Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/naR559E7kZSuUCMaJYZMCAET6R4.roa
File: naR559E7kZSuUCMaJYZMCAET6R4.roa (raw, json)
Hash identifier: U2qpYfmWY6v4BPyZoZB3RvvaWWOQLxvC/Wn12VEkjdA=
Subject key identifier: 9D:A4:79:E7:D1:3B:91:94:AE:50:23:1A:25:86:4C:08:01:13:E9:1E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0194A3E4782DB005763034185CA3EED4E674
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/naR559E7kZSuUCMaJYZMCAET6R4.roa
Signing time: Sun 26 Jan 2025 18:34:06 +0000
ROA not before: Sun 26 Jan 2025 18:34:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138244
IP address blocks: 103.47.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a3:e4:78:2d:b0:05:76:30:34:18:5c:a3:ee:d4:e6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 26 18:34:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9da479e7d13b9194ae50231a25864c080113e91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:13:3f:5e:0c:b4:37:7e:4e:12:f8:a9:6a:
28:84:c4:28:ee:41:13:e1:57:4f:1b:85:e0:10:5d:
9b:d5:af:78:55:88:d0:90:7b:a5:50:67:f2:cb:c5:
39:49:41:e4:29:03:44:7e:00:8b:19:b8:88:f9:0f:
72:0a:fc:8c:86:36:8e:a2:8c:1a:bc:83:2a:c5:50:
12:04:74:24:fe:03:ca:a9:37:97:ac:43:a4:a0:17:
b7:a4:b4:0a:52:af:e3:20:c3:57:ef:4a:8d:61:bb:
13:8f:8e:39:5a:92:86:6a:93:e5:44:e7:7d:f2:c8:
4c:7a:89:56:fb:f3:87:66:89:d7:fe:8c:78:d8:fb:
4a:93:d9:c1:59:ac:14:e7:ab:66:06:46:d1:6e:4a:
4f:7d:ca:61:3e:24:d4:5b:c2:c7:67:77:86:5e:fc:
6a:e3:b7:4e:ac:d0:0d:d1:53:f1:9b:0e:24:41:cc:
4e:ff:e2:42:b7:98:65:ad:83:88:f0:57:7c:bb:19:
29:4b:28:79:36:20:6d:31:8d:88:be:cb:73:64:f5:
f0:65:75:29:14:18:77:bf:3b:e2:16:62:6d:38:d2:
58:27:a0:bf:1d:40:04:ff:54:90:4d:12:1f:45:19:
9c:4c:93:43:77:db:09:9f:66:b5:ae:21:f8:c5:63:
13:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A4:79:E7:D1:3B:91:94:AE:50:23:1A:25:86:4C:08:01:13:E9:1E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/naR559E7kZSuUCMaJYZMCAET6R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.56.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:4b:7c:1f:7a:97:76:9c:97:fc:1f:33:3e:c1:24:94:44:2a:
79:b3:bd:d2:d7:1b:2d:8e:23:a3:c9:8d:d0:ba:23:9e:b5:7a:
27:83:7b:2e:06:8f:13:de:ba:6d:7d:66:b2:03:8b:eb:57:0c:
a1:19:12:50:c9:54:d8:0a:3b:47:42:f1:93:98:cd:a8:57:e7:
c4:3c:72:d2:29:c9:51:29:8f:e7:c7:64:83:78:0a:3f:bb:65:
c7:2f:94:1f:df:c5:73:89:2f:d3:e4:0f:d8:7a:05:dc:c0:8d:
7a:7b:84:69:65:12:b7:dc:b7:a2:52:ba:41:a0:6c:de:43:4c:
12:f0:63:20:45:aa:b2:0e:1a:86:83:f5:ad:00:a0:f6:9b:fc:
3e:da:7f:fc:6e:fa:03:0c:c3:ea:9b:1b:b3:79:d2:0e:64:3c:
ba:58:91:07:5b:e5:ae:ca:60:f3:b9:f7:06:b1:19:72:5e:02:
ba:86:71:88:c4:20:ea:a5:b9:d2:22:0a:ee:73:99:e9:bd:00:
a9:fe:f3:e4:b1:e0:74:3b:dc:bc:39:59:61:33:0b:9c:bf:a1:
fc:5d:de:8b:56:11:a6:d3:97:ef:86:fb:bb:c8:95:58:ba:e5:
3f:d2:34:93:fd:48:5a:99:19:b2:24:8c:2f:95:6e:60:49:33:
04:36:5a:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSj5HgtsAV2MDQYXKPu1OZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwMTI2MTgzNDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGE0NzllN2QxM2I5MTk0YWU1MDIzMWEyNTg2NGMwODAxMTNlOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uoTP14MtDd+ThL4qWoohMQo7kET
4VdPG4XgEF2b1a94VYjQkHulUGfyy8U5SUHkKQNEfgCLGbiI+Q9yCvyMhjaOoowa
vIMqxVASBHQk/gPKqTeXrEOkoBe3pLQKUq/jIMNX70qNYbsTj445WpKGapPlROd9
8shMeolW+/OHZonX/ox42PtKk9nBWawU56tmBkbRbkpPfcphPiTUW8LHZ3eGXvxq
47dOrNAN0VPxmw4kQcxO/+JCt5hlrYOI8Fd8uxkpSyh5NiBtMY2IvstzZPXwZXUp
FBh3vzviFmJtONJYJ6C/HUAE/1SQTRIfRRmcTJNDd9sJn2a1riH4xWMTRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ2keefRO5GUrlAjGiWGTAgBE+keMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvbmFSNTU5RTdrWlN1VUNNYUpZWk1DQUVUNlI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZy84MA0G
CSqGSIb3DQEBCwUAA4IBAQDTS3wfepd2nJf8HzM+wSSURCp5s73S1xstjiOjyY3Q
uiOetXong3suBo8T3rptfWayA4vrVwyhGRJQyVTYCjtHQvGTmM2oV+fEPHLSKclR
KY/nx2SDeAo/u2XHL5Qf38VziS/T5A/YegXcwI16e4RpZRK33LeiUrpBoGzeQ0wS
8GMgRaqyDhqGg/WtAKD2m/w+2n/8bvoDDMPqmxuzedIOZDy6WJEHW+WuymDzufcG
sRlyXgK6hnGIxCDqpbnSIgruc5npvQCp/vPkseB0O9y8OVlhMwucv6H8Xd6LVhGm
05fvhvu7yJVYuuU/0jST/UhamRmyJIwvlW5gSTMENlrr
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:55 2025 by rpki-client