Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/cJ5TDgfH_xk0ahokTNlv7EYdOTA.roa
File: cJ5TDgfH_xk0ahokTNlv7EYdOTA.roa (raw, json)
Hash identifier: s1puOAMsS7Je7hdhCgv2/ytoYeU9rstzLYKCy4SNXps=
Subject key identifier: 70:9E:53:0E:07:C7:FF:19:34:6A:1A:24:4C:D9:6F:EC:46:1D:39:30
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019421442BDEB4736041A7B60AD146F0A728
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/cJ5TDgfH_xk0ahokTNlv7EYdOTA.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136359
IP address blocks: 103.69.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2b:de:b4:73:60:41:a7:b6:0a:d1:46:f0:a7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=709e530e07c7ff19346a1a244cd96fec461d3930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:8c:de:9a:e7:0a:f4:d8:0d:37:33:8c:bf:
4a:af:00:c1:5d:4f:ec:ec:d3:e8:b3:6f:ae:59:58:
09:9c:8e:37:bb:13:1d:dc:e0:a9:59:56:45:aa:19:
86:ea:b7:6c:08:0b:52:7f:5a:ab:68:d8:9e:3f:2f:
70:18:e5:17:4f:31:dc:6e:21:2c:81:a8:3d:a8:ef:
46:07:c4:d3:3f:a6:3d:4c:da:31:7e:4e:bb:ce:9f:
62:ad:3a:1a:28:78:ee:f4:e9:e1:b4:54:83:93:1c:
5c:79:f1:89:80:52:f9:c8:dd:c8:d6:01:43:89:6b:
c2:b5:93:f5:76:5b:e1:fc:c7:d1:49:4f:da:4b:75:
d4:0b:b9:95:70:f5:16:d5:c0:3d:a6:eb:df:7b:9a:
2e:29:c6:32:a7:23:af:f0:8f:00:e3:31:8f:e8:f3:
4f:01:6a:9d:70:90:a8:b4:b2:64:5a:60:27:7e:8c:
1b:93:c7:be:02:68:44:2f:a3:eb:d0:34:c4:d9:81:
79:50:79:52:ae:a7:1d:ef:9a:45:60:03:c4:be:b5:
59:09:b0:f0:26:50:c1:59:c4:d8:4b:a3:b1:3f:8f:
08:b0:f1:f3:e2:4c:2d:ab:28:3d:8f:81:fc:10:3e:
13:24:99:5a:42:cf:b9:59:9d:81:ec:37:84:02:8c:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9E:53:0E:07:C7:FF:19:34:6A:1A:24:4C:D9:6F:EC:46:1D:39:30
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/cJ5TDgfH_xk0ahokTNlv7EYdOTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.226.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3d:34:f9:da:40:ee:07:f4:dc:e5:6a:0b:64:2d:b4:e8:b2:
25:4a:a6:74:07:28:37:02:be:48:b3:99:05:44:45:9d:b2:fb:
cf:1d:46:c0:11:5c:74:63:f3:df:6c:e9:ec:4b:b3:6c:a2:c4:
e3:10:ca:39:c9:14:34:6a:44:4a:99:a5:85:10:b0:54:ef:68:
68:63:6d:5d:1d:ed:cb:2a:64:df:7e:1a:2d:47:8c:b9:a2:30:
27:61:1c:9e:c3:22:3e:13:7e:bf:b2:33:da:95:8c:77:8c:9c:
4a:9c:45:3a:21:0d:45:de:9f:22:d9:c1:58:08:a1:ac:d5:33:
03:60:7d:50:87:8f:60:83:11:6f:77:95:ce:4c:55:48:32:5a:
8e:39:1a:fd:24:7b:4d:cf:a7:11:33:be:26:f2:6b:b1:61:59:
d5:3d:7e:3b:40:fb:6b:49:75:bd:b2:98:73:75:7a:a9:32:fe:
2f:24:a2:1f:9a:50:c9:92:77:05:93:57:18:f7:1e:10:04:4f:
ff:e3:1c:2b:b3:3c:44:28:a4:96:fe:98:91:fc:12:46:b6:df:
9e:fe:bd:e0:d5:b2:a7:95:f7:7e:7f:d5:51:94:19:d6:dd:39:
95:38:7c:21:e7:57:a7:a3:b3:c1:74:dc:49:0c:3c:1b:c9:82:
02:fd:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:34:30 2025 by rpki-client