Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/BL8I68n0S5EatljR0k4XZsKHA24.roa
File: BL8I68n0S5EatljR0k4XZsKHA24.roa (raw, json)
Hash identifier: iOoLcUwIbkzuVCDzFIpNedtLQogspd3V7HdfhJiPZWg=
Subject key identifier: 04:BF:08:EB:C9:F4:4B:91:1A:B6:58:D1:D2:4E:17:66:C2:87:03:6E
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019425FCDB6B1FED6CF105A88B9F6483367E
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/BL8I68n0S5EatljR0k4XZsKHA24.roa
Signing time: Thu 02 Jan 2025 07:48:35 +0000
ROA not before: Thu 02 Jan 2025 07:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7922
IP address blocks: 103.130.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:db:6b:1f:ed:6c:f1:05:a8:8b:9f:64:83:36:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 07:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04bf08ebc9f44b911ab658d1d24e1766c287036e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:d2:79:1c:56:e3:51:e2:14:4d:95:bd:9a:
b4:e9:18:c4:70:11:da:aa:e2:07:a6:78:f8:ab:99:
d0:6b:ae:fe:a0:67:4a:ec:fc:39:c0:81:73:23:ba:
27:b9:bf:ff:df:79:a7:d9:1c:b7:b5:f1:62:b2:c6:
82:99:4f:51:9f:a5:dc:53:f7:62:a1:a3:37:c0:be:
4e:a4:30:23:55:44:da:fb:2d:d5:df:80:63:97:9f:
af:a0:4f:f7:3b:6b:ad:32:18:24:35:ae:d6:6f:b8:
39:a6:08:7f:85:3e:45:17:30:c8:3d:15:25:28:a4:
77:dc:68:c5:40:7a:a7:33:50:2b:5e:81:2a:b4:0d:
eb:a1:f7:71:22:a2:be:7f:4e:4f:bd:8e:1d:82:b8:
79:3c:7f:c9:8d:72:a1:3f:4c:22:de:43:26:08:0f:
96:b6:fa:21:13:31:a6:40:14:09:69:6c:53:a1:bf:
77:d0:3d:96:c6:3e:25:53:cb:46:b2:0b:f7:69:41:
17:c3:02:be:a3:30:62:2f:67:2b:68:22:c5:de:83:
f6:60:61:f7:18:50:d6:4c:1b:71:16:67:1a:8a:50:
7f:23:e4:2a:27:9f:a9:46:3a:e1:0f:c4:a6:d3:81:
c1:40:a8:69:1e:24:07:0e:92:53:4b:58:ea:80:70:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BF:08:EB:C9:F4:4B:91:1A:B6:58:D1:D2:4E:17:66:C2:87:03:6E
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/BL8I68n0S5EatljR0k4XZsKHA24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.130.178.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:75:c0:f3:a0:e4:95:e4:45:79:fa:08:dd:13:62:e2:72:89:
1b:f1:9d:bf:d2:4e:7e:ce:87:47:3d:c8:e9:41:d9:1a:b1:a3:
02:06:66:85:f1:ce:7c:89:70:33:1d:da:8d:1e:72:6c:53:bd:
96:0f:17:12:af:c1:6a:17:fd:bf:b8:33:dc:da:f0:74:55:46:
c1:01:aa:68:69:54:2e:12:fb:e1:7f:41:fb:37:e0:7b:6c:6d:
32:18:04:48:f5:e8:a4:78:e6:21:bc:c1:a1:7a:d2:e2:f2:28:
a0:49:b2:54:5d:7e:87:06:31:97:6c:5e:53:21:d8:b3:29:f7:
66:95:46:4d:2e:9c:7d:87:3e:8a:fb:db:a9:b0:33:c0:63:96:
e9:a0:7c:94:b3:b3:15:eb:17:0d:6e:61:29:e6:5d:69:40:48:
a3:9b:aa:9e:f1:46:fa:68:82:09:b2:33:c8:d0:1b:7b:72:1c:
c9:75:4e:f0:e7:a9:b7:cf:08:5f:f1:55:d4:f4:f7:0c:00:9d:
da:71:46:3d:3f:4e:19:ce:8f:98:41:63:e0:9d:af:9e:76:35:
15:34:54:e9:8b:d4:12:d2:0e:73:40:f4:97:3e:11:25:f0:6e:
be:10:05:21:e7:13:d3:f7:50:6d:e8:59:b0:4f:72:bb:a8:f0:
c2:51:79:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:13:48 2025 by rpki-client