Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tAGyNizHA9sFqrgwZZwFr5MvlyU.roa
File: tAGyNizHA9sFqrgwZZwFr5MvlyU.roa (raw, json)
Hash identifier: Y4agyqG7qiLYbwUkz0iIRFGAZQO0vld2Qe+1AH++h04=
Subject key identifier: B4:01:B2:36:2C:C7:03:DB:05:AA:B8:30:65:9C:05:AF:93:2F:97:25
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D72B6CAF549E4EC59C4F37725D4BD6
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tAGyNizHA9sFqrgwZZwFr5MvlyU.roa
Signing time: Wed 01 Jan 2025 21:48:11 +0000
ROA not before: Wed 01 Jan 2025 21:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212165
IP address blocks: 103.127.76.0/24 maxlen: 24
103.127.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:2b:6c:af:54:9e:4e:c5:9c:4f:37:72:5d:4b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b401b2362cc703db05aab830659c05af932f9725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:49:63:bb:c1:30:91:c1:f3:d1:5f:fa:5c:f7:
ae:8a:a4:ee:90:1f:25:5c:69:6d:a8:5b:10:b5:87:
54:49:5f:79:34:e1:92:b4:9d:4d:9a:92:3a:90:29:
90:ec:1b:73:45:b3:7d:67:49:aa:b2:25:33:48:6c:
9b:ef:5b:63:b8:44:af:eb:4a:c3:68:5d:b6:e9:19:
aa:12:6b:63:59:61:d9:7e:7b:7c:e9:b9:19:ff:c0:
5e:d7:5b:1f:b8:47:b0:f5:52:51:23:38:08:06:33:
37:15:39:d3:29:c4:4f:bf:7c:7e:24:48:3d:f6:31:
2d:11:cc:d7:78:96:e0:23:87:c5:50:4b:15:22:e5:
da:22:98:68:5e:7c:9c:e9:f8:61:8f:83:62:0c:78:
4d:22:d0:74:85:93:3b:34:5d:d7:61:d3:9a:1f:70:
89:8d:84:a6:a4:4a:60:b9:d9:83:6c:20:48:43:f2:
dd:76:6d:d3:5f:66:01:cf:87:ac:44:b8:89:f9:4f:
79:d7:84:b5:08:09:95:53:be:89:38:88:29:15:5c:
7b:37:e0:83:82:a4:97:25:30:a6:1f:1b:bd:91:82:
a3:ea:99:91:5a:28:89:7d:25:38:29:bb:64:d3:5d:
26:ca:4b:55:bd:c4:af:a0:09:e7:d0:c2:77:a2:3c:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:01:B2:36:2C:C7:03:DB:05:AA:B8:30:65:9C:05:AF:93:2F:97:25
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tAGyNizHA9sFqrgwZZwFr5MvlyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.127.76.0/23
Signature Algorithm: sha256WithRSAEncryption
07:80:f5:49:c5:1a:d2:4d:13:36:8d:94:a0:e8:ac:03:af:c6:
6b:43:4b:51:6d:76:34:f5:1e:e3:d3:08:9b:95:be:5e:6e:26:
78:ec:a0:2a:83:5c:61:40:96:42:1d:74:ad:80:78:72:d6:14:
8c:94:4b:68:08:1b:89:15:74:27:10:e2:70:ea:eb:15:7d:e9:
44:8c:f6:0d:f6:51:59:aa:31:3d:5f:6f:05:e2:67:2a:a3:92:
88:96:56:ce:69:fd:8e:51:e6:15:e3:ee:4a:ee:40:3e:ad:8d:
07:12:06:a2:62:7c:f8:8d:cf:2d:48:53:29:8b:ea:ac:19:c8:
55:44:7e:7b:7b:1f:43:7c:cf:6b:24:c1:24:c7:32:f7:79:37:
aa:70:00:47:db:df:1f:8d:45:be:38:ba:39:db:d5:0a:40:f4:
b9:df:80:02:e3:d1:71:d7:28:2d:51:cf:6e:48:66:ab:c0:b1:
ea:38:48:d0:f9:88:5b:dc:4c:76:ba:3b:87:11:e3:20:e9:bc:
37:f8:2b:12:78:65:54:46:39:17:f3:9e:59:3d:21:24:49:c3:
15:60:7a:8b:52:d6:11:3b:5f:5a:15:d4:31:5b:e0:14:b2:31:
32:b6:a4:5f:f5:1b:5f:7c:3c:e7:e6:36:f1:70:7a:9a:6f:92:
39:37:56:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:33 2025 by rpki-client