Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/BZKRaoZKTTZtKAHPv3mh9_lLa8Y.roa
File: BZKRaoZKTTZtKAHPv3mh9_lLa8Y.roa (raw, json)
Hash identifier: Gfav3CffgwQe2V+19lMwmkWOQLG3nIwVFtDGwltKXdo=
Subject key identifier: 05:92:91:6A:86:4A:4D:36:6D:28:01:CF:BF:79:A1:F7:F9:4B:6B:C6
Certificate issuer: /CN=0abeafd556595e8840ca8ebd19bbd2ac591b4ca8
Certificate serial: 0182A6B1EF4AA82638C93CEA09C956287E67
Authority key identifier: 0A:BE:AF:D5:56:59:5E:88:40:CA:8E:BD:19:BB:D2:AC:59:1B:4C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr6v1VZZXohAyo69GbvSrFkbTKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/BZKRaoZKTTZtKAHPv3mh9_lLa8Y.roa
Signing time: Tue 16 Aug 2022 12:47:35 +0000
ROA not before: Tue 16 Aug 2022 12:47:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 103.39.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:b1:ef:4a:a8:26:38:c9:3c:ea:09:c9:56:28:7e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abeafd556595e8840ca8ebd19bbd2ac591b4ca8
Validity
Not Before: Aug 16 12:47:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0592916a864a4d366d2801cfbf79a1f7f94b6bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5b:f6:68:20:0b:8f:ea:4e:e5:f0:fc:05:8e:
ec:03:a8:9a:c5:3a:7c:7a:9b:1e:69:3b:07:fd:9f:
63:a0:11:bf:39:f6:45:f1:c5:4e:e1:a2:ae:e3:e4:
44:ec:c8:29:8a:20:4c:4e:f0:da:d6:97:10:98:8f:
21:3e:6b:de:07:bd:7f:9b:85:8f:17:48:7f:7e:45:
4d:ea:bc:e1:9c:06:df:ad:f6:5f:13:be:85:99:72:
22:70:e9:f0:b6:df:aa:b7:23:b7:57:71:b4:54:33:
18:55:ab:c4:b7:8a:32:53:18:86:8c:1c:2f:ac:5a:
e7:8e:b5:9f:f1:04:3d:7f:9b:e5:3e:b0:d3:cc:b5:
11:1e:97:62:4c:f0:66:13:75:93:39:5f:9e:5f:77:
16:ad:88:d5:66:9e:ec:02:b3:e6:d5:66:c3:08:d0:
95:d7:af:be:a8:c5:16:97:5c:73:1a:f6:0b:f3:91:
e1:fb:ec:5c:6d:5c:f9:be:cb:42:18:46:b9:c4:e6:
0b:94:ee:54:75:52:99:6e:0f:92:88:c0:76:f2:88:
a8:5e:59:d3:94:70:99:dc:9f:f2:a2:80:a7:e3:1d:
64:69:59:77:83:1f:c5:af:68:2d:7e:7c:50:3c:3f:
66:8d:ce:47:9e:2b:73:0b:40:ed:39:ad:96:3c:e9:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:92:91:6A:86:4A:4D:36:6D:28:01:CF:BF:79:A1:F7:F9:4B:6B:C6
X509v3 Authority Key Identifier:
keyid:0A:BE:AF:D5:56:59:5E:88:40:CA:8E:BD:19:BB:D2:AC:59:1B:4C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr6v1VZZXohAyo69GbvSrFkbTKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/BZKRaoZKTTZtKAHPv3mh9_lLa8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/Cr6v1VZZXohAyo69GbvSrFkbTKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.40.0/24
Signature Algorithm: sha256WithRSAEncryption
16:da:33:2b:40:34:92:96:11:cb:6a:86:a2:e2:63:2e:53:70:
96:5d:25:d6:4c:47:57:a7:84:7c:3e:35:84:09:e3:6e:24:a9:
fa:6b:c2:05:a3:10:e2:e5:3e:42:72:ca:85:26:20:e7:05:e3:
cd:93:4d:92:53:90:af:eb:ad:f1:be:ed:1a:41:21:c8:96:63:
e5:93:51:39:af:7f:51:b4:55:fc:9b:ba:77:31:cc:2a:a8:2c:
26:be:27:1c:22:58:70:5b:ae:39:64:71:be:91:2d:d3:45:46:
6f:11:a4:18:b3:e1:10:39:6b:33:87:d6:69:ba:44:e8:45:c1:
5c:63:b0:34:83:bd:c1:bf:c0:1e:d5:eb:71:ba:80:7a:1f:45:
fa:08:20:07:00:20:64:19:eb:2e:29:b3:62:e7:b3:8c:87:cb:
6f:6a:a4:bc:7c:98:ca:6c:7a:be:4d:14:bb:a2:84:8a:bb:7d:
29:91:0b:90:0d:f0:b7:92:7d:30:ca:92:8f:c9:d8:20:67:7f:
6d:fa:0c:71:48:a5:c8:10:de:a8:65:2d:a9:4c:80:e3:ad:42:
16:e1:db:4b:be:13:ca:9e:52:33:c6:67:a7:3c:5f:d0:8f:aa:
af:d0:e6:11:9a:75:e5:ac:65:97:21:76:2c:92:cd:a1:9d:12:
51:91:fd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:34 2025 by rpki-client