Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PclZo3nLNh7Uw2rTJJx6rARJAK8.roa
File: PclZo3nLNh7Uw2rTJJx6rARJAK8.roa (raw, json)
Hash identifier: PtcWb0JdVHPZcKS+8Gsjb4tXK4S1KPICBMPVwIOEybU=
Subject key identifier: 3D:C9:59:A3:79:CB:36:1E:D4:C3:6A:D3:24:9C:7A:AC:04:49:00:AF
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018795259814A07BD67CB742EFA43015C72F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PclZo3nLNh7Uw2rTJJx6rARJAK8.roa
Signing time: Tue 18 Apr 2023 16:14:41 +0000
ROA not before: Tue 18 Apr 2023 16:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.56.0/24 maxlen: 24
103.47.57.0/24 maxlen: 24
14.102.224.0/24 maxlen: 24
14.102.225.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:95:25:98:14:a0:7b:d6:7c:b7:42:ef:a4:30:15:c7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 18 16:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dc959a379cb361ed4c36ad3249c7aac044900af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8c:94:d5:ca:fd:2a:95:23:0d:9f:f5:21:ca:
72:4b:19:10:29:ff:6c:9e:cb:f2:ba:4a:a7:cc:a4:
7c:0f:24:dd:b6:82:41:5c:49:eb:cb:1b:04:aa:3f:
34:42:cb:de:5e:ca:98:0b:90:dc:26:90:47:9a:94:
52:f9:24:26:8f:d5:b3:69:75:b5:e3:73:06:96:7c:
99:6b:76:9f:68:cc:9f:21:1a:e3:f4:78:7b:3b:fb:
bd:92:5f:a3:28:4d:6d:aa:ee:7c:ce:a7:ec:a3:31:
3a:ff:b1:08:cc:91:d3:b5:16:6e:67:c4:85:2a:4d:
a6:6b:c9:2e:4a:61:cf:bb:ad:7d:4a:27:3d:20:e5:
7e:bb:c0:0d:5e:5f:95:05:b1:a9:82:90:1a:b6:df:
a9:d4:16:2e:69:e9:ff:8e:00:84:30:b6:a7:fa:72:
5c:99:5b:3e:21:6b:ff:76:db:1b:4a:a1:c9:b6:0b:
0a:ea:07:13:84:10:12:78:77:74:28:bb:5b:90:60:
7a:6b:93:88:39:2a:9b:25:d3:97:55:fe:47:97:ec:
45:33:d6:c0:1c:83:e3:cb:bf:5f:9d:50:75:78:83:
b6:d3:d8:79:82:71:22:f2:14:cf:9b:ab:be:17:fd:
6a:52:6d:a1:24:f1:99:0f:b9:d6:af:6b:2a:be:44:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C9:59:A3:79:CB:36:1E:D4:C3:6A:D3:24:9C:7A:AC:04:49:00:AF
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PclZo3nLNh7Uw2rTJJx6rARJAK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.224.0/23
14.102.236.0/24
14.102.238.0/24
103.47.56.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:2f:b5:4e:32:47:7d:1e:49:b5:19:ec:2b:a9:38:a8:97:e6:
89:f9:1f:29:e0:24:c7:b0:d3:a5:4b:83:f7:dc:78:43:b0:a8:
6d:d4:dc:97:d8:a3:87:c2:98:f9:95:08:3e:ff:a7:1f:16:29:
3d:02:bb:ef:6d:b5:76:e1:7a:c9:9f:f7:f2:a0:bc:1f:32:22:
f9:4d:b8:6a:a8:60:d3:f2:f1:47:ef:ac:b8:ca:21:25:c2:e4:
24:7b:95:1d:81:05:d1:4d:dd:21:39:65:38:6a:08:dc:c6:6e:
41:a0:1e:47:f2:61:c2:3e:16:db:54:54:cc:37:01:1e:5e:db:
95:c3:ce:c1:39:ee:36:c0:d1:84:55:53:0c:01:4b:db:3b:0c:
18:1d:2b:47:ef:70:c5:f1:fb:0c:40:9a:21:61:a3:dd:58:fc:
a1:1d:37:8b:ed:53:0c:a9:71:42:b2:b2:dc:b7:09:ee:c9:54:
67:c4:81:aa:67:c8:c3:dc:4e:c2:66:44:75:e0:ed:b2:14:4a:
59:b1:32:4f:e8:17:09:e4:1a:89:a1:44:d7:aa:88:08:bb:6f:
b9:93:04:00:cd:5e:ae:95:1b:63:0e:5d:40:2c:20:ef:54:a9:
9d:c3:7d:d4:ef:de:38:cb:56:57:1f:5e:ae:19:f0:6b:1e:5c:
5d:4e:a1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:03 2025 by rpki-client