Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/s8vLFw1D4BFXdG2jOAtS0jjs3QE.roa
File: s8vLFw1D4BFXdG2jOAtS0jjs3QE.roa (raw, json)
Hash identifier: Y7liMV3FVjani1IQXI3obY6wg/68LBKBLPyQ9MQIJwM=
Subject key identifier: B3:CB:CB:17:0D:43:E0:11:57:74:6D:A3:38:0B:52:D2:38:EC:DD:01
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019427B5F6D3F65CFF78D3ECBCD905E67840
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/s8vLFw1D4BFXdG2jOAtS0jjs3QE.roa
Signing time: Thu 02 Jan 2025 15:50:24 +0000
ROA not before: Thu 02 Jan 2025 15:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150654
IP address blocks: 110.172.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f6:d3:f6:5c:ff:78:d3:ec:bc:d9:05:e6:78:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Jan 2 15:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3cbcb170d43e01157746da3380b52d238ecdd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:76:23:62:c7:85:9b:98:98:35:45:06:c7:2c:
86:f4:0d:80:b2:a3:6a:f9:70:c2:59:ba:a7:55:40:
f9:58:89:1e:e6:99:78:e7:53:1a:85:e9:95:6a:ce:
3d:5c:04:39:74:42:93:bd:6f:68:2a:d2:f8:0e:d0:
83:ca:60:ec:26:4b:2f:35:44:98:28:e3:75:d0:70:
cb:8d:39:18:20:22:e4:04:5e:44:84:e1:45:4c:b2:
23:b5:c1:88:c7:3f:8f:75:2e:f4:d4:ab:d1:59:b0:
b9:a2:41:eb:ea:db:81:38:64:8a:db:72:fd:6a:95:
cb:66:af:86:42:ec:27:72:7d:f5:49:84:46:d5:18:
d5:1a:0b:9c:8a:a0:d9:5f:9f:56:fa:47:9a:2e:c1:
cb:a4:a3:cb:51:78:aa:fe:15:6c:7a:43:96:c9:df:
cc:22:42:3d:34:5f:72:3a:aa:a7:df:49:72:e8:cc:
95:fc:7c:2e:dd:b9:55:9d:2d:e1:f4:ff:21:56:21:
6c:20:21:b7:9d:af:bc:0a:ac:df:a4:c8:12:00:98:
28:87:8d:a1:02:2b:01:86:74:30:46:bc:de:13:ef:
6d:9a:bf:0a:a4:aa:de:b0:33:83:88:64:fb:af:32:
d2:8d:21:cb:1a:6b:64:0c:a3:98:91:be:65:e5:8c:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CB:CB:17:0D:43:E0:11:57:74:6D:A3:38:0B:52:D2:38:EC:DD:01
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/s8vLFw1D4BFXdG2jOAtS0jjs3QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.172.190.0/24
Signature Algorithm: sha256WithRSAEncryption
37:32:15:34:2c:4f:d6:02:67:5f:73:73:f1:38:0b:62:d3:4b:
9c:bb:84:ec:62:87:17:a8:a6:58:d1:78:08:6b:b1:a6:60:8a:
46:6f:a8:f3:00:e2:8c:cb:5b:99:89:fd:5f:06:bc:4e:13:b2:
9b:05:91:1a:e0:93:8e:d6:b5:90:de:b1:71:bb:91:d3:c8:af:
93:67:db:04:31:31:50:a3:9f:be:65:ec:ac:cd:ec:97:fe:df:
c9:ec:ee:85:b1:01:cf:1b:f7:22:90:e7:a3:51:86:30:9d:cf:
ac:94:f7:ad:11:08:27:3c:d8:61:e4:07:da:a2:58:98:fb:c1:
cf:e8:4e:12:4b:19:35:25:4f:10:44:c6:fd:b8:68:54:ae:38:
3d:b8:9b:68:ad:01:30:67:20:f3:ef:20:9d:05:6e:eb:48:9b:
c9:4d:13:7f:41:2f:97:2b:e9:35:da:a8:6a:88:e8:94:cc:2d:
84:5b:5b:72:3a:11:03:3e:12:cc:57:35:24:10:f4:a4:32:dd:
56:61:ca:19:c7:8a:c8:3a:1d:f8:07:04:ee:bd:dd:05:cf:a4:
34:98:5d:5a:aa:32:f4:27:c3:c5:eb:d9:fa:5b:b9:5c:8a:81:
00:53:2a:12:2d:fa:6b:a0:3e:47:2d:1b:7d:da:d3:cd:3d:fb:
6a:76:51:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:30:07 2025 by rpki-client