Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/WsI6m5dc6s_AWYOV2aBbcYnpabI.roa
File: WsI6m5dc6s_AWYOV2aBbcYnpabI.roa (raw, json)
Hash identifier: R5u5lxkcOfE2PkTZG6h9e5j9b6zvIsVRyS2gzowBDJ4=
Subject key identifier: 5A:C2:3A:9B:97:5C:EA:CF:C0:59:83:95:D9:A0:5B:71:89:E9:69:B2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018BB4693B45575EE8C8538F4DB629B93D69
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/WsI6m5dc6s_AWYOV2aBbcYnpabI.roa
Signing time: Thu 09 Nov 2023 14:07:57 +0000
ROA not before: Thu 09 Nov 2023 14:07:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.59.0/24 maxlen: 24
14.102.231.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:69:3b:45:57:5e:e8:c8:53:8f:4d:b6:29:b9:3d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 9 14:07:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ac23a9b975ceacfc0598395d9a05b7189e969b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:68:0c:f9:5b:21:72:94:56:28:0f:c7:80:88:
5a:11:73:16:58:97:10:e6:08:88:60:cc:c1:da:1d:
84:74:bb:d3:e8:76:58:e2:79:24:95:82:18:cb:ca:
1e:9f:d2:35:29:c9:7f:14:f5:7b:af:5a:ac:85:0d:
14:49:1b:27:66:64:41:50:58:55:bc:aa:f7:67:d9:
70:c3:9c:25:94:9a:ea:f8:e5:e5:39:06:ce:e7:cb:
36:e4:13:ac:e5:70:cc:41:89:65:0a:fb:7a:98:fb:
19:93:d1:35:da:d9:92:fe:61:0f:2d:17:0f:39:74:
9d:f5:34:9a:53:50:f3:48:f3:85:2b:8d:f6:79:08:
30:73:a3:69:b3:86:00:51:f8:cd:0d:91:35:8e:06:
4b:4f:33:69:ff:5f:88:f0:e2:80:d3:b5:82:0e:2a:
17:4b:b3:2c:f3:ea:fd:03:f3:4c:24:64:4e:ee:33:
85:01:e8:36:c2:42:e9:e4:67:98:fb:f7:11:53:88:
94:7e:52:44:6c:fb:14:27:8c:38:e2:62:a5:e7:a0:
c7:f1:b8:7c:b6:1c:c8:19:12:d3:3c:b0:24:fd:9a:
6a:36:9c:91:de:ee:47:ff:2f:33:99:74:50:1d:dc:
01:5e:27:48:08:4d:da:b4:e8:f1:26:1f:b7:72:8f:
16:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:3A:9B:97:5C:EA:CF:C0:59:83:95:D9:A0:5B:71:89:E9:69:B2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/WsI6m5dc6s_AWYOV2aBbcYnpabI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.231.0/24
14.102.234.0/24
14.102.236.0/24
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:b3:f7:c3:5d:c7:db:58:20:3c:03:1c:cc:8f:a3:1f:94:33:
19:c8:b2:60:8b:ba:3a:9c:3a:bb:2c:7f:bd:2b:a0:6c:cd:c7:
71:c9:71:62:48:26:d4:44:76:03:fd:6f:bc:dc:c9:4b:45:3e:
d9:9d:b6:c5:ae:ae:ff:f9:64:54:85:1a:e3:9f:de:bc:1f:e5:
1a:bf:fb:73:01:4b:42:e7:5d:93:2c:83:c1:77:78:e0:c4:37:
0e:d1:36:78:f2:8d:19:71:c0:e6:f6:66:f7:8e:22:56:b5:4e:
4b:84:ad:d9:7d:ad:db:67:19:da:2c:e8:f8:b9:b5:92:05:18:
2d:b3:15:cc:cf:c7:ac:51:d0:d2:70:80:df:0d:ac:5b:f5:93:
f3:3e:43:e2:40:1c:14:5c:9d:d8:f0:73:d1:16:b0:17:95:0e:
e5:60:5a:cf:53:ce:61:d0:25:04:3d:f8:49:65:b4:42:d8:6c:
d8:7a:33:95:15:4a:c1:c8:ed:40:4d:f4:f0:5e:e7:d8:b7:39:
d2:bf:08:17:03:7e:43:8f:46:b7:a0:4b:d5:32:f5:fc:25:b6:
3d:d0:b4:3f:87:4c:d2:dd:d4:36:d1:10:5c:6b:cd:45:c8:7c:
99:05:fb:3a:a2:a0:5e:c7:17:43:37:0d:58:a2:7b:e5:df:b0:
69:fa:d5:d5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYu0aTtFV17oyFOPTbYpuT1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjMxMTA5MTQwNzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWMyM2E5Yjk3NWNlYWNmYzA1OTgzOTVkOWEwNWI3MTg5ZTk2OWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2gM+VshcpRWKA/HgIhaEXMWWJcQ
5giIYMzB2h2EdLvT6HZY4nkklYIYy8oen9I1Kcl/FPV7r1qshQ0USRsnZmRBUFhV
vKr3Z9lww5wllJrq+OXlOQbO58s25BOs5XDMQYllCvt6mPsZk9E12tmS/mEPLRcP
OXSd9TSaU1DzSPOFK432eQgwc6Nps4YAUfjNDZE1jgZLTzNp/1+I8OKA07WCDioX
S7Ms8+r9A/NMJGRO7jOFAeg2wkLp5GeY+/cRU4iUflJEbPsUJ4w44mKl56DH8bh8
thzIGRLTPLAk/ZpqNpyR3u5H/y8zmXRQHdwBXidICE3atOjxJh+3co8WYQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFrCOpuXXOrPwFmDldmgW3GJ6WmyMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvV3NJNm01ZGM2c19BV1lPVjJhQmJjWW5wYWJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQADmbnAwQA
DmbqAwQADmbsAwQAZy87MA0GCSqGSIb3DQEBCwUAA4IBAQB6s/fDXcfbWCA8AxzM
j6MflDMZyLJgi7o6nDq7LH+9K6BszcdxyXFiSCbURHYD/W+83MlLRT7ZnbbFrq7/
+WRUhRrjn968H+Uav/tzAUtC512TLIPBd3jgxDcO0TZ48o0ZccDm9mb3jiJWtU5L
hK3Zfa3bZxnaLOj4ubWSBRgtsxXMz8esUdDScIDfDaxb9ZPzPkPiQBwUXJ3Y8HPR
FrAXlQ7lYFrPU85h0CUEPfhJZbRC2GzYejOVFUrByO1ATfTwXufYtznSvwgXA35D
j0a3oEvVMvX8JbY90LQ/h0zS3dQ20RBca81FyHyZBfs6oqBexxdDNw1Yonvl37Bp
+tXV
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:22 2025 by rpki-client