Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/bO_WvrYP5ttqrPDJq5s463Nszpo.roa
File: bO_WvrYP5ttqrPDJq5s463Nszpo.roa (raw, json)
Hash identifier: EspaZPCLRAen7G7qKwAXYq7KwKVTki6xdz4+i5S1a6Q=
Subject key identifier: 6C:EF:D6:BE:B6:0F:E6:DB:6A:AC:F0:C9:AB:9B:38:EB:73:6C:CE:9A
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 01942143EE9DF317153F13107BD9FB038589
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/bO_WvrYP5ttqrPDJq5s463Nszpo.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51847
IP address blocks: 103.76.85.0/24 maxlen: 24
116.206.92.0/24 maxlen: 24
116.206.93.0/24 maxlen: 24
195.78.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ee:9d:f3:17:15:3f:13:10:7b:d9:fb:03:85:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cefd6beb60fe6db6aacf0c9ab9b38eb736cce9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:f6:53:21:a1:e6:5b:c9:f1:99:64:11:b0:
8f:02:d1:61:f5:cd:60:c6:85:bd:b2:88:be:2b:3e:
99:25:5b:7e:27:10:40:2d:49:54:63:54:74:8e:9c:
0a:34:ae:6e:b7:01:a8:07:da:35:ba:4e:ff:b0:ed:
d9:de:87:79:81:b3:1e:a2:a5:c9:7d:76:04:f4:92:
df:09:6f:f7:15:9c:d1:9d:e4:59:8d:18:b2:09:73:
8d:60:9d:12:67:68:1b:61:98:ae:88:ff:cc:dd:ea:
54:79:ad:89:81:dd:fd:ae:bd:6a:ff:84:41:43:17:
f7:99:27:a4:72:95:30:9c:97:b2:05:3d:b7:fe:a6:
cc:19:1d:f7:d6:5b:26:13:bc:a2:40:a1:37:67:4b:
09:42:00:cd:ff:a4:cf:b6:16:c5:a1:22:95:4e:44:
8e:0d:89:cb:e8:ef:06:40:46:66:93:d6:a9:59:f0:
a1:0c:b4:15:ff:7e:11:16:a4:27:6c:1e:14:81:95:
4c:ef:99:6f:3d:6b:18:ec:a5:27:4d:d3:93:35:69:
d4:0a:1c:b6:fb:4e:ac:86:32:70:75:0a:09:33:db:
1c:98:4f:3e:c4:9e:2e:4c:a5:f0:fe:e9:5a:8b:f0:
af:d8:bd:3d:39:1d:f9:ef:f3:fa:a0:37:87:a6:62:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EF:D6:BE:B6:0F:E6:DB:6A:AC:F0:C9:AB:9B:38:EB:73:6C:CE:9A
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/bO_WvrYP5ttqrPDJq5s463Nszpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.85.0/24
116.206.92.0/23
195.78.48.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:56:c7:47:8c:b0:9b:dd:ec:01:54:11:89:3d:40:77:7f:d0:
26:18:ae:65:e9:af:00:e7:f6:4f:90:bd:65:99:71:4a:f0:23:
ff:bd:91:ca:7e:df:5a:b7:fb:f9:dd:e3:38:40:25:2c:50:46:
af:37:e5:d8:cf:9a:8b:9d:47:c3:a4:d2:b9:06:4d:c1:e4:fa:
52:19:a5:e0:c1:e0:09:e2:53:26:2c:70:7e:77:f7:3d:04:f6:
40:1b:74:85:be:e5:e2:61:f7:ca:12:ce:6f:2b:84:a9:25:1a:
27:f3:91:58:fc:fa:a3:14:f2:d2:c0:54:db:4a:f8:a2:3e:0c:
84:e6:bb:55:aa:db:08:32:40:bb:65:d3:69:ea:00:53:bb:3f:
bd:00:ce:d0:0b:ac:47:2f:fd:55:3b:a3:50:41:32:a7:73:bd:
ef:1d:f0:df:f3:0d:9a:f8:f7:ef:37:83:4f:fd:d2:04:7c:b6:
2a:66:4c:c4:4a:02:e9:c7:01:c8:da:95:62:04:b4:b7:c6:10:
a4:e5:c1:80:ab:75:e7:b7:d0:eb:6a:f9:d1:87:26:44:be:46:
36:6c:f2:c5:37:bc:30:58:c5:94:1a:4b:fb:9d:28:db:b3:9b:
8e:bf:b4:d0:fd:43:08:80:2a:80:6a:1e:f3:59:76:05:01:92:
7c:a3:37:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:03 2025 by rpki-client