Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/u19W84miic1ThTG4VeFlXZAFFas.roa
File: u19W84miic1ThTG4VeFlXZAFFas.roa (raw, json)
Hash identifier: 27jIZre/g2omnr1SJbYdxwNUgj689gf7Zet3AGuNc3Q=
Subject key identifier: BB:5F:56:F3:89:A2:89:CD:53:85:31:B8:55:E1:65:5D:90:05:15:AB
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC8654B02B45A7A82F91AB99076EAA
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/u19W84miic1ThTG4VeFlXZAFFas.roa
Signing time: Thu 02 Jan 2025 07:48:13 +0000
ROA not before: Thu 02 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216415
IP address blocks: 103.25.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:86:54:b0:2b:45:a7:a8:2f:91:ab:99:07:6e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb5f56f389a289cd538531b855e1655d900515ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:52:05:a2:b0:62:63:2b:8a:d2:fc:a1:9d:
10:03:4b:9f:da:ef:32:03:8d:0c:dc:71:b7:4d:f2:
47:d4:b4:cc:cb:39:51:28:f4:9d:76:df:99:8c:81:
30:7f:3a:99:ca:43:f5:79:ce:3a:d8:b7:90:81:31:
50:37:43:27:71:15:e1:7c:7f:8d:e3:cb:c7:dd:dd:
b2:dd:e2:5d:9e:94:c7:09:36:2c:46:37:de:50:07:
28:d2:79:5f:9e:11:a1:a4:1d:9a:49:c8:92:be:dd:
0f:31:7f:65:62:09:23:a2:f9:58:14:05:32:57:48:
77:5f:7a:1a:5a:2a:b2:f1:6e:c0:81:88:f5:15:07:
c6:98:84:ec:14:c6:71:20:4b:d5:98:e3:30:cf:9f:
ba:ba:86:ca:78:89:34:08:de:75:52:e5:b5:78:c2:
e8:b6:0b:8e:7c:d8:97:58:a8:e0:20:68:94:a9:d4:
f5:7c:49:6d:8a:34:4f:8d:b3:11:66:5b:39:7c:c9:
d7:2a:75:8c:47:a5:1f:f0:8c:d9:18:c1:a6:1a:72:
3a:2d:1b:b7:d4:ab:24:b9:b5:3a:15:95:ec:90:94:
b5:79:67:4e:d3:e1:36:79:32:3a:60:48:32:ea:ef:
4c:4e:96:9e:c1:7e:68:3d:7b:ac:7a:02:d6:11:45:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5F:56:F3:89:A2:89:CD:53:85:31:B8:55:E1:65:5D:90:05:15:AB
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/u19W84miic1ThTG4VeFlXZAFFas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.85.0/24
Signature Algorithm: sha256WithRSAEncryption
73:12:d2:81:2e:eb:ca:ee:57:dc:fa:27:b2:ff:9e:3b:46:02:
42:96:22:d1:61:6b:c2:a6:7d:da:86:34:b7:82:e2:f7:2a:e0:
f6:41:7a:89:04:9e:fd:ae:62:fa:7e:c1:e0:4a:6d:61:5f:ea:
80:3c:03:2a:ba:fa:42:e1:e7:a7:6c:ca:e3:69:8f:b6:5a:49:
2d:b6:fa:80:8a:1f:ec:b7:ca:03:0e:df:d3:bb:40:82:9d:49:
a4:36:8a:c8:f5:63:5a:e2:7c:cb:c2:7c:df:b3:41:6a:5f:40:
0d:18:8d:85:07:82:37:a7:91:49:8e:30:3d:e5:a4:70:e3:3c:
bd:af:77:e5:7f:dc:8b:4d:d1:13:0a:b3:ef:bb:23:7d:5f:98:
42:d2:36:ea:0e:e1:65:3a:0e:69:a4:25:79:0f:63:6f:ee:6c:
7e:73:a1:b7:48:a6:91:82:fb:1d:10:28:49:57:7a:39:d7:50:
b8:27:8c:98:38:82:06:33:0d:33:13:08:11:3d:45:81:63:4f:
0c:29:e1:36:f1:6c:27:de:80:72:bc:54:c0:e9:96:1d:aa:cd:
79:8b:9f:2a:b0:37:2d:f5:01:31:47:e1:6e:77:08:94:d5:89:
21:cd:80:06:af:ca:f0:8d:b4:55:25:3b:84:38:60:e5:fd:62:
a4:da:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:35:15 2025 by rpki-client