Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/DPP-uQk9zA4ykuKLXawsloR5v1c.roa
File: DPP-uQk9zA4ykuKLXawsloR5v1c.roa (raw, json)
Hash identifier: I3bc6LcNZSrUPmKQ/TR31qeSPseemntBr30IxjMfntI=
Subject key identifier: 0C:F3:FE:B9:09:3D:CC:0E:32:92:E2:8B:5D:AC:2C:96:84:79:BF:57
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01941FFA4126C6D5361C8BD690FD6A0C254A
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/DPP-uQk9zA4ykuKLXawsloR5v1c.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 45.251.60.0/22 maxlen: 22
103.49.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:41:26:c6:d5:36:1c:8b:d6:90:fd:6a:0c:25:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cf3feb9093dcc0e3292e28b5dac2c968479bf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:84:0e:05:54:17:cc:3d:a1:3c:e2:15:14:
4d:e4:3e:18:6d:71:29:56:56:df:6d:99:80:9f:32:
ba:3a:7b:55:f7:07:c8:99:da:c7:e5:3a:7e:18:a4:
e1:d9:24:6f:c8:d1:4c:dc:8f:a4:dc:40:9c:d8:2b:
ff:11:e5:22:96:ff:1a:6e:eb:8e:f8:dd:67:39:e2:
8b:48:27:be:66:5b:79:01:50:bc:e1:5b:68:5a:dc:
27:34:e0:31:80:36:98:5d:e3:7c:ea:b8:68:99:7d:
07:5d:14:80:23:c4:52:79:00:6c:5a:d8:a9:e1:cb:
45:d4:9c:d7:d7:d8:55:ef:4f:8c:b1:96:6d:bb:00:
7d:46:5d:e4:c4:c4:45:2c:ec:e7:bd:64:4b:5d:4c:
71:35:05:ac:01:55:b9:65:50:e5:08:16:a4:12:30:
da:b3:05:63:a2:f4:de:e2:8a:75:4b:58:bb:3a:b7:
00:72:30:2a:cd:32:e2:c4:9f:8d:b3:a3:f0:c5:cf:
2e:59:4c:13:10:50:bd:73:39:29:68:b3:19:4e:89:
5d:c9:f8:cc:2e:f5:a6:42:bd:52:e8:9f:c1:6d:33:
8e:ff:aa:21:88:04:91:1d:17:19:f1:2f:7f:3f:d8:
ec:03:cc:2b:17:c0:3e:0d:f5:52:38:a2:db:97:c5:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F3:FE:B9:09:3D:CC:0E:32:92:E2:8B:5D:AC:2C:96:84:79:BF:57
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/DPP-uQk9zA4ykuKLXawsloR5v1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.60.0/22
103.49.84.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:bf:b4:6a:21:b7:89:ef:ce:e3:71:32:96:2c:a8:a0:2b:df:
ee:88:50:98:2c:7d:62:e4:62:c1:f1:0a:ac:ad:2d:f6:40:70:
3f:59:8d:b6:42:7a:dd:3b:71:92:c9:5a:db:6f:6d:de:6d:e9:
e9:10:9c:d4:9d:ed:75:38:27:d5:57:77:4a:50:ec:86:99:4a:
b2:a9:4f:96:24:d6:f2:6f:79:ff:6c:b2:1c:9f:0f:5a:9b:c2:
a9:9d:81:34:a7:d9:66:8c:6b:3c:74:5f:85:59:5d:60:a6:90:
b1:fd:03:bb:55:8b:a9:c6:f8:9e:62:25:98:9f:48:6c:99:b4:
2c:4e:48:a6:4c:62:05:08:61:39:77:ae:18:ca:04:f2:49:00:
15:cf:16:d2:df:12:02:59:03:99:a7:65:ae:62:23:9a:1f:c7:
fc:6f:2b:5c:23:00:69:06:20:9b:d8:21:13:66:26:02:ec:73:
bd:f1:b9:17:d4:2b:ab:84:1f:9f:e4:bd:7c:e7:51:f8:2f:b0:
4c:c9:0b:d1:a4:e4:e4:ef:4f:a2:e4:03:f8:4c:22:26:82:8f:
90:53:bc:de:b5:3e:f5:00:9c:17:e2:67:62:25:ea:11:e3:f7:
99:68:d4:c1:1a:15:08:22:bc:ba:e7:48:02:d5:24:48:87:53:
88:2f:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:21:38 2025 by rpki-client