Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/aX_WgM176PLmXaYkzA3O5XkxEGM.roa
File: aX_WgM176PLmXaYkzA3O5XkxEGM.roa (raw, json)
Hash identifier: KT+nnr5HjGW+2cUBoHw9Crg8i7IT0fwIgNgWGN7fVVU=
Subject key identifier: 69:7F:D6:80:CD:7B:E8:F2:E6:5D:A6:24:CC:0D:CE:E5:79:31:10:63
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018853A950B849C239C5060659B058D4339B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/aX_WgM176PLmXaYkzA3O5XkxEGM.roa
Signing time: Thu 25 May 2023 16:06:25 +0000
ROA not before: Thu 25 May 2023 16:06:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.57.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
14.102.239.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:53:a9:50:b8:49:c2:39:c5:06:06:59:b0:58:d4:33:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 25 16:06:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=697fd680cd7be8f2e65da624cc0dcee579311063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:1d:36:4d:05:fb:06:a7:b5:52:8e:68:3b:
b5:ec:0f:c6:8d:cc:89:0d:f6:e3:2f:65:ca:12:54:
a1:ba:f5:cf:55:d7:30:71:e2:0f:f6:40:2c:59:94:
1c:70:b3:23:8e:7b:22:ec:a4:4b:3a:c5:e1:28:79:
b9:7e:0f:f5:65:94:aa:25:f9:2b:26:50:c7:70:e3:
74:0b:04:9d:91:6b:6c:46:b5:40:d2:b7:c9:f4:54:
8b:d9:bc:28:ec:d6:40:86:ce:b8:6b:ee:d5:2d:b8:
dd:45:dc:61:6a:68:a2:0a:f8:fc:46:12:62:ae:69:
e3:1d:47:22:77:4c:03:73:51:82:77:42:af:27:ec:
88:41:10:82:f6:22:e5:73:0c:1c:99:d4:96:72:f4:
47:a0:ff:3d:bd:6e:76:d2:3a:46:13:3f:58:22:66:
d9:b8:d4:fe:7e:6b:7c:e8:16:fb:f7:39:1b:02:3a:
3b:71:3b:61:81:5e:00:b5:69:6d:28:02:b5:7e:95:
5c:5c:81:f0:bd:58:ac:7b:b9:57:cd:01:33:87:7f:
66:16:26:8a:d0:9d:9b:8c:37:35:8d:85:00:33:4f:
db:6f:d0:7a:01:d4:f5:38:2e:e6:d6:7c:23:99:4c:
a5:5c:ca:6b:a2:6c:18:b5:da:c8:26:44:4f:8c:43:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7F:D6:80:CD:7B:E8:F2:E6:5D:A6:24:CC:0D:CE:E5:79:31:10:63
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/aX_WgM176PLmXaYkzA3O5XkxEGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.234.0/24
14.102.236.0/24
14.102.238.0/23
103.47.57.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c5:44:1c:3f:da:b0:76:dd:a3:63:e5:4c:11:99:b2:f4:68:
8d:10:59:71:bb:a5:ce:0c:83:6a:0e:8e:ed:ef:18:69:1e:d2:
d8:6f:98:7c:02:e5:f5:8f:e8:da:9f:80:cf:9a:6a:a6:d9:5a:
ad:d5:17:c0:d5:b5:35:bf:5f:96:99:e9:0e:aa:14:9e:c2:e7:
30:37:19:f2:72:60:2f:d8:0a:62:6b:ef:5b:1d:9b:7c:3d:9c:
a3:f4:c6:0f:00:f0:39:27:2f:aa:8d:42:8c:80:86:dc:ae:3e:
48:9b:53:04:99:07:b9:d6:ca:2b:c0:56:07:e8:65:5b:15:6d:
a5:fd:b9:a9:f9:b4:59:6e:c2:e1:a8:fc:8b:8d:91:6f:64:1b:
17:b6:52:cd:bc:7e:3d:60:77:fc:11:4d:7f:f7:21:c1:95:93:
54:c2:a1:7f:f8:9c:f2:0c:03:a2:9f:1d:06:24:68:49:75:97:
0a:ca:6b:61:e2:ec:a1:ec:3d:a1:5b:91:90:43:81:46:40:83:
5f:a6:eb:b7:b2:f3:57:94:46:1e:56:13:c1:49:c7:57:72:14:
39:94:a4:76:e7:81:dc:85:14:66:ad:62:3a:2e:81:c0:e7:c8:
ed:47:3b:fc:7b:ed:c4:ea:10:63:12:7d:3d:1c:b7:71:23:af:
cc:8b:11:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:52 2025 by rpki-client