Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/pGU5UKEKhNy1b4KncD8WLNWuUcw.roa
File: pGU5UKEKhNy1b4KncD8WLNWuUcw.roa (raw, json)
Hash identifier: cQtvqg9EUQtRPCXc/YqNiBHGHJCTmKd55mfk8XR+4Jk=
Subject key identifier: A4:65:39:50:A1:0A:84:DC:B5:6F:82:A7:70:3F:16:2C:D5:AE:51:CC
Certificate issuer: /CN=0abeafd556595e8840ca8ebd19bbd2ac591b4ca8
Certificate serial: 0182A6B1EED8026E99F1B89CB43F95BC26C4
Authority key identifier: 0A:BE:AF:D5:56:59:5E:88:40:CA:8E:BD:19:BB:D2:AC:59:1B:4C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr6v1VZZXohAyo69GbvSrFkbTKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/pGU5UKEKhNy1b4KncD8WLNWuUcw.roa
Signing time: Tue 16 Aug 2022 12:47:34 +0000
ROA not before: Tue 16 Aug 2022 12:47:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 103.39.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:b1:ee:d8:02:6e:99:f1:b8:9c:b4:3f:95:bc:26:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abeafd556595e8840ca8ebd19bbd2ac591b4ca8
Validity
Not Before: Aug 16 12:47:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4653950a10a84dcb56f82a7703f162cd5ae51cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:24:78:e6:7e:7e:08:46:b3:58:ce:61:9b:47:
bc:af:e5:41:d7:a7:85:d4:28:a4:a6:59:9c:40:49:
93:f7:bd:91:88:76:48:70:40:b2:be:8a:ce:b6:a8:
bb:b1:d4:c6:a3:51:58:5a:9d:62:e9:4e:c8:5c:98:
db:a8:74:e4:ab:2a:91:e7:27:8a:d5:f4:22:a8:3d:
cf:5f:70:bc:3b:3d:26:d5:30:89:b0:d9:e3:59:5e:
52:b1:c8:fa:f3:11:24:fe:1e:28:a0:db:78:59:5f:
94:e3:6c:b7:a8:9b:0a:5c:76:b6:c4:14:eb:f0:b0:
d9:40:3e:45:c3:df:f4:0f:32:f5:ff:25:e8:11:36:
76:67:42:2d:4c:ab:7f:6d:82:01:ba:65:39:2a:5b:
b0:27:af:fe:c0:22:ce:cd:af:89:e5:33:c4:b7:b3:
d4:21:ad:e2:ba:14:4a:ab:54:94:8e:ce:5a:9c:d2:
25:74:21:26:41:3e:87:92:cd:79:5e:c1:e2:6d:06:
48:f1:96:47:07:36:df:70:de:bd:2c:e4:51:3a:a6:
41:86:84:21:8d:de:fa:49:96:60:71:fb:ce:15:c8:
1e:a1:6b:a7:1d:ea:09:41:29:f0:06:0a:25:cc:eb:
1a:68:bf:ba:4d:07:a7:a6:5b:e2:d0:68:be:56:e7:
d1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:65:39:50:A1:0A:84:DC:B5:6F:82:A7:70:3F:16:2C:D5:AE:51:CC
X509v3 Authority Key Identifier:
keyid:0A:BE:AF:D5:56:59:5E:88:40:CA:8E:BD:19:BB:D2:AC:59:1B:4C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr6v1VZZXohAyo69GbvSrFkbTKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/pGU5UKEKhNy1b4KncD8WLNWuUcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/Cr6v1VZZXohAyo69GbvSrFkbTKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.40.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ae:66:0d:b9:18:d4:f4:7d:d4:3a:8b:ff:15:d6:c6:2e:83:
45:99:60:a3:7b:94:8e:0c:8e:3d:48:cc:9d:f5:48:93:42:96:
71:fd:3f:12:5f:36:66:5d:1d:2f:20:e0:60:46:59:24:10:27:
4a:2a:3d:e3:34:c0:e2:2b:0d:b7:82:ee:e2:87:2a:13:f7:9f:
0a:a5:ae:50:0c:63:79:5d:1e:09:cb:75:bd:e9:19:29:9e:e9:
33:95:54:ad:78:57:9b:dc:92:46:55:51:80:fd:70:82:7d:f3:
9a:b6:47:51:65:22:7d:fa:fb:6d:8c:cf:c1:65:30:57:fa:a0:
bf:e8:95:fd:78:75:91:89:46:c3:06:44:bf:3c:9a:e5:17:b1:
93:c8:d4:73:53:36:4f:60:74:07:ad:39:bc:d7:93:19:da:55:
b2:ee:08:06:16:9f:db:53:7b:ec:b8:8a:60:ac:e3:41:ab:06:
3b:29:d4:c0:e3:dc:d1:bf:63:5d:11:28:06:cf:02:e9:f4:5a:
e4:ec:5c:e2:cd:5d:39:f5:12:2e:ed:eb:9c:54:31:19:3d:23:
64:bc:db:8e:38:42:c0:3a:e6:a0:c8:4a:9b:82:c1:73:6f:b8:
0c:e1:d2:7f:42:c1:18:bc:7f:2f:94:bc:12:b0:e8:d5:ad:d8:
98:80:bf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:15 2025 by rpki-client