Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/tUTtPsX5JdJQWAVssn4gEx4v-OM.roa
File: tUTtPsX5JdJQWAVssn4gEx4v-OM.roa (raw, json)
Hash identifier: P0k3q1dajY5Q82fW7K5gfhlfaB5nTB1ZH+HYDDz8xX4=
Subject key identifier: B5:44:ED:3E:C5:F9:25:D2:50:58:05:6C:B2:7E:20:13:1E:2F:F8:E3
Certificate issuer: /CN=0abeafd556595e8840ca8ebd19bbd2ac591b4ca8
Certificate serial: 0185707078F78FE9EA2094D2F01CF265DD66
Authority key identifier: 0A:BE:AF:D5:56:59:5E:88:40:CA:8E:BD:19:BB:D2:AC:59:1B:4C:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cr6v1VZZXohAyo69GbvSrFkbTKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/tUTtPsX5JdJQWAVssn4gEx4v-OM.roa
Signing time: Mon 02 Jan 2023 03:04:57 +0000
ROA not before: Mon 02 Jan 2023 03:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 103.39.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:78:f7:8f:e9:ea:20:94:d2:f0:1c:f2:65:dd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abeafd556595e8840ca8ebd19bbd2ac591b4ca8
Validity
Not Before: Jan 2 03:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b544ed3ec5f925d25058056cb27e20131e2ff8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:f8:3e:b3:d5:51:8e:64:5d:fc:c0:7e:9c:
6b:3a:f9:0b:4d:64:43:a8:fe:c5:01:99:ad:1b:1f:
1c:f9:15:e8:84:a4:04:91:18:d3:70:5a:c0:93:5a:
54:fd:e0:90:75:8e:fa:c9:ae:30:6a:4c:cd:9f:a0:
46:17:7a:f2:28:8e:30:aa:cf:8c:94:1a:98:97:f3:
8d:fa:ad:1e:25:fc:67:0c:42:9a:a4:df:80:55:16:
dd:00:fa:95:83:3f:d9:ac:e9:36:35:19:5d:db:16:
03:15:ce:49:33:14:b1:ae:9f:a0:1f:b4:72:36:ab:
cc:bd:cf:19:75:6a:f8:ef:eb:08:43:5f:44:22:8c:
c7:02:65:45:63:02:1a:12:70:51:c4:cd:4a:f1:d1:
88:d6:83:be:f0:8e:6f:8e:a6:81:94:99:4b:83:a5:
6b:c5:f9:9d:d1:28:9b:83:0d:2b:2d:6a:00:8d:f4:
10:63:ad:e7:30:88:9e:43:ca:04:9a:48:a1:f7:6f:
bb:2a:ac:58:3d:8a:c0:8b:0d:b1:7b:4a:64:0e:67:
53:d0:85:fb:9f:0f:a1:b0:d2:e1:33:c9:f1:34:ce:
3c:e2:85:a8:27:5e:67:3e:dd:f2:4f:0d:b8:7f:f9:
48:cd:9d:90:06:91:58:cb:ed:8c:e0:2d:9f:b5:ad:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:44:ED:3E:C5:F9:25:D2:50:58:05:6C:B2:7E:20:13:1E:2F:F8:E3
X509v3 Authority Key Identifier:
keyid:0A:BE:AF:D5:56:59:5E:88:40:CA:8E:BD:19:BB:D2:AC:59:1B:4C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cr6v1VZZXohAyo69GbvSrFkbTKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/tUTtPsX5JdJQWAVssn4gEx4v-OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/921536-ee46-4e80-a51f-b667ec0d6d0f/1/Cr6v1VZZXohAyo69GbvSrFkbTKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.39.40.0/24
Signature Algorithm: sha256WithRSAEncryption
40:e0:82:04:f0:98:4e:0d:9d:4b:f6:a8:d7:87:eb:2d:8d:49:
c1:3d:de:39:7f:55:aa:37:f0:7e:4a:2a:4e:4d:8a:f8:c2:68:
ce:3e:5f:dd:24:9d:89:e5:78:fe:c0:15:d6:35:e4:43:77:7d:
a3:0d:ff:61:82:13:4e:f8:0f:69:20:a3:98:68:0c:3a:52:24:
3f:e8:92:50:0e:7f:e0:4c:9e:80:c1:6b:13:ca:32:1c:c6:d0:
4a:60:19:b2:b2:3d:cd:1d:a6:f3:0c:bd:6f:45:9b:89:36:b9:
ad:46:d0:95:0a:4b:a6:ba:de:a3:5d:c6:76:17:80:ea:19:d9:
fe:3b:9b:d7:13:a4:80:37:7a:6d:af:4e:27:d4:92:5b:8a:8e:
72:ad:04:47:e9:f7:50:fb:5e:92:03:86:29:04:34:e6:d6:7d:
05:18:20:3f:b4:5e:26:bd:b8:a9:02:2e:79:fb:f2:ea:d9:6c:
54:01:cc:10:51:6f:66:89:96:cd:25:6c:92:b1:a5:0a:2f:92:
6c:36:72:ca:2e:4c:d8:8e:e3:0d:c5:38:bd:1a:e1:be:b4:75:
db:df:d3:3d:bc:06:48:3c:e1:d1:11:e1:be:f1:d6:89:8e:01:
be:53:47:14:17:75:35:cb:72:cb:92:f9:8b:04:92:21:69:0c:
cd:7f:3f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:38 2025 by rpki-client