Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa
File: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (raw, json)
Hash identifier: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=
Subject key identifier: 63:A4:7D:05:9E:23:6E:8F:92:78:FE:0C:2B:34:E4:53:37:51:98:4B
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426D9F8446FB21FEC801775D1F2769C6C
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7195
IP address blocks: 103.57.250.0/24 maxlen: 24
2a03:f80:57::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f8:44:6f:b2:1f:ec:80:17:75:d1:f2:76:9c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63a47d059e236e8f9278fe0c2b34e4533751984b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:cc:8e:39:4f:af:4d:75:16:3e:44:52:af:
18:6f:fd:a6:5e:fa:ed:35:f9:47:ff:e7:8a:21:76:
97:a6:13:03:62:b1:75:4f:76:25:c7:65:74:04:fa:
fb:47:a0:cd:91:72:63:d8:84:38:ba:5f:73:0b:7e:
b1:e6:e6:bf:66:9a:c1:26:6f:6e:17:8f:5d:97:36:
40:4b:85:8d:59:e9:32:86:c8:c4:e4:a0:f1:03:d9:
9b:af:fc:ed:4f:a9:52:4f:c7:87:a0:51:cf:11:0f:
dc:88:73:d4:4f:a9:8b:c7:d9:5a:24:25:88:92:83:
79:ea:c6:19:33:07:59:68:2c:4c:90:a8:d9:6a:3c:
eb:51:28:38:18:eb:b9:81:5b:59:5d:6f:85:9f:61:
e6:47:c4:61:c6:79:42:62:17:18:79:4e:c5:b3:61:
cd:bf:98:d4:1d:f2:2f:72:d1:77:cc:de:74:59:04:
05:6d:13:fd:55:17:35:ff:68:2c:97:72:1c:cd:b1:
b7:1d:64:6e:6f:7a:df:f3:21:32:1d:79:77:f0:1b:
96:9d:df:83:11:c0:c1:42:82:32:d7:d8:7b:6d:2e:
d5:06:c4:00:18:91:b9:dc:59:e5:ef:4b:b7:64:2b:
cd:a4:b4:b3:c5:58:13:de:45:9e:08:13:d0:f2:6e:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A4:7D:05:9E:23:6E:8F:92:78:FE:0C:2B:34:E4:53:37:51:98:4B
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.57.250.0/24
IPv6:
2a03:f80:57::/48
Signature Algorithm: sha256WithRSAEncryption
64:a6:45:7f:9c:32:9d:5b:13:d6:c1:3c:6c:09:ff:62:0c:b1:
00:fa:73:d0:d7:0a:6e:fc:86:19:3d:9a:4c:f4:ae:1c:2c:d3:
3c:b5:d7:a0:92:36:5c:d8:fd:29:7b:0e:fd:d9:4d:4c:bb:93:
39:7a:c6:c4:40:ab:7a:98:e5:1c:9a:8c:8c:3c:22:f8:37:e5:
8c:ee:74:18:43:8c:95:30:d0:ed:a6:00:4d:27:88:f2:d7:90:
5c:4e:f8:a1:71:b3:aa:91:64:16:85:fb:42:dc:55:aa:3a:eb:
ba:32:e6:8a:a6:45:91:ce:b8:c0:31:c9:bb:dc:8f:92:f9:99:
ce:dd:57:49:e8:36:cf:4b:c4:e1:59:87:41:f7:fc:ab:65:cd:
61:76:7b:40:9a:29:06:96:07:46:4d:33:a8:13:50:c8:d5:7b:
49:16:e3:2d:df:f4:9b:f0:bd:f8:85:cb:e9:54:89:87:6a:ec:
92:a6:47:71:28:e9:55:ba:15:23:71:de:e8:21:71:be:b9:c4:
0a:1f:3e:1d:67:2d:bf:13:cb:56:ba:cc:74:d9:bc:77:d8:0f:
d1:4d:6b:fc:bc:72:06:e6:0d:b5:16:f6:ec:80:33:05:b5:48:
1e:23:31:e0:98:25:fd:7a:ca:12:0b:61:86:f0:fb:e5:b8:5f:
5c:f4:ec:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:11:05 2025 by rpki-client