Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/_VQDdipuqWgUBhMK9TvL1qMAmvM.roa
File: _VQDdipuqWgUBhMK9TvL1qMAmvM.roa (raw, json)
Hash identifier: kWJC5U3r99h27xV9Mjy4xBX5Av8MummWyJ+qnqeOSw0=
Subject key identifier: FD:54:03:76:2A:6E:A9:68:14:06:13:0A:F5:3B:CB:D6:A3:00:9A:F3
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0193CEADE320D3BE13B67222B7A23E1D4E65
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/_VQDdipuqWgUBhMK9TvL1qMAmvM.roa
Signing time: Mon 16 Dec 2024 08:55:22 +0000
ROA not before: Mon 16 Dec 2024 08:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216246
IP address blocks: 103.71.22.0/24 maxlen: 24
103.71.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:ad:e3:20:d3:be:13:b6:72:22:b7:a2:3e:1d:4e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Dec 16 08:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd5403762a6ea9681406130af53bcbd6a3009af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:76:f7:17:c2:96:45:2b:7f:97:6a:96:ee:
84:49:21:8f:5c:7b:c1:a8:7b:54:e6:e9:43:f5:b6:
f0:53:8c:a3:b7:32:32:9d:46:26:d5:99:e8:74:f6:
26:18:ae:25:06:6d:de:7a:3e:08:12:2a:9b:3e:69:
09:c1:07:7e:75:6c:64:60:59:93:fa:8e:57:db:b3:
41:7f:d5:67:9c:ca:de:6b:72:80:82:bb:da:a0:78:
9f:a3:10:5a:a0:fb:00:7f:c2:29:bc:ee:f2:8e:f2:
60:a0:ab:08:24:c0:e5:b3:88:6a:da:e8:de:f7:9e:
7e:fd:d4:44:f6:52:4a:11:d9:35:c8:d9:5d:10:f2:
f9:48:c4:94:0d:d1:4c:4d:e3:38:39:6e:a9:d6:45:
23:61:42:4f:38:01:35:c1:d7:76:45:db:b6:75:06:
e1:6b:0e:13:6e:a0:26:02:04:5a:58:89:6a:b1:8d:
86:11:d8:aa:8a:b5:16:ac:00:9f:98:30:3e:bc:0a:
4b:fc:95:bc:42:76:80:55:80:04:8d:14:a2:42:87:
3b:39:ec:92:a5:58:dc:9c:19:b8:2c:35:47:c0:74:
27:7e:6a:e9:52:6f:bc:e5:18:12:0b:cb:6c:9f:34:
8e:75:8c:b7:02:c2:db:07:83:6e:bc:d5:19:c6:7f:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:54:03:76:2A:6E:A9:68:14:06:13:0A:F5:3B:CB:D6:A3:00:9A:F3
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/_VQDdipuqWgUBhMK9TvL1qMAmvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.22.0/23
Signature Algorithm: sha256WithRSAEncryption
79:dd:86:cc:60:08:2a:27:4b:51:8b:93:a9:6b:f9:79:ea:c7:
a3:b9:2a:f7:5b:17:ab:21:93:0f:ca:ee:a9:06:f2:52:e6:67:
bd:29:14:61:39:a0:8b:ca:e8:19:32:70:79:a4:a1:12:dd:63:
a9:37:39:ee:9e:0e:38:eb:4d:95:29:f8:a0:f2:68:19:65:e3:
06:37:96:db:83:9c:5c:2f:bd:49:ad:a4:7f:68:b4:66:2e:f4:
34:91:a6:da:4e:0e:63:7d:9a:ae:01:6f:4e:2d:f1:a1:a5:b4:
1e:08:09:2d:13:f2:10:76:30:a8:79:7c:0b:c7:4f:06:45:ce:
13:e4:57:7a:61:61:07:24:82:a0:29:e2:84:84:5b:0f:c4:25:
54:87:f4:45:92:61:b1:45:0d:30:e3:f1:09:51:c2:20:cc:9b:
64:88:6e:46:0b:3c:43:fb:3f:2c:8f:76:8b:53:c9:85:d4:a2:
a3:85:fc:fd:d0:23:0c:e5:27:0a:3c:e8:f5:f1:db:f3:8f:fb:
da:3a:fc:01:b0:04:d6:a4:29:60:93:4e:f3:22:1f:4a:d2:b3:
2e:6c:60:ec:13:96:43:33:b8:00:24:72:99:56:bc:e9:73:6a:
63:ac:c5:47:b9:cd:2c:54:0c:1e:c4:cd:a2:ea:ff:9a:9b:d8:
41:12:ac:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZPOreMg074TtnIit6I+HU5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjQxMjE2MDg1NTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDU0MDM3NjJhNmVhOTY4MTQwNjEzMGFmNTNiY2JkNmEzMDA5YWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSR29xfClkUrf5dqlu6ESSGPXHvB
qHtU5ulD9bbwU4yjtzIynUYm1ZnodPYmGK4lBm3eej4IEiqbPmkJwQd+dWxkYFmT
+o5X27NBf9VnnMrea3KAgrvaoHifoxBaoPsAf8IpvO7yjvJgoKsIJMDls4hq2uje
955+/dRE9lJKEdk1yNldEPL5SMSUDdFMTeM4OW6p1kUjYUJPOAE1wdd2Rdu2dQbh
aw4TbqAmAgRaWIlqsY2GEdiqirUWrACfmDA+vApL/JW8QnaAVYAEjRSiQoc7OeyS
pVjcnBm4LDVHwHQnfmrpUm+85RgSC8tsnzSOdYy3AsLbB4NuvNUZxn966QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP1UA3YqbqloFAYTCvU7y9ajAJrzMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvX1ZRRGRpcHVxV2dVQmhNSzlUdkwxcU1BbXZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ0cWMA0G
CSqGSIb3DQEBCwUAA4IBAQB53YbMYAgqJ0tRi5Opa/l56sejuSr3WxerIZMPyu6p
BvJS5me9KRRhOaCLyugZMnB5pKES3WOpNznung44602VKfig8mgZZeMGN5bbg5xc
L71JraR/aLRmLvQ0kabaTg5jfZquAW9OLfGhpbQeCAktE/IQdjCoeXwLx08GRc4T
5Fd6YWEHJIKgKeKEhFsPxCVUh/RFkmGxRQ0w4/EJUcIgzJtkiG5GCzxD+z8sj3aL
U8mF1KKjhfz90CMM5ScKPOj18dvzj/vaOvwBsATWpClgk07zIh9K0rMubGDsE5ZD
M7gAJHKZVrzpc2pjrMVHuc0sVAwexM2i6v+am9hBEqwB
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:27:28 2025 by rpki-client