Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/xuI5sBRYMc3G5gvs3l7B5ioSY-M.roa
File: xuI5sBRYMc3G5gvs3l7B5ioSY-M.roa (raw, json)
Hash identifier: 8yWiE/7zTUrqrFy4iyv1JM59hjFdO/8qbN13QkJ5Vr8=
Subject key identifier: C6:E2:39:B0:14:58:31:CD:C6:E6:0B:EC:DE:5E:C1:E6:2A:12:63:E3
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01877CBEF2EE92B5125D6D66B16E94505CD5
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/xuI5sBRYMc3G5gvs3l7B5ioSY-M.roa
Signing time: Thu 13 Apr 2023 22:31:41 +0000
ROA not before: Thu 13 Apr 2023 22:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.47.56.0/24 maxlen: 24
103.47.57.0/24 maxlen: 24
103.47.58.0/24 maxlen: 24
14.102.224.0/24 maxlen: 24
14.102.225.0/24 maxlen: 24
14.102.233.0/24 maxlen: 24
14.102.236.0/24 maxlen: 24
14.102.238.0/24 maxlen: 24
14.102.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7c:be:f2:ee:92:b5:12:5d:6d:66:b1:6e:94:50:5c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Apr 13 22:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6e239b0145831cdc6e60becde5ec1e62a1263e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3e:83:50:cd:ef:01:a7:f2:e4:6a:b0:92:be:
83:ef:c2:09:00:5f:4a:bd:53:8d:fb:25:01:6c:5d:
07:40:89:27:ad:b1:4f:ad:4f:13:17:4b:3d:1f:16:
ad:11:aa:9c:0b:c8:75:a4:d2:ba:af:14:4d:e3:1c:
2b:7c:82:b7:6a:c8:9d:5a:99:99:fa:23:ea:2d:6b:
b8:06:50:ac:de:e8:35:b4:8b:aa:d8:af:06:a7:bc:
73:c3:05:9b:12:7f:3c:ed:ee:67:6b:9d:3c:48:57:
7f:a5:6c:a1:7b:05:d4:0b:c6:1b:0d:47:0a:0f:fe:
d2:b2:8c:c6:a2:e5:0f:fa:ab:a2:a4:27:77:83:8b:
f3:72:65:81:96:71:e3:70:1b:d5:34:55:c5:49:7f:
1f:9c:05:59:2e:d2:34:01:fb:1f:1f:9f:7d:80:43:
7e:a2:2e:a1:99:14:8e:0a:e3:04:b5:7d:bf:38:2d:
37:d8:9d:96:65:f4:b8:16:6a:4a:0b:e1:ec:66:27:
70:c3:5c:67:53:b5:65:2f:30:30:d2:8f:0f:99:36:
04:cd:2c:62:ec:31:1e:60:ee:26:a7:bf:30:a8:c2:
43:51:c6:64:ce:da:96:82:71:24:6d:67:fc:78:e5:
94:90:e8:8a:e4:12:b2:7f:e9:9b:02:3a:28:b6:82:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E2:39:B0:14:58:31:CD:C6:E6:0B:EC:DE:5E:C1:E6:2A:12:63:E3
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/xuI5sBRYMc3G5gvs3l7B5ioSY-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.224.0/23
14.102.233.0/24
14.102.235.0-14.102.236.255
14.102.238.0/24
103.47.56.0-103.47.58.255
Signature Algorithm: sha256WithRSAEncryption
52:c0:2c:73:f1:2b:75:e7:da:ce:81:82:62:f8:e3:0d:f6:8f:
a9:5d:27:e3:5a:54:03:31:6e:ce:7f:be:4e:49:90:f7:0b:bb:
ea:12:87:57:08:ab:ed:3e:b4:4c:19:37:da:00:d1:89:3f:b6:
88:4e:36:86:68:12:6e:b1:77:78:4c:cb:49:d7:71:b8:7d:b3:
7e:8a:16:b9:40:2a:13:b8:bd:98:d2:e3:ba:73:84:07:f6:9c:
89:c8:3b:1b:85:4e:41:a9:97:80:77:ce:c9:cd:23:9a:0f:e3:
de:ca:22:9b:98:91:7c:b4:cb:32:43:ca:ce:8e:f8:08:ce:3e:
40:77:be:b0:1d:3f:d7:4f:cc:08:8c:f9:6f:01:5c:03:85:c5:
5d:72:f2:e4:58:a3:cb:2e:b1:0f:b9:ef:08:2c:ac:02:fb:97:
7d:ca:6d:71:9d:30:df:ae:38:de:a2:5c:31:91:fe:3d:84:59:
60:ff:9d:48:9d:4b:19:2e:ab:80:b8:71:49:df:61:57:d9:37:
c1:0d:81:4b:81:34:b6:d5:cd:ea:98:29:c3:b3:f0:83:ae:2d:
bc:a8:70:50:14:87:22:57:26:bd:26:21:a9:76:91:60:ef:4d:
97:c5:d4:6f:7f:c2:28:62:ae:c4:44:6a:2a:84:a6:71:f4:76:
46:41:74:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:47 2025 by rpki-client