Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mCpPqu8WCW9jklE3JsWsjnlg50c.roa
File: mCpPqu8WCW9jklE3JsWsjnlg50c.roa (raw, json)
Hash identifier: JfMsLpVwzPEp1uUCA84LfFA8yEUh8WUhGQOO0ryW+z4=
Subject key identifier: 98:2A:4F:AA:EF:16:09:6F:63:92:51:37:26:C5:AC:8E:79:60:E7:47
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01874D21D162DB801E89B10D8D795F8B9A60
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mCpPqu8WCW9jklE3JsWsjnlg50c.roa
Signing time: Tue 04 Apr 2023 16:37:54 +0000
ROA not before: Tue 04 Apr 2023 16:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.58.0/24 maxlen: 24
14.102.233.0/24 maxlen: 24
14.102.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4d:21:d1:62:db:80:1e:89:b1:0d:8d:79:5f:8b:9a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 4 16:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=982a4faaef16096f6392513726c5ac8e7960e747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:43:82:03:98:72:ee:d2:61:8e:28:75:cc:db:
f8:76:35:7e:42:53:59:5a:eb:49:81:f3:6b:77:30:
1c:0b:8e:bd:cc:45:35:a8:ce:4b:b9:46:f8:de:e4:
95:27:55:be:cd:a9:d9:9e:80:56:d7:b9:41:b0:9e:
e0:19:66:b4:f3:fa:36:82:30:ff:c8:f4:74:da:a9:
6c:3f:99:40:09:00:90:d4:60:51:af:2b:2f:b1:96:
f0:88:76:14:70:a7:49:fe:e5:28:e6:82:40:98:55:
9d:b6:a1:81:8a:ae:73:6c:42:06:c4:1d:9a:a8:ac:
59:50:d2:48:9f:ea:84:58:cc:73:46:2a:1e:ed:2b:
76:df:e3:21:38:ef:e6:6a:51:dd:a7:dc:f0:72:2c:
3a:4c:30:41:2a:54:d8:3b:45:17:25:21:1e:75:8a:
9d:fc:34:dc:71:42:7a:29:97:84:95:82:45:54:a0:
a2:f0:73:cc:70:17:0b:2d:0d:2a:87:6c:ae:2c:3c:
9c:ca:23:1a:6a:09:17:9c:75:b6:d3:6b:da:75:a2:
03:74:bb:47:d1:a8:5a:8f:b8:13:c0:68:00:18:1a:
02:cf:54:74:30:e8:93:d9:7d:38:75:ea:e4:80:65:
ae:dc:12:27:e2:a4:c0:39:0e:62:5a:46:80:f1:ff:
02:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2A:4F:AA:EF:16:09:6F:63:92:51:37:26:C5:AC:8E:79:60:E7:47
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/mCpPqu8WCW9jklE3JsWsjnlg50c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.233.0/24
14.102.235.0/24
103.47.58.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e9:15:c3:e8:49:b2:f8:ea:9e:ca:ac:8a:cc:43:a7:11:e6:
b8:11:f6:32:7f:b5:ab:8c:71:9c:84:dd:4f:51:bf:9c:31:ee:
a5:f8:32:94:44:78:8d:27:8e:19:ad:e9:bb:fc:ee:20:00:dd:
50:3c:d8:c8:d1:6d:51:c5:09:a1:45:06:78:a5:fc:ce:8c:b0:
34:a0:53:49:de:1e:8f:33:e9:58:fc:55:9a:2a:0a:45:90:6a:
8c:c2:81:a4:d9:35:ef:87:e0:03:60:be:e5:57:53:db:04:dd:
c2:36:1c:d6:69:f5:ec:a0:7e:9c:7f:2a:e4:ab:f2:e8:5b:7f:
c3:ba:31:1c:94:1c:5c:f6:d5:ae:cb:52:8f:71:b7:76:b7:92:
78:60:38:70:a3:99:ed:76:05:b2:72:4e:04:e6:4c:11:01:d5:
f8:54:84:89:b9:59:fe:b3:72:44:f4:7f:f7:4e:e6:9b:97:7b:
89:ab:f8:76:96:26:71:78:6a:a4:ae:05:03:d9:9a:c5:32:ec:
7d:72:d6:37:e2:ec:41:de:d9:02:a8:6f:a9:e1:ee:c6:e0:82:
b9:a3:98:b3:d3:4b:44:1e:48:b9:78:e7:86:df:88:51:2e:db:
c8:26:fb:ff:e8:c7:82:c2:46:46:7f:b6:d3:f4:99:90:a2:5c:
1a:0f:cc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:28 2025 by rpki-client