Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/LII7hRC3tP9UTUOEbD-OlE2YLz0.roa
File: LII7hRC3tP9UTUOEbD-OlE2YLz0.roa (raw, json)
Hash identifier: 2G0IT+KoXJQxpXp8HjaK3udKnKhR8XLas866IuV7Mj4=
Subject key identifier: 2C:82:3B:85:10:B7:B4:FF:54:4D:43:84:6C:3F:8E:94:4D:98:2F:3D
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01941FFA44370234EFD95E1DE8F339AEF8B1
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/LII7hRC3tP9UTUOEbD-OlE2YLz0.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203098
IP address blocks: 43.230.56.0/23 maxlen: 23
43.230.58.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:44:37:02:34:ef:d9:5e:1d:e8:f3:39:ae:f8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c823b8510b7b4ff544d43846c3f8e944d982f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:b6:2a:b8:5d:a0:54:b9:0d:39:d3:2b:bb:
13:76:ae:5e:85:6e:2b:b0:e5:5f:81:ea:a3:4b:40:
33:53:da:a8:2e:17:6b:8a:bc:79:f3:25:a4:2f:83:
69:b6:5a:b3:d0:57:f8:33:53:10:7d:5d:c3:8c:d9:
36:e1:46:1d:76:51:e6:6c:44:d8:06:2f:3a:53:c2:
f8:77:d4:22:14:17:e6:fb:e0:9c:35:a3:74:2d:f8:
1c:a2:da:cf:91:80:80:cd:5d:22:77:ac:22:9d:4a:
b5:9c:7b:90:10:b2:e4:40:2e:ed:dc:c0:5d:90:cc:
8b:f0:6d:5e:74:e1:83:88:cc:05:7e:7d:0b:3d:06:
40:5e:38:46:8b:ba:82:0e:80:87:12:9e:a9:07:41:
b4:7e:9b:1c:a4:f7:77:51:cf:0b:11:5d:d6:db:d8:
6d:49:ac:fd:06:f9:2f:20:ef:8b:a1:7d:a8:91:fb:
73:2b:9a:59:1c:7b:dc:3c:73:71:aa:4c:47:14:55:
91:c0:8c:b8:9b:fb:9b:38:dd:f0:18:4d:ee:56:07:
55:f7:49:c1:ff:80:23:88:e4:0f:31:67:93:30:7e:
39:de:10:73:3a:64:a9:cb:b9:b4:7c:ae:62:8b:38:
48:27:37:66:42:33:62:23:4a:82:9e:ab:bf:0f:15:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:82:3B:85:10:B7:B4:FF:54:4D:43:84:6C:3F:8E:94:4D:98:2F:3D
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/LII7hRC3tP9UTUOEbD-OlE2YLz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.56.0/22
Signature Algorithm: sha256WithRSAEncryption
66:09:b7:ad:31:f2:b3:d0:25:6f:7a:c8:19:80:4b:9a:10:90:
f5:f5:0a:d0:8d:d4:a9:dd:89:29:0c:d3:32:be:95:29:b1:10:
79:91:0a:0f:2d:02:20:e6:0b:41:be:6e:b9:57:73:f7:85:d9:
41:82:52:28:9c:a8:df:fd:f3:a3:90:7f:95:95:9d:0f:40:75:
a1:ae:0d:da:13:19:33:c2:d9:40:34:31:75:b5:7d:e1:1a:99:
1a:82:05:00:d1:d7:f9:a7:64:08:a8:a8:fe:03:e7:a8:0c:ea:
a8:e9:66:7d:0d:12:e0:3e:06:3a:94:c6:23:32:a3:87:0e:fa:
e7:4a:39:a8:4b:37:f4:f2:fc:45:25:4a:8d:08:d7:16:33:52:
b7:d3:b5:bf:4b:e9:ad:90:e5:8a:e7:d7:36:a8:8d:17:72:ef:
28:00:c5:a1:be:0d:ef:64:9b:05:09:d4:de:e6:e9:b2:a1:28:
ee:dc:42:8d:eb:5f:fc:2a:c3:ff:b3:b6:8d:01:e2:4b:0e:41:
4e:e3:58:4d:6c:1b:42:2f:41:35:d0:10:e5:18:a1:e3:8e:e2:
32:e0:3f:60:63:84:ce:b1:30:c8:eb:5b:0a:51:10:fa:d0:7d:
c4:25:fa:b4:d1:94:f9:28:9b:b7:78:43:4f:24:f5:0f:9b:f9:
35:c0:fd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:29:47 2025 by rpki-client