Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/4nU8t9nFwIiWzcROGA6bDv2HTiA.roa
File: 4nU8t9nFwIiWzcROGA6bDv2HTiA.roa (raw, json)
Hash identifier: QIYEjvQS5BHu7T+tElBrKTGFMYY7X1GdGDqPR3ESe8Y=
Subject key identifier: E2:75:3C:B7:D9:C5:C0:88:96:CD:C4:4E:18:0E:9B:0E:FD:87:4E:20
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019427B5AEB586F9DD5597F781ECC1AB0AF3
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/4nU8t9nFwIiWzcROGA6bDv2HTiA.roa
Signing time: Thu 02 Jan 2025 15:50:05 +0000
ROA not before: Thu 02 Jan 2025 15:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 103.216.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ae:b5:86:f9:dd:55:97:f7:81:ec:c1:ab:0a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 2 15:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2753cb7d9c5c08896cdc44e180e9b0efd874e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:8a:f2:4e:c5:5c:c8:5b:3b:56:cb:30:23:
f3:50:db:19:a5:f5:09:a5:77:75:6b:ae:0c:50:46:
df:cd:82:a5:2d:4f:83:23:a3:e5:ef:9a:89:06:ff:
e3:2a:5a:2c:e9:0c:71:98:31:d8:61:aa:6b:5e:91:
bc:df:54:99:a1:af:2b:9f:67:92:c2:03:4b:3e:76:
27:fc:9a:0d:c1:62:94:e1:39:09:70:80:d2:03:23:
c4:cc:05:57:e4:01:bb:34:27:6e:e5:ad:45:4d:16:
cc:04:21:05:0d:e7:07:28:d5:69:8f:a6:f8:11:8a:
0e:ff:cf:59:0c:9e:31:5c:bb:ef:af:7e:67:54:af:
8d:51:4f:15:30:f3:b7:c5:21:13:1a:b6:91:a5:69:
ed:51:80:10:8d:58:0d:08:49:02:86:c2:dd:b6:5a:
6b:f5:df:27:0c:f4:c7:f3:26:6c:0f:45:24:cb:a8:
85:c8:79:bf:9a:03:70:61:dc:a1:9a:95:09:6c:09:
4a:51:b0:71:7a:5b:84:2c:f3:7c:c2:25:d2:6b:1b:
fb:c6:d7:52:2f:88:02:e9:fc:54:74:0b:b4:2c:5f:
40:6d:c7:76:d4:e3:22:c2:10:3e:29:82:d4:77:eb:
b6:c0:3d:63:9e:f3:19:ee:ca:4f:77:7a:64:bc:bb:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:75:3C:B7:D9:C5:C0:88:96:CD:C4:4E:18:0E:9B:0E:FD:87:4E:20
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/4nU8t9nFwIiWzcROGA6bDv2HTiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.174.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ab:ba:59:3d:73:1a:a2:77:47:7f:32:76:92:ed:ab:18:e1:
c5:bf:0b:0e:76:5d:dc:50:c7:65:8c:ab:19:2c:19:a7:6e:7c:
a9:e7:58:cc:5e:ad:f6:58:9e:2a:d8:0c:65:d3:43:10:49:8b:
98:95:b5:f6:49:87:5e:f5:c7:40:ff:08:16:31:f6:69:5d:90:
b0:33:7b:af:4f:63:b2:b5:c3:e7:a9:6a:67:52:2d:98:d1:ea:
ff:9d:22:ee:5e:77:a3:28:5d:47:71:ee:a6:5e:5f:62:7d:2d:
d7:d3:02:41:25:c3:b1:af:f9:d7:79:7e:35:8f:37:8f:09:21:
e5:c9:5e:7c:b5:d5:2a:ac:15:cb:03:7b:8e:ac:af:d6:7e:bc:
72:3f:71:c4:aa:8f:ca:6d:02:0d:ee:10:9a:37:e5:ce:08:88:
16:a3:b0:50:38:62:58:b2:23:f6:4b:7a:74:7d:25:63:ff:4d:
a8:b8:71:4c:67:d2:77:07:b1:4f:52:59:58:27:9d:0d:47:43:
fe:fb:c6:9d:c5:1c:07:c8:09:2f:1e:d3:2a:f0:57:99:30:1d:
79:4f:4a:64:54:c5:74:2c:17:28:a4:31:47:15:93:65:4a:20:
94:df:b3:26:c7:90:c5:fc:a9:da:66:88:5e:db:48:a4:43:50:
a0:98:c4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:32:44 2025 by rpki-client