Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8V1ryzk7LfNRSiFKp_7toQJ8huM.roa
File: 8V1ryzk7LfNRSiFKp_7toQJ8huM.roa (raw, json)
Hash identifier: joPe9uWB9UCnoIbEth1HHghcYtVJJ07pHsyNYeVnqPw=
Subject key identifier: F1:5D:6B:CB:39:3B:2D:F3:51:4A:21:4A:A7:FE:ED:A1:02:7C:86:E3
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01956477132A4FEFADF2F90CBF49B94745A1
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8V1ryzk7LfNRSiFKp_7toQJ8huM.roa
Signing time: Wed 05 Mar 2025 04:01:20 +0000
ROA not before: Wed 05 Mar 2025 04:01:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134492
IP address blocks: 103.146.101.0/24 maxlen: 24
103.148.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:64:77:13:2a:4f:ef:ad:f2:f9:0c:bf:49:b9:47:45:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Mar 5 04:01:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f15d6bcb393b2df3514a214aa7feeda1027c86e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6a:58:ba:85:3b:92:82:8d:bb:0a:a4:97:90:
c0:dc:04:a9:df:2b:00:fa:a7:eb:b2:b6:ff:5e:d1:
8f:92:57:d4:d4:27:7b:19:41:c5:81:54:f0:e6:ac:
e4:f9:1a:1f:50:b7:f9:3f:91:63:36:6e:58:ac:31:
03:6b:fc:df:d3:c0:d0:57:5a:3c:f8:5b:87:94:a3:
af:0b:91:06:98:eb:60:21:e9:8e:28:fc:71:7f:c3:
bc:31:4e:53:a5:3d:4e:72:ef:52:1b:84:cb:f8:1b:
1d:20:59:88:96:0c:f2:6d:5b:66:8a:67:20:ee:1b:
aa:9f:ea:38:42:ab:4d:5e:7b:9a:c3:1b:0a:e6:83:
e1:74:c2:06:ea:ab:38:5e:a6:dd:72:b3:62:b0:41:
c2:d1:54:0c:ea:53:c5:4e:02:00:67:14:1a:a2:a4:
f2:f6:79:f2:15:fb:e7:b8:5e:da:2d:1d:bd:06:48:
bf:8d:7c:76:1f:2e:5c:c8:cf:bf:ee:cf:e6:86:f7:
7b:05:80:1e:ca:52:dc:e8:fc:bb:c6:cc:a7:2d:06:
c1:f7:87:95:d7:8d:c8:78:e9:95:8e:73:fa:0d:57:
21:40:21:f1:e0:a7:5d:9e:f0:e6:dd:47:6e:7d:42:
87:f5:6c:88:c1:56:8a:76:d9:46:bb:76:b9:08:76:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5D:6B:CB:39:3B:2D:F3:51:4A:21:4A:A7:FE:ED:A1:02:7C:86:E3
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8V1ryzk7LfNRSiFKp_7toQJ8huM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.101.0/24
103.148.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:3e:76:5a:ca:2f:3c:9c:77:e7:ca:e4:df:c9:de:82:a1:06:
5d:a2:a6:0a:6a:a4:4d:79:66:c5:3b:5c:cb:4c:7e:c6:c1:ed:
29:92:34:a2:40:fa:fa:08:7e:36:b2:15:3c:cf:0f:02:fc:b4:
63:24:18:80:99:9d:cf:63:99:b8:8f:4c:a5:e3:54:c5:4a:39:
e2:da:13:02:b4:e1:85:e6:dd:32:39:45:7a:85:71:64:6e:5f:
0b:96:e2:6f:62:be:25:fb:e6:9f:91:4b:e0:b1:e0:d6:c1:68:
66:04:13:5e:b8:c8:5b:78:90:e0:cc:e7:70:bf:be:e7:6f:20:
8f:41:f4:82:fb:a8:ef:77:c0:ed:0e:1e:ad:c8:1d:f1:b4:0d:
23:4b:a3:bc:56:57:e5:5a:f2:05:9a:e4:fc:2b:f3:d4:66:62:
29:fc:b0:fd:6b:51:02:2a:30:b6:de:5f:ce:87:00:22:e9:83:
9d:c7:8a:0a:eb:9a:19:f2:91:22:50:8c:c4:b0:9c:8d:48:90:
94:71:84:56:c5:9c:a3:c2:9a:49:a2:c1:b3:1d:23:af:70:7b:
8a:ca:d0:a3:92:f3:4a:56:8a:61:39:af:a6:9d:72:44:2f:4a:
98:b2:8f:92:d1:d4:5c:3a:12:35:cb:93:9f:85:24:ff:b3:4e:
bb:da:c9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:33:30 2025 by rpki-client