Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/kZxFYpfSWv4rNOwbJOGNGOvBwzk.roa
File: kZxFYpfSWv4rNOwbJOGNGOvBwzk.roa (raw, json)
Hash identifier: qM5t1wY4KYt6h/p4Wg8TRbZsLBgiRmT/PLqnvINXWcI=
Subject key identifier: 91:9C:45:62:97:D2:5A:FE:2B:34:EC:1B:24:E1:8D:18:EB:C1:C3:39
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 019102A3A554D9FC11B035C8042062E50FD2
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/kZxFYpfSWv4rNOwbJOGNGOvBwzk.roa
Signing time: Tue 30 Jul 2024 07:56:04 +0000
ROA not before: Tue 30 Jul 2024 07:56:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56110
IP address blocks: 103.138.188.0/24 maxlen: 24
103.138.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:02:a3:a5:54:d9:fc:11:b0:35:c8:04:20:62:e5:0f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Jul 30 07:56:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=919c456297d25afe2b34ec1b24e18d18ebc1c339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:7f:ce:af:97:3a:ce:04:dd:8e:0c:bd:10:
cd:ec:2f:65:64:08:3b:38:66:07:3b:bf:f8:ff:ab:
3a:4d:58:96:3c:a0:a8:d5:36:2b:2d:99:67:53:9f:
83:5c:c1:1c:72:6e:78:fc:03:cf:0b:bd:df:96:2e:
98:ea:21:45:df:0f:d3:8d:83:4b:29:70:3d:83:c6:
5e:8a:c0:43:c3:30:c2:b0:b4:3d:11:fa:58:71:ba:
f5:e5:c5:df:32:02:7d:74:75:0e:cb:db:31:c4:87:
e1:24:31:09:03:8c:83:3d:18:db:16:64:5e:7e:ea:
ef:f0:dc:bb:cb:ff:f5:8d:81:e4:1e:ee:55:72:29:
51:3b:90:6c:f2:b7:f1:a0:6b:a2:5c:8f:0b:41:e0:
22:b4:02:ef:a0:f0:83:ce:05:4e:c6:2b:a2:31:50:
80:8c:28:ea:70:1c:d2:7f:85:f3:08:1e:60:4b:60:
47:ee:c8:24:c9:49:5b:47:2b:1c:7f:ea:8a:52:91:
42:fe:5b:03:ef:7a:8c:d0:5b:f3:b6:b9:a6:7b:d1:
29:1a:31:d2:42:6e:8b:ed:83:78:78:30:db:d3:ee:
0e:85:35:92:72:fe:4b:bf:65:56:6f:16:8c:55:4c:
94:21:3e:64:16:01:6c:1c:d1:7f:9d:81:3d:5d:aa:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9C:45:62:97:D2:5A:FE:2B:34:EC:1B:24:E1:8D:18:EB:C1:C3:39
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/kZxFYpfSWv4rNOwbJOGNGOvBwzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.138.188.0/23
Signature Algorithm: sha256WithRSAEncryption
10:e0:f3:ff:b1:68:03:e8:51:4f:be:a9:ed:7b:96:58:6f:a5:
d3:fa:25:ce:ce:01:9c:42:d7:a3:1e:97:19:a7:8a:4d:b6:72:
8b:5d:53:1a:81:e4:6e:75:58:14:62:92:5c:28:f5:99:ef:b5:
6a:45:42:87:9a:ac:40:27:59:1c:07:6d:2c:42:06:56:c7:1d:
2c:db:15:70:43:81:35:c8:7d:d0:2b:c7:1d:6a:14:66:fb:e1:
a1:f9:19:8e:12:43:a2:97:55:3d:7c:10:0e:99:bf:92:f2:fe:
96:b6:f9:b3:0b:ed:9b:81:e5:19:c9:68:34:11:68:91:31:ff:
10:5a:fa:66:7e:b2:89:b8:c2:a5:42:b8:a4:31:30:d5:2a:49:
79:30:d2:d8:d5:76:bf:10:9b:09:5d:69:45:6a:15:a9:f9:70:
80:d9:4b:16:66:c2:0a:45:f9:25:13:43:37:2a:86:5d:e2:35:
81:83:e8:17:f0:dd:b5:60:9f:fd:df:a7:17:1d:31:1a:13:6f:
c8:31:a2:19:71:7b:e8:85:17:1a:6e:fa:ff:66:5b:b8:f6:4b:
8c:98:76:8f:ae:dc:a6:6d:79:47:79:cc:a8:51:83:57:4d:c9:
9a:46:25:33:0a:66:4b:12:0a:0f:4d:a7:09:a5:ee:d3:24:6f:
b4:b9:37:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:29:04 2025 by rpki-client