Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa
File: J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa (raw, json)
Hash identifier: i0rnl2YK8VurUbtxqh46jYu42vj9ovnjrsY7s0Ha76E=
Subject key identifier: 27:96:A3:31:D0:AC:2B:FC:73:7D:B8:56:C6:80:15:DA:24:4C:72:A7
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 01953C08C5E984684F040B23E2D1B4F05146
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa
Signing time: Tue 25 Feb 2025 07:36:02 +0000
ROA not before: Tue 25 Feb 2025 07:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 103.108.88.0/23 maxlen: 23
103.137.162.0/23 maxlen: 23
195.64.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:08:c5:e9:84:68:4f:04:0b:23:e2:d1:b4:f0:51:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Feb 25 07:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2796a331d0ac2bfc737db856c68015da244c72a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7d:7c:08:6d:ec:08:b6:f3:8f:8b:2f:52:e7:
8c:c8:42:2a:39:36:71:6b:13:3c:2c:77:3b:8f:44:
7c:54:fb:d9:13:73:e5:cc:46:38:f2:29:43:ce:8a:
fc:f8:87:27:3a:d4:fc:1e:ba:a6:6d:a9:70:f2:d5:
29:e7:ae:6a:fd:59:cb:8c:5d:9d:73:bd:8f:f4:dd:
28:2d:3c:10:6b:e7:e4:32:2d:e2:65:63:2d:a5:7d:
3e:fd:91:69:d4:e0:85:12:3c:bc:b7:6b:7e:f5:05:
ca:a8:4d:e9:1c:b2:18:61:92:bb:73:ea:38:cc:e1:
7c:1f:d1:4b:89:fd:29:1f:74:ad:11:3f:6a:42:c4:
17:4c:f5:dd:cd:86:08:88:b3:e1:0d:8e:a8:89:6f:
9e:42:30:61:4e:a8:91:dd:4e:9d:5c:c3:95:b5:96:
7c:48:70:c8:7e:17:44:38:24:4f:36:1f:b5:7e:7f:
41:09:5d:fc:4d:40:11:2b:fd:81:72:09:af:bd:04:
c6:f8:b2:46:df:e6:3a:05:5f:ae:7d:d9:8d:39:0e:
51:3f:8c:9e:f6:3c:43:94:63:19:19:b9:6a:06:f2:
23:e6:17:d2:7b:c0:a7:85:45:62:83:85:de:ae:64:
80:38:3a:a5:3b:13:ec:d0:3f:a6:3f:b8:d9:9f:62:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:96:A3:31:D0:AC:2B:FC:73:7D:B8:56:C6:80:15:DA:24:4C:72:A7
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.108.88.0/23
103.137.162.0/23
195.64.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bf:8b:54:60:ec:5f:58:de:cb:3c:9b:cd:fc:e7:37:96:e2:
c4:4d:7c:2e:e0:71:80:20:d8:9e:f2:2b:bc:be:38:31:6e:e3:
7a:0a:9d:31:b7:b0:c0:6c:65:5d:8c:f9:50:e3:dd:ed:51:89:
2f:fa:a2:8b:9e:8d:a9:51:52:db:55:6e:bd:ef:60:0f:4d:82:
b3:5d:be:cd:37:80:59:ab:14:f6:71:6a:dd:dc:b0:c9:f6:87:
4f:88:4e:56:20:b1:8b:16:40:d9:73:d4:35:6e:fb:66:44:fc:
70:6f:bf:76:34:55:79:1a:d7:48:d8:74:a6:90:90:22:6a:cb:
93:bf:fc:27:fb:c6:8b:50:56:61:43:6e:68:6d:39:5f:15:ac:
97:f1:1b:b7:83:b3:56:42:1a:f6:f9:24:11:2b:3e:09:c2:2a:
ae:0f:01:e6:9d:9c:a5:af:df:13:75:6f:a1:69:12:d2:ae:25:
47:f1:2d:8c:ac:d7:05:ba:7c:b2:92:18:df:5d:8c:43:b8:33:
45:ed:c8:01:9d:55:d6:67:b9:bd:17:65:2c:65:d7:20:53:06:
57:be:e4:ad:ff:4b:07:95:8c:01:76:d6:a8:62:ef:03:53:13:
0a:7f:90:ab:4a:0b:99:f2:aa:e9:61:9d:37:da:f5:86:bd:34:
96:4c:98:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:13:44 2025 by rpki-client