Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Te45-h1SuAziXt4gVKN1aT8O4hM.roa
File: Te45-h1SuAziXt4gVKN1aT8O4hM.roa (raw, json)
Hash identifier: r0d2Q2QSYYn2bF4r/tEM54zYpJ86K8TqM7RMI3N+2F4=
Subject key identifier: 4D:EE:39:FA:1D:52:B8:0C:E2:5E:DE:20:54:A3:75:69:3F:0E:E2:13
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D70D8BA7283D8E3C7551329C95D367
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Te45-h1SuAziXt4gVKN1aT8O4hM.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 103.82.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0d:8b:a7:28:3d:8e:3c:75:51:32:9c:95:d3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dee39fa1d52b80ce25ede2054a375693f0ee213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d8:7d:9c:c3:4a:1d:16:68:7a:5a:ac:17:1e:
43:d9:98:b8:1f:57:7b:10:58:cc:dd:b1:de:d7:a1:
fe:a3:c8:aa:da:b2:45:d0:7f:8c:7e:9b:65:a3:73:
49:28:1b:16:e6:0a:f3:4f:74:68:07:49:8b:3b:83:
15:35:28:72:98:fe:dc:99:28:d1:fa:66:d0:bf:dc:
e8:c4:08:17:d0:d3:dd:27:ab:1d:17:65:97:e1:62:
ac:eb:b5:a2:23:4c:96:9a:c8:47:92:59:e6:a6:7d:
90:60:04:89:07:84:06:8e:b1:da:e3:cd:5e:ec:0e:
29:10:eb:d8:b4:7d:84:92:78:c2:05:9e:ca:86:f5:
f2:95:a7:6f:d1:b7:ab:2e:3b:2a:b6:ea:89:6d:f7:
e5:7a:a4:4c:d4:00:9f:2f:62:3d:c6:85:5d:72:63:
04:5a:9c:9d:c2:fb:51:10:21:75:d1:10:6e:68:5b:
77:fd:f9:21:ae:1f:c9:7b:bc:c3:85:b1:8c:92:15:
fd:57:69:09:30:ee:b0:d1:de:5a:3e:68:2a:29:5c:
a2:6a:96:09:7a:c6:91:99:0c:df:9b:ab:e2:f3:ce:
55:77:ef:22:7e:95:69:08:58:fe:6b:40:b7:b6:51:
3b:af:95:ba:78:7c:b1:17:4f:fe:f4:68:70:c5:f1:
a8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EE:39:FA:1D:52:B8:0C:E2:5E:DE:20:54:A3:75:69:3F:0E:E2:13
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Te45-h1SuAziXt4gVKN1aT8O4hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.82.102.0/24
Signature Algorithm: sha256WithRSAEncryption
54:90:74:86:3a:ed:dd:b5:c6:ad:ee:0f:34:ee:21:d9:ce:28:
06:b1:b7:3f:ed:87:5a:a9:14:46:4e:a1:fc:1c:51:c4:8d:76:
b8:00:aa:04:0b:26:8b:bf:2e:88:4e:70:95:a6:d0:7b:ae:71:
b1:a8:2c:2e:c2:3d:8a:92:37:a8:d0:c2:ab:3a:bb:f2:75:ba:
83:ee:63:96:bf:ed:a6:eb:73:94:2b:ad:09:55:1c:30:63:1e:
97:18:9a:41:6e:2d:a6:ae:65:31:ae:b2:92:b6:40:87:91:9a:
b5:2b:a8:43:3f:11:bf:d6:51:68:5a:59:08:57:09:ed:e0:bb:
bd:56:1c:27:4e:b9:52:d0:05:86:50:83:60:ce:ba:e6:25:0c:
cc:18:51:e4:c8:59:47:38:e2:97:6f:28:65:02:ae:48:e5:58:
77:12:63:52:cb:ca:90:f3:a6:70:b3:dd:01:a4:c4:d1:ef:06:
26:75:6e:86:f0:6a:27:2d:df:05:eb:8f:20:22:3a:c4:ac:ed:
ac:b7:c4:37:79:3a:67:d3:92:13:a2:40:56:d9:38:c9:03:1e:
06:f9:de:16:a8:ce:eb:48:2e:d6:d9:76:fc:dc:86:b7:2d:12:
00:f0:b1:e2:07:fc:1d:5b:af:65:cc:fe:a7:2e:e9:82:57:78:
d1:86:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:24 2025 by rpki-client