Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/VE30jKUNv_zrcQD408Ibqfwpm9Y.roa
File: VE30jKUNv_zrcQD408Ibqfwpm9Y.roa (raw, json)
Hash identifier: XMLFUviPAAKGY2JFI48uHLyyQA2AE8EqG/DkZ6vOu9w=
Subject key identifier: 54:4D:F4:8C:A5:0D:BF:FC:EB:71:00:F8:D3:C2:1B:A9:FC:29:9B:D6
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 019423D70A435D9A3F55D3E2CBAC1EF800A1
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/VE30jKUNv_zrcQD408Ibqfwpm9Y.roa
Signing time: Wed 01 Jan 2025 21:48:02 +0000
ROA not before: Wed 01 Jan 2025 21:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136744
IP address blocks: 103.35.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0a:43:5d:9a:3f:55:d3:e2:cb:ac:1e:f8:00:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=544df48ca50dbffceb7100f8d3c21ba9fc299bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:8d:3d:5c:49:07:ff:ce:36:86:5b:78:a1:
36:04:b6:13:56:c4:73:25:da:0a:54:c2:34:24:d7:
7d:a7:ff:9a:d1:62:c2:bc:18:13:c7:5c:a3:a9:11:
a3:d8:d1:80:4e:ae:8c:85:5b:18:b0:2b:45:82:a5:
f8:f8:e1:b3:09:e1:15:a7:1f:3c:ca:ab:dd:66:a8:
cb:61:31:8d:41:c4:c3:68:35:22:b8:f5:be:84:68:
b8:e9:7d:1a:69:d5:d0:5c:81:a8:b4:ca:fe:fb:f3:
d6:d3:2e:d1:19:9d:24:f2:d7:9a:9b:0a:af:48:1f:
da:4f:68:7b:c8:8a:26:70:d8:0a:dc:39:6e:72:8a:
b7:8f:a3:f0:8d:f0:b0:ef:c0:d4:8d:23:cc:ab:3c:
91:66:4c:88:49:75:56:2c:fe:d7:e8:6b:11:03:ae:
8f:86:60:f4:d9:f8:00:69:ff:66:c1:3a:91:00:00:
67:1f:16:36:73:7a:2a:e2:75:1e:66:fe:44:ed:73:
4f:62:b2:c1:c7:4b:09:a7:f4:19:d5:43:8b:28:af:
3d:0d:30:8b:b2:f2:ec:52:ee:19:79:2c:3e:b1:87:
9a:90:27:1f:33:28:f6:9e:b9:66:7a:49:f8:01:da:
45:75:a8:05:1d:e0:f1:8a:c8:37:93:4f:7a:f1:37:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4D:F4:8C:A5:0D:BF:FC:EB:71:00:F8:D3:C2:1B:A9:FC:29:9B:D6
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/VE30jKUNv_zrcQD408Ibqfwpm9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.35.56.0/22
Signature Algorithm: sha256WithRSAEncryption
38:de:98:2d:99:d9:d5:3b:f0:88:92:1a:63:38:78:41:57:c0:
85:cf:07:00:df:1d:ec:66:7d:d9:84:fc:9c:b8:dd:d0:8d:c0:
44:c4:2c:d6:09:3e:1a:58:24:0f:49:fd:22:f3:de:46:a8:91:
5a:66:c6:02:c3:ac:d3:ad:14:db:72:af:19:aa:8a:07:e6:30:
1f:8d:95:52:30:7b:eb:5a:33:cb:8a:be:32:88:05:9e:dc:43:
b1:e0:b2:59:4e:90:90:1b:14:53:f2:24:50:6d:56:a7:da:63:
d9:73:99:e1:80:29:c2:0a:28:b9:7b:02:eb:2d:dd:c7:2c:03:
22:45:39:b9:00:5c:fd:33:aa:ba:58:99:4b:e1:ae:b3:d8:6f:
0c:27:2d:f9:01:8a:b2:93:61:f4:52:f3:72:47:95:97:13:d1:
ab:e3:64:42:7d:fe:4b:40:6b:5a:a6:2a:7f:ee:5c:b9:9b:14:
06:a9:37:60:05:43:d5:0c:cf:81:94:93:43:35:6a:18:89:08:
2e:ed:f2:98:18:04:e8:40:9a:87:89:06:e5:d4:60:d7:97:66:
0c:68:f3:40:a2:dc:47:67:3d:39:2a:af:ec:30:05:0d:ff:39:
7e:52:ef:80:bb:d0:c5:5b:fb:37:b0:b3:fc:9b:22:99:e1:29:
d3:41:74:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:42:51 2025 by rpki-client