Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/meeuvFfLeVkjn0AHwyedi8orqTY.roa
File: meeuvFfLeVkjn0AHwyedi8orqTY.roa (raw, json)
Hash identifier: 3W2i+GQnpLL5bvhigEe4+QCwJWUicyEdw/3WUoiNOzM=
Subject key identifier: 99:E7:AE:BC:57:CB:79:59:23:9F:40:07:C3:27:9D:8B:CA:2B:A9:36
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0193B5383F9493C6ADFB6462BDCB23E9E0B1
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/meeuvFfLeVkjn0AHwyedi8orqTY.roa
Signing time: Wed 11 Dec 2024 10:16:22 +0000
ROA not before: Wed 11 Dec 2024 10:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214231
IP address blocks: 103.71.20.0/24 maxlen: 24
103.71.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:38:3f:94:93:c6:ad:fb:64:62:bd:cb:23:e9:e0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Dec 11 10:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99e7aebc57cb7959239f4007c3279d8bca2ba936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f5:69:81:13:0c:7c:25:54:ba:42:e1:6f:10:
c0:a2:98:80:e8:8b:f1:bf:bf:c2:18:d6:e7:9b:dd:
90:4c:86:a0:75:f7:87:23:a7:b3:fd:0c:f2:a3:c0:
d6:cc:ef:bb:e1:c4:31:c2:18:d5:e5:70:5e:11:8f:
3e:77:d2:11:f6:45:7f:94:7f:84:a4:32:33:79:2a:
d4:cd:a6:15:97:fd:8e:90:95:96:89:89:38:cc:80:
5e:8b:59:24:8d:36:1f:9c:c7:8f:bc:69:06:52:8f:
38:df:fc:44:15:1a:a1:11:c0:f8:00:bc:ec:e8:11:
b9:1f:de:b9:ae:1b:53:94:0e:cf:f2:49:b6:17:bf:
23:56:63:f2:43:73:71:1f:bf:a0:b0:f9:34:44:09:
4a:af:d8:ee:1a:f6:2c:1b:33:97:09:7e:dc:bf:c3:
8b:61:7e:2c:ba:72:72:ef:41:0c:69:61:2c:cd:74:
c3:f6:77:b6:8a:f4:ad:c6:12:a2:e9:a2:5c:a0:a0:
dd:62:fb:24:7d:94:76:73:03:66:77:d2:9b:2b:6f:
e5:6b:6c:8c:ce:97:fb:81:0b:65:3b:e8:ff:1e:70:
d9:3d:61:ae:2d:1b:50:97:06:c0:f4:9b:7f:6b:2d:
02:b3:ae:32:5a:e2:7e:f5:52:04:51:07:85:9b:07:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E7:AE:BC:57:CB:79:59:23:9F:40:07:C3:27:9D:8B:CA:2B:A9:36
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/meeuvFfLeVkjn0AHwyedi8orqTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.71.20.0/23
Signature Algorithm: sha256WithRSAEncryption
64:87:85:d6:d5:36:af:f2:77:31:4d:78:8a:92:23:e8:5c:33:
6f:e1:55:9d:86:52:31:64:3c:ef:a9:9a:d7:ef:b2:81:36:9e:
0f:d0:13:a6:50:de:b6:7c:2a:11:b7:55:bb:8c:04:37:a8:f4:
bf:ae:c8:66:17:a7:72:9b:2d:2f:78:9a:bb:26:d1:fe:29:81:
a0:4e:cd:4a:c7:8f:85:03:50:5e:8f:42:e5:e1:76:00:a3:07:
19:37:fe:63:f0:f9:49:87:61:ec:2e:f4:f6:45:06:67:73:9b:
f0:b2:d2:8c:c0:df:d1:a8:ab:6b:35:b5:bc:d1:76:c3:26:df:
04:e8:6e:9b:25:ec:b1:fe:ee:ea:af:49:7a:2a:c6:88:4c:dc:
24:35:1f:05:5b:04:62:90:26:5f:2c:ec:95:06:2c:26:ab:34:
c1:5f:e3:1d:e8:d2:c2:b4:45:71:87:ea:2e:b4:b0:0e:61:42:
df:1c:ab:e8:36:1b:47:2f:dd:cc:86:bb:44:fb:ad:a0:6b:c9:
5a:28:a7:1a:39:2d:24:02:8b:27:42:f6:62:6e:d4:8d:33:94:
d1:99:ef:57:a7:24:41:d0:0f:fe:6f:12:27:f8:17:2b:1d:15:
ad:a8:17:49:fd:f6:77:15:44:03:fd:dc:f4:bd:e9:71:58:6c:
d8:97:b5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:30:18 2025 by rpki-client