Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/q65scnkw3wkoDB3dGN1x5sPaxDI.roa
File: q65scnkw3wkoDB3dGN1x5sPaxDI.roa (raw, json)
Hash identifier: 4Z7PSrrOky3N47pBaIQqWOWfRYoObutIVkhDUHZx9Lo=
Subject key identifier: AB:AE:6C:72:79:30:DF:09:28:0C:1D:DD:18:DD:71:E6:C3:DA:C4:32
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0194222014FCED5CD71F88DE0B9D32B81125
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/q65scnkw3wkoDB3dGN1x5sPaxDI.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 103.47.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:14:fc:ed:5c:d7:1f:88:de:0b:9d:32:b8:11:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abae6c727930df09280c1ddd18dd71e6c3dac432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:aa:25:a6:84:3c:6f:28:06:8f:0f:ec:12:
e1:66:e9:8b:01:b9:92:b8:c1:1e:bd:23:f9:ec:f4:
0b:c1:e6:ea:2a:99:a6:6e:d9:e5:18:e8:f6:b6:73:
e0:28:3a:06:48:64:e2:2c:f6:ff:8c:39:96:ef:f5:
3e:92:27:6f:9f:aa:5c:1f:85:9a:81:ab:5e:41:54:
3f:7d:51:4a:ad:75:24:93:60:a9:df:2f:37:ac:f6:
d5:cb:87:b0:46:97:80:f1:96:bb:ba:3b:89:bb:f7:
ec:db:13:61:93:d6:b3:8f:af:b0:1b:49:c9:8a:1f:
f5:f3:a0:ae:b2:93:55:4c:46:8e:ce:ca:2f:63:1f:
72:36:bf:ca:46:db:41:37:12:0e:cf:54:f6:94:07:
12:e7:89:c7:fc:07:7b:47:38:59:56:d8:89:c8:c2:
d1:a4:98:2b:ef:b8:45:0a:62:b0:a3:ce:98:dc:76:
63:93:d2:69:94:88:12:66:30:55:6a:c3:62:ff:bf:
1d:06:7a:29:05:0a:5c:94:50:40:8d:6e:f9:30:92:
ca:7e:31:70:f2:15:a1:10:d7:cc:79:dd:92:f0:3f:
46:eb:48:d3:05:ef:b8:e7:fd:25:ba:9d:38:ff:d3:
fb:d0:90:0b:f6:d4:34:dc:49:1f:26:7a:b8:f5:37:
5c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AE:6C:72:79:30:DF:09:28:0C:1D:DD:18:DD:71:E6:C3:DA:C4:32
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/q65scnkw3wkoDB3dGN1x5sPaxDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.57.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:85:95:3c:8a:76:59:6c:bb:91:b7:11:97:c4:f7:53:af:70:
98:f9:6b:3a:a0:e9:63:cd:e8:72:aa:96:3b:17:7f:6c:ad:44:
f4:52:9f:a1:9b:7f:b0:85:e0:51:46:d2:4f:9c:e0:31:2d:36:
9e:3e:0b:e9:f6:2d:92:3a:4c:ac:fb:41:04:00:72:b0:85:74:
96:04:13:0c:0d:c1:ed:e0:e9:c9:c6:5a:70:be:27:4b:8c:54:
98:43:33:c0:6c:e0:e5:b6:f4:87:c3:64:62:fb:12:85:16:d9:
23:5e:b8:39:d8:44:b3:00:b5:e6:20:b1:50:51:c2:a4:d0:54:
bf:05:3d:2e:8b:fa:00:4d:a5:75:ee:4c:2a:25:ce:61:71:34:
d6:b6:36:9e:26:27:73:57:7f:3a:f2:8f:e8:1e:ec:c9:45:b9:
4d:44:09:c5:55:09:a0:a9:f6:e0:c2:be:7b:33:cc:d2:51:95:
95:fc:51:93:10:18:47:4d:81:86:04:50:16:3f:5d:50:99:3e:
6d:a0:fc:01:24:39:96:61:1e:5a:31:62:fc:8d:2c:18:e2:10:
d0:f4:de:3a:0b:cc:c5:2d:93:02:fe:b1:46:2b:e0:59:ac:4a:
7a:2e:f0:7f:c7:16:55:48:7f:2d:fc:33:84:66:20:67:4e:80:
ef:9a:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:36 2025 by rpki-client