Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/IROFoAzRYfAyAuh137ZUKRo16o0.roa
File: IROFoAzRYfAyAuh137ZUKRo16o0.roa (raw, json)
Hash identifier: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=
Subject key identifier: 21:13:85:A0:0C:D1:61:F0:32:02:E8:75:DF:B6:54:29:1A:35:EA:8D
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01946EED81A7BB24FFEDA9220903A9570791
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/IROFoAzRYfAyAuh137ZUKRo16o0.roa
Signing time: Thu 16 Jan 2025 11:44:06 +0000
ROA not before: Thu 16 Jan 2025 11:44:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26042
IP address blocks: 103.216.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6e:ed:81:a7:bb:24:ff:ed:a9:22:09:03:a9:57:07:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 16 11:44:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=211385a00cd161f03202e875dfb654291a35ea8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:ac:63:5a:9c:b0:07:49:63:25:f5:4c:ea:
c1:d4:5d:35:08:be:9d:c1:66:37:17:31:85:30:34:
99:ea:f0:96:60:5d:e2:33:23:90:39:7c:00:6c:b1:
fa:98:e1:cd:93:2b:5b:27:2c:a0:5a:39:6e:12:22:
f5:71:50:34:1e:33:20:ac:12:5a:85:d1:55:02:11:
ce:23:83:6b:76:e0:4f:0e:fd:fb:9e:eb:66:4f:db:
b2:91:f4:48:67:7b:bd:70:c1:61:f8:92:82:7d:41:
1f:25:7b:03:09:ac:06:9f:05:c8:03:d1:f5:95:16:
f8:85:53:d5:f4:a4:49:ca:7e:62:09:c4:2e:4b:78:
47:79:80:ff:de:3f:71:b4:4f:45:59:eb:38:04:a3:
8d:f3:0e:fb:6c:00:38:7b:f9:b1:84:03:63:6b:e8:
d6:08:c9:99:c7:5d:2f:d3:e7:5e:2b:e2:e3:54:9c:
7e:6a:c1:b5:e1:ed:9e:5e:9e:eb:63:35:1f:25:1e:
42:08:c8:7a:e0:36:8a:72:64:a3:bc:a7:5a:ea:54:
60:09:7f:2f:af:75:06:8d:9a:0c:a2:b1:4b:9e:53:
34:66:71:e5:fd:79:aa:64:00:2c:26:c6:db:75:a6:
57:a0:d7:e7:84:27:9e:25:0c:ee:6e:84:c7:18:ee:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:13:85:A0:0C:D1:61:F0:32:02:E8:75:DF:B6:54:29:1A:35:EA:8D
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/IROFoAzRYfAyAuh137ZUKRo16o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.172.0/24
Signature Algorithm: sha256WithRSAEncryption
59:44:bf:c4:ec:65:b9:5a:19:b8:3a:bc:d2:bc:a7:c4:07:4e:
36:47:b5:f3:c7:d5:1c:50:c3:e9:45:c6:44:b1:85:14:69:36:
39:13:3c:8d:05:9a:99:eb:25:fa:fa:e5:4e:1e:45:c9:fb:d2:
54:b4:e8:c8:9e:ed:8d:54:6c:3c:f9:94:2d:0e:f2:03:eb:7a:
80:61:5d:7d:11:3f:09:7e:e7:b1:cc:d3:f0:1c:f5:35:90:b3:
d5:a2:f6:5b:2c:86:c9:f0:8b:23:92:11:7b:a2:b7:f6:1b:cb:
22:0e:50:12:f9:d8:b6:61:6e:3b:b2:02:cb:a6:da:8d:05:a3:
99:f6:ee:da:f6:45:95:7d:33:fc:69:51:70:b1:a3:d5:f4:ad:
24:ac:c5:b2:c3:ef:6c:59:95:5d:82:d3:b4:b5:df:97:95:07:
bb:16:76:c1:32:f5:a0:a2:4e:f5:01:fd:98:59:13:71:55:aa:
f1:05:12:03:a5:7c:97:1b:63:0d:d2:43:1a:bf:fb:99:e0:a7:
0e:9a:61:6f:9c:71:ab:ea:9a:70:bd:15:d5:ea:39:d4:9c:94:
2c:2a:9d:b9:90:08:f9:50:96:b4:30:0b:c6:01:d9:e7:be:ca:
13:5f:8b:1a:91:29:18:49:dd:ec:3b:ff:22:1f:4d:78:64:81:
ea:2a:20:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:41 2025 by rpki-client