:a1:
f4:77:ca:29:88:72:ba:01:7e:95:be:85:7a:ae:1b:
5d:0c:fc:9c:c4:ff:5a:b6:ba:97:59:56:f3:3a:38:
af:31:6e:42:f3:53:14:e7:62:56:38:a1:d3:bb:43:
75:56:9f:5c:ac:1e:a1:fb:cd:69:ab:b6:e7:88:b2:
13:09:8b:fc:81:41:9c:ee:ca:6b:6d:d1:30:42:ec:
4a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:09:92:EF:4A:54:F4:A3:53:07:6B:77:40:04:AE:94:A2:DC:74:81
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/GAmS70pU9KNTB2t3QASulKLcdIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.236.0/24
14.102.238.0/24
103.47.56.0/23
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:da:23:07:6a:a0:a6:90:86:33:5c:10:01:af:95:bf:15:d1:
d9:90:d2:c8:9f:d3:c8:b6:07:1b:6f:22:70:f1:a4:c8:b5:1e:
b8:f0:6a:a9:e0:25:4f:d4:15:b5:d5:76:ab:57:a0:6f:2a:2f:
13:ce:f1:aa:d7:0a:8f:44:53:74:32:e6:55:f9:b9:93:66:81:
68:12:3a:d8:59:69:31:32:a8:bd:ea:38:ef:27:5a:0b:cf:91:
7a:99:fc:9a:20:e6:4d:e7:52:b2:1f:f5:f2:18:8c:61:86:d9:
2b:19:ef:cf:33:2e:a5:ea:be:b6:a7:01:75:f8:14:70:30:e6:
ab:63:09:55:5e:ca:e8:74:02:ae:d7:70:a0:62:03:7c:25:df:
50:2f:37:40:5f:17:78:a5:10:1b:f6:41:5e:a6:bc:56:09:a3:
24:cd:4f:3f:3b:1c:67:fa:a2:59:06:e9:9a:13:c9:91:cc:ba:
9a:ce:67:5d:67:45:00:cc:e2:18:64:50:f1:f1:f4:f6:5f:37:
bc:d9:22:1f:f8:a1:af:98:68:5c:e7:26:2e:8f:6a:9f:18:90:
19:a6:2e:17:b0:4e:11:3f:72:1f:cc:6d:b1:00:da:4e:c1:3a:
93:2a:15:70:da:df:10:0f:7b:e1:6f:dd:14:9a:9e:9b:f0:3a:
e4:9f:dd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:01 2025 by rpki-client