Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/JDi96XtBmi1E-eUX4bd0z2rNMAQ.roa
File: JDi96XtBmi1E-eUX4bd0z2rNMAQ.roa (raw, json)
Hash identifier: g67c4gAiqig1Iyele/QFecJvszyajLNwbzJcH0zM3As=
Subject key identifier: 24:38:BD:E9:7B:41:9A:2D:44:F9:E5:17:E1:B7:74:CF:6A:CD:30:04
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01941F8C3D0794A07A4C1488EA802B00EBDB
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/JDi96XtBmi1E-eUX4bd0z2rNMAQ.roa
Signing time: Wed 01 Jan 2025 01:47:51 +0000
ROA not before: Wed 01 Jan 2025 01:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 103.76.130.0/24 maxlen: 24
185.173.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3d:07:94:a0:7a:4c:14:88:ea:80:2b:00:eb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2438bde97b419a2d44f9e517e1b774cf6acd3004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8d:82:a2:d5:ab:ab:bd:6e:ed:75:34:be:73:
8b:c7:34:44:ec:1c:2d:9a:be:2b:87:fc:30:03:43:
a7:32:d8:73:f9:7d:46:ba:f7:a8:82:64:f2:e3:fc:
1e:1b:27:60:51:86:d8:7e:c2:db:09:04:43:fa:de:
e7:57:98:0f:f4:9e:e6:43:19:85:4a:83:82:96:69:
1f:98:3e:4b:cf:97:ec:39:2b:48:35:b3:a5:b0:08:
8e:bf:71:2c:a7:f0:5d:1e:04:67:65:99:8e:15:35:
44:51:6b:8e:fb:94:07:78:9a:2f:1a:54:f1:35:54:
d8:4f:a7:c9:8d:8c:b0:5b:d4:cb:91:e5:4d:3b:9e:
37:33:c3:87:bc:0b:e9:ef:4c:fc:a3:45:13:61:7e:
4e:06:23:4e:bc:3e:27:3c:d6:14:96:48:3a:be:e6:
3c:11:f5:43:6c:b1:55:df:33:54:3f:42:5a:bd:a8:
9d:01:36:18:7a:09:0a:f4:fe:59:96:f8:1a:41:e7:
94:b3:31:09:e5:71:29:ee:97:49:d2:e2:51:9b:c8:
8f:9b:24:b7:d6:3d:a8:bc:e3:b5:b0:93:15:d2:8e:
cf:90:24:a1:ee:d8:56:bb:94:d6:98:1e:d4:ef:cf:
97:53:3c:ef:d8:fe:ae:da:60:aa:9f:62:1d:d8:99:
23:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:38:BD:E9:7B:41:9A:2D:44:F9:E5:17:E1:B7:74:CF:6A:CD:30:04
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/JDi96XtBmi1E-eUX4bd0z2rNMAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.130.0/24
185.173.146.0/24
Signature Algorithm: sha256WithRSAEncryption
57:de:dc:a4:c6:c0:43:34:db:7d:91:c8:ff:4a:ac:84:31:82:
1d:5d:6a:32:9a:76:97:03:1a:b4:93:98:46:99:b1:da:6c:ec:
ae:26:34:60:36:94:0f:c6:6f:53:85:ed:ea:c2:10:94:a1:76:
88:5c:e1:48:32:47:2f:7a:18:e8:53:d7:73:1b:30:c4:ec:da:
8b:1c:a7:de:c9:7f:c5:48:9f:7a:b6:65:eb:51:5b:2f:02:69:
c7:46:04:76:96:fd:0d:fe:7f:59:ff:39:26:82:49:f5:f3:60:
74:1d:d9:e4:68:9b:e0:bb:0c:dc:71:25:92:49:ee:ab:30:c4:
13:6d:d9:23:6c:11:91:1b:c8:65:98:0e:65:b0:01:9c:c2:48:
b8:2b:74:b8:09:29:12:01:e5:c9:11:17:07:a3:91:b9:91:a7:
30:98:b1:00:75:85:93:c4:47:ad:83:cf:42:dc:b9:e5:0d:fd:
f5:03:d0:26:5c:ed:04:06:40:8d:26:f5:75:ea:ab:18:1f:1d:
d4:76:d8:16:b0:d8:ea:fa:10:4d:ef:9c:62:94:b9:7f:bf:47:
16:7f:65:05:fc:70:e6:b4:2f:bc:4c:35:45:48:73:79:d5:ba:
d9:1d:2c:a3:54:52:bc:9c:bc:9c:68:cb:65:7d:8c:2f:a3:4e:
02:1d:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:37:01 2025 by rpki-client