Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/7x7-Futm80nKhATiwSpUTQ5UgCY.roa
File: 7x7-Futm80nKhATiwSpUTQ5UgCY.roa (raw, json)
Hash identifier: kmUkS8V6yoNLC3BqBDEIlaky0k7E2t4gh1W2FMiiTdk=
Subject key identifier: EF:1E:FE:16:EB:66:F3:49:CA:84:04:E2:C1:2A:54:4D:0E:54:80:26
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01946EED815154EA2A409B8A8E8295ED3358
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/7x7-Futm80nKhATiwSpUTQ5UgCY.roa
Signing time: Thu 16 Jan 2025 11:44:06 +0000
ROA not before: Thu 16 Jan 2025 11:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 103.216.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:ed:81:51:54:ea:2a:40:9b:8a:8e:82:95:ed:33:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 16 11:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef1efe16eb66f349ca8404e2c12a544d0e548026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:58:9a:f8:b7:8a:7e:ef:db:54:d8:c7:42:
76:ed:6d:9b:4c:f3:fc:66:9e:67:7c:75:59:73:3b:
6d:7f:de:75:64:4b:13:b2:13:0f:78:e9:58:63:b4:
56:c9:df:29:2f:22:44:66:f1:ca:3d:13:85:92:f9:
6e:aa:8b:02:5d:e2:0c:b4:bb:35:b4:8f:92:4a:fd:
a9:42:6c:3a:8e:12:b8:41:eb:fa:c4:d5:79:2a:83:
07:19:68:50:f1:73:6a:ae:be:a7:e4:0f:fb:9e:d5:
1f:c4:54:b7:7d:b6:23:47:e3:d8:ae:24:7f:d9:47:
c3:78:dd:dd:f7:db:0c:62:42:b8:a9:5e:bd:bd:99:
62:f6:9e:73:48:e8:eb:2b:20:fd:f3:a2:33:a0:74:
3b:6d:ee:fe:0b:fd:35:32:cb:90:cb:2e:b4:25:12:
f0:89:d0:c8:58:14:2b:af:e9:1b:07:f3:f5:52:9f:
dd:d9:73:aa:7b:8f:a7:89:fa:75:a7:7e:dc:7f:69:
29:dc:1e:a5:63:04:eb:5e:fa:63:42:f5:d7:ae:fa:
21:cc:4a:c2:97:72:79:27:ce:86:29:ad:3c:c8:39:
0c:75:58:da:e8:24:02:39:14:66:6a:21:7b:ee:73:
33:85:77:6e:d4:d5:0d:27:33:6d:78:e6:b5:82:0c:
5d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1E:FE:16:EB:66:F3:49:CA:84:04:E2:C1:2A:54:4D:0E:54:80:26
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/7x7-Futm80nKhATiwSpUTQ5UgCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.173.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a7:8b:58:54:14:3e:05:d5:7f:8f:d3:96:cc:50:c3:69:c4:
04:a8:2f:10:d8:fb:bc:7d:79:b4:82:bb:e0:91:6a:58:cc:92:
ed:37:b0:e6:69:85:db:b2:a9:63:9d:ff:f0:45:e1:82:ca:e0:
99:46:d6:7e:ea:87:7c:d2:2b:88:e7:db:a0:83:7b:a3:37:82:
a6:92:2a:c0:a5:32:fd:25:ba:01:d4:6d:e8:de:2c:7d:cb:85:
35:a3:11:aa:86:b5:bb:b0:5a:ad:75:5f:b1:d1:26:b6:b7:48:
ef:e8:8a:9f:12:09:be:02:5d:00:76:07:a8:85:c5:b6:71:7a:
4f:2a:37:07:5f:4e:75:95:78:a2:60:e1:55:a1:be:38:b2:86:
1c:ee:bc:22:1d:34:5d:31:69:31:2b:50:8a:2d:f5:b8:b0:c6:
3b:7d:f7:ac:4b:b2:a6:2d:03:5f:eb:c1:96:50:24:50:7c:e6:
47:52:f9:27:52:02:21:e7:d9:96:8b:c7:a3:ff:0c:2f:4c:c9:
06:96:db:a5:75:98:14:73:f0:18:b5:95:7a:d5:9c:bb:d6:44:
23:89:f4:8d:96:55:33:f0:63:c0:e2:a0:43:2f:27:51:b1:75:
28:eb:ea:7a:45:03:97:d5:a7:4b:bb:bb:54:9a:17:0d:f1:fe:
20:a1:2c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:06:53 2025 by rpki-client