Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dnI4qgcDjYpTj_JP6l78yLmJaS0.roa
File: dnI4qgcDjYpTj_JP6l78yLmJaS0.roa (raw, json)
Hash identifier: Tp69kzkTS+SZyymArhQ4utuzl0yT2YEEPPHPgNj3fK4=
Subject key identifier: 76:72:38:AA:07:03:8D:8A:53:8F:F2:4F:EA:5E:FC:C8:B9:89:69:2D
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01942369C1E76A049FB56DC5388D6A2E758D
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dnI4qgcDjYpTj_JP6l78yLmJaS0.roa
Signing time: Wed 01 Jan 2025 19:48:40 +0000
ROA not before: Wed 01 Jan 2025 19:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4648
IP address blocks: 103.198.28.0/22 maxlen: 24
170.62.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:c1:e7:6a:04:9f:b5:6d:c5:38:8d:6a:2e:75:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jan 1 19:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=767238aa07038d8a538ff24fea5efcc8b989692d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:c6:f2:9b:a1:91:ee:e1:7a:36:f0:91:02:
a6:80:01:8a:93:8c:52:56:e6:7c:c1:1d:aa:da:bb:
b1:63:f5:55:33:0c:7d:49:4a:f4:c2:21:31:43:0b:
1d:18:89:13:34:0f:f5:01:b1:54:8a:50:0f:c6:aa:
95:06:c3:bb:11:fa:bf:fe:71:f6:b4:1e:d1:b3:28:
21:33:cc:07:e6:c9:86:f9:bb:9d:08:31:f3:f5:71:
24:19:d9:d3:e0:65:ff:c5:bb:48:ed:70:57:d8:b6:
30:14:b6:cf:fb:45:d8:46:ff:fb:7c:43:e1:6d:74:
e3:41:99:7b:fd:1b:2e:00:ee:e1:6c:90:65:88:40:
d8:34:2b:95:c4:37:3f:74:a1:9a:24:8d:2b:08:b1:
4f:ff:0c:e0:7e:ec:06:70:fe:12:08:17:46:0b:ac:
a5:20:42:a1:d4:ff:85:90:6a:58:19:a3:c7:ff:a6:
db:ec:0d:d8:f1:34:c1:5b:7d:0c:2d:35:98:de:e3:
64:27:cd:18:e0:9f:1a:55:29:5b:42:fd:2b:df:00:
4b:d4:86:bb:0a:9a:24:6e:62:ea:9e:47:80:63:ba:
5d:f2:0f:e9:a3:6c:9d:4d:3e:78:0d:c0:3e:fb:98:
6d:4d:5e:8d:51:bc:eb:47:7f:35:a4:15:b4:63:1f:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:72:38:AA:07:03:8D:8A:53:8F:F2:4F:EA:5E:FC:C8:B9:89:69:2D
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/dnI4qgcDjYpTj_JP6l78yLmJaS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.198.28.0/22
170.62.184.0/22
Signature Algorithm: sha256WithRSAEncryption
52:43:39:53:01:2e:ad:1c:65:51:91:c9:3e:e7:b7:69:d0:30:
da:70:e0:24:72:70:fc:8f:93:ae:3f:a4:87:44:5d:d7:29:07:
15:c6:86:8f:6f:94:10:80:20:70:0a:22:a0:aa:03:84:1c:60:
4d:d2:cd:dd:a4:0a:21:eb:c8:b6:7d:60:5d:fd:03:b1:5c:2e:
9b:25:7a:fe:74:2c:80:79:e1:37:10:c6:b2:ad:99:f8:d4:b5:
22:a4:7e:42:3a:70:50:85:f8:eb:cb:1d:9f:15:00:f2:ef:62:
7b:69:8e:4e:fc:3e:75:c8:92:d3:47:81:30:fa:e4:84:5a:e1:
c0:78:34:2f:fa:f5:21:67:f6:96:24:d4:c8:94:ca:e6:17:07:
05:2a:66:98:b8:b0:79:ee:43:e9:ce:02:3c:fc:7d:8c:10:54:
9e:b6:d6:ec:13:da:e4:d9:e0:16:e1:75:96:05:be:db:19:91:
e7:91:be:c9:3b:aa:5f:df:57:b1:aa:83:d1:fd:6c:bd:ec:cf:
4d:4e:d3:63:e7:92:58:5a:ef:63:b8:59:66:f6:d1:4d:32:69:
e6:51:a3:73:da:ae:b4:20:be:54:b3:5f:cc:44:ce:f5:94:cd:
00:18:3b:f9:71:05:66:6b:89:0f:56:5b:78:00:0e:38:0e:44:
39:b1:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:04:22 2025 by rpki-client