Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/fYtRnjgkdcOcs2OTSoOyF7XeMYQ.roa
File: fYtRnjgkdcOcs2OTSoOyF7XeMYQ.roa (raw, json)
Hash identifier: BGM9RaFK/cZe9M2jNupJdVSdkow5uJUKCy6zw6S9pgQ=
Subject key identifier: 7D:8B:51:9E:38:24:75:C3:9C:B3:63:93:4A:83:B2:17:B5:DE:31:84
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 019420686A09041E22229075E4F791008B3E
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/fYtRnjgkdcOcs2OTSoOyF7XeMYQ.roa
Signing time: Wed 01 Jan 2025 05:48:21 +0000
ROA not before: Wed 01 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56110
IP address blocks: 103.118.16.0/24 maxlen: 24
103.118.17.0/24 maxlen: 24
103.138.188.0/24 maxlen: 24
103.138.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6a:09:04:1e:22:22:90:75:e4:f7:91:00:8b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jan 1 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d8b519e382475c39cb363934a83b217b5de3184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b2:bb:b4:8c:45:ac:f3:1f:bd:ff:fe:30:18:
db:78:7c:76:ab:e6:bf:36:a7:dc:0f:12:42:af:f4:
22:15:b5:55:93:9c:7d:80:e5:fc:e6:62:4a:4d:65:
62:f0:36:63:33:fb:02:cf:ad:a1:08:bb:a8:3c:05:
ff:6d:c7:e7:ef:2d:85:1d:f3:92:4f:84:5a:36:bf:
c2:39:62:af:b7:b8:24:e8:f7:8f:81:d3:ae:6d:7c:
e4:16:97:4a:0e:7e:4e:26:ac:05:80:9e:08:52:1a:
54:a1:d3:12:61:b3:c7:27:84:2a:65:87:1a:5a:4d:
bd:44:9e:04:32:a1:ad:7e:ce:11:e5:4c:a1:95:92:
7c:36:76:93:1d:b6:6b:51:33:b7:8c:b3:f3:91:4e:
79:40:32:9e:16:f4:93:ca:65:43:7f:d5:42:3a:f1:
d1:e6:17:4a:29:51:21:88:98:ea:c0:da:f3:c5:c8:
33:9b:2b:19:45:cd:39:be:12:3b:a5:d2:48:87:50:
b2:ca:70:c0:5d:a4:12:0a:84:35:81:ee:8c:15:8e:
29:63:41:b3:87:be:33:b5:f5:7d:a9:3e:4a:ec:bf:
10:27:31:96:52:25:ed:e7:e8:ef:5d:e6:2e:80:d8:
da:1d:02:66:c0:2f:a8:48:9b:c1:ee:22:42:9c:b5:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8B:51:9E:38:24:75:C3:9C:B3:63:93:4A:83:B2:17:B5:DE:31:84
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/fYtRnjgkdcOcs2OTSoOyF7XeMYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.16.0/23
103.138.188.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:46:5b:3a:90:db:07:29:98:5d:7f:a8:30:f6:1a:fc:74:5a:
06:f4:6f:f0:75:df:17:ab:0d:c8:cc:0c:47:a6:d2:d5:fb:0f:
86:0e:51:4a:73:6e:7f:58:22:bf:87:7b:ed:de:65:22:ca:ad:
de:96:35:f4:8c:85:0d:b5:a7:f3:67:66:7f:64:8f:ee:a0:6b:
67:c8:19:10:55:5a:4d:c9:88:18:4c:ab:55:73:35:7c:ee:a2:
4b:96:8f:f0:b9:f9:d8:ff:e0:c1:f4:04:aa:c5:9f:ac:58:5d:
f2:f7:6c:86:73:60:f8:ea:1e:44:71:e2:23:33:90:9b:87:15:
a6:9e:2e:d9:44:60:be:b2:8b:14:8c:a9:80:6b:bf:0e:0d:6c:
8c:01:a9:25:64:18:b7:29:4c:0b:c6:6f:f8:de:9d:4a:1d:ea:
0f:a6:c1:95:bf:c1:46:cd:38:67:e4:62:e2:bf:7c:9f:3f:7d:
e5:0f:60:4d:20:24:81:d9:dc:9b:50:ac:d1:c8:3f:6f:06:f9:
e2:7b:46:16:15:4f:b5:f6:01:15:0f:2d:18:a5:ad:cb:c8:e6:
e3:e1:61:54:1c:75:4c:3b:0b:73:83:7b:60:6d:78:97:77:4d:
db:fe:53:3b:5b:c0:8a:dc:bf:34:48:73:36:ce:af:bc:ca:18:
df:0e:77:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:03:41 2025 by rpki-client