Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/lqattfb9jjJJTp8xeSglaeBTJVQ.roa
File: lqattfb9jjJJTp8xeSglaeBTJVQ.roa (raw, json)
Hash identifier: fR89y4m4fOY3de6Hb2D2O3LCSxnHqvIaxzBqXlOMLKA=
Subject key identifier: 96:A6:AD:B5:F6:FD:8E:32:49:4E:9F:31:79:28:25:69:E0:53:25:54
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 018D6054084B00F4C5B3C1FA2D6747E15A7C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/lqattfb9jjJJTp8xeSglaeBTJVQ.roa
Signing time: Wed 31 Jan 2024 16:22:16 +0000
ROA not before: Wed 31 Jan 2024 16:22:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 14.102.234.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
103.47.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:60:54:08:4b:00:f4:c5:b3:c1:fa:2d:67:47:e1:5a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 31 16:22:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96a6adb5f6fd8e32494e9f3179282569e0532554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:c3:19:8d:62:9c:bb:23:f5:80:17:21:69:
fd:ea:68:9d:fd:eb:88:a1:d6:4b:21:a5:eb:3e:4b:
29:c6:89:f8:47:d7:6d:3f:92:4a:b2:ef:4d:89:e6:
87:79:96:35:ad:d0:8c:d8:93:e5:79:e6:7a:36:61:
23:47:87:d4:37:c0:e3:99:d7:a0:e7:d7:87:cc:23:
f8:67:25:36:d6:31:20:c3:af:3c:44:28:49:9f:9c:
28:d6:d7:fb:6a:d6:5c:39:00:ec:37:64:bd:3b:7e:
82:68:a6:c0:23:cc:f0:12:94:47:ad:03:02:78:a1:
66:6f:62:e1:af:3d:03:0b:d6:fb:24:51:28:83:f4:
d0:ab:df:84:71:6c:7a:c5:00:3c:36:83:ac:bc:91:
cd:b7:7c:0f:2a:a7:a4:35:fa:93:ea:f6:c5:30:f0:
6c:45:54:1f:8f:68:31:5b:42:5e:ee:db:b8:28:66:
31:f4:0d:64:f8:1a:ad:4d:74:05:8f:9f:20:67:97:
b5:e7:da:18:ba:ad:62:5d:39:25:b1:c5:e1:da:b8:
4c:10:5b:47:75:78:bf:a9:c7:0c:20:0b:53:ac:00:
be:d7:a5:d8:ce:f8:d8:20:66:eb:b9:2d:e0:f1:37:
80:bd:f4:3e:94:fe:7f:2c:d8:b7:45:c3:71:21:71:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A6:AD:B5:F6:FD:8E:32:49:4E:9F:31:79:28:25:69:E0:53:25:54
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/lqattfb9jjJJTp8xeSglaeBTJVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.234.0/24
14.102.236.0/24
103.47.59.0/24
Signature Algorithm: sha256WithRSAEncryption
59:4f:f6:c8:ee:96:b0:ca:af:8c:a7:a2:dd:92:0b:ec:77:30:
93:89:4a:bb:13:eb:cd:84:e3:43:37:e4:1a:79:a5:6d:26:a5:
9b:c6:42:10:14:0d:f7:4c:f4:ac:a4:2d:4c:7f:82:a7:bf:07:
66:f7:6d:b0:aa:f1:77:b1:c8:6c:e5:b0:17:d4:5d:32:88:57:
e0:56:47:7c:cc:67:1a:72:d6:c1:e1:ba:b5:5f:6f:5a:d7:b7:
74:3f:c3:6b:2c:9c:d1:4f:fb:85:d5:2b:2f:39:92:0e:4d:3b:
e0:b8:9b:7e:35:bf:93:23:54:c1:25:72:ce:1c:32:a6:c1:33:
55:61:d9:c0:36:07:f1:89:4a:cf:33:21:97:b7:e8:34:b0:27:
14:0d:53:6e:9c:16:9e:64:bf:7f:a6:92:76:60:9a:23:f5:7a:
bf:57:24:da:eb:55:14:05:82:4f:ad:14:6d:e0:33:9b:d8:3e:
8c:94:bc:fc:9c:de:84:93:a9:cc:1b:a5:12:e4:72:0c:0a:bc:
ca:4f:71:db:fb:3e:50:38:91:96:67:35:0f:57:f2:0b:ef:76:
da:70:7b:9f:e1:f5:d0:a2:2a:bf:dc:40:2a:b3:dd:d7:c7:11:
dc:92:db:ac:31:e7:f3:19:37:cc:26:29:a1:68:07:28:92:5b:
5a:92:48:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:38 2025 by rpki-client