Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/IBubaaq1KjiQKUwUaYMKhoS5vGY.roa
File: IBubaaq1KjiQKUwUaYMKhoS5vGY.roa (raw, json)
Hash identifier: waPQP0MZ40/qIka7y4UCztuunDgDVp7g/9u2t0hcwRE=
Subject key identifier: 20:1B:9B:69:AA:B5:2A:38:90:29:4C:14:69:83:0A:86:84:B9:BC:66
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0194228DC142351EA01155304B9804766AA9
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/IBubaaq1KjiQKUwUaYMKhoS5vGY.roa
Signing time: Wed 01 Jan 2025 15:48:22 +0000
ROA not before: Wed 01 Jan 2025 15:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 103.249.132.0/24 maxlen: 24
103.249.133.0/24 maxlen: 24
103.249.134.0/24 maxlen: 24
103.249.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c1:42:35:1e:a0:11:55:30:4b:98:04:76:6a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jan 1 15:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=201b9b69aab52a3890294c1469830a8684b9bc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:5a:1b:80:ed:21:3f:e0:6a:42:32:31:71:
76:ec:d5:a8:d1:67:be:e1:87:29:58:01:a2:59:8d:
db:77:cf:f2:a3:63:d3:5d:60:9a:13:74:ee:5c:9c:
fd:41:20:3d:28:67:f1:e5:9e:94:22:00:cd:16:fd:
b8:36:19:64:41:64:24:71:f4:f2:3b:de:86:0e:ca:
be:8a:a0:2e:9e:b3:5b:80:34:a4:8b:fe:51:59:5d:
79:96:a3:0b:45:30:aa:f6:0a:a1:46:4e:52:cc:a8:
11:e6:69:e6:a0:c1:60:11:d1:b6:92:84:05:64:86:
4b:5a:5d:41:eb:be:7a:bc:25:c7:86:db:66:b9:32:
0c:ec:9c:c4:de:6a:47:d9:b0:85:e0:29:31:35:3a:
34:1f:1b:d4:f3:54:87:4d:da:94:e5:e1:98:6a:35:
ca:19:e3:08:2d:02:bc:81:a2:a9:37:43:2e:58:9b:
6f:5a:0c:9e:b3:9e:c9:c7:96:6f:78:1b:74:77:a3:
db:df:df:d2:cd:aa:3b:81:85:48:ad:95:d5:70:82:
28:e1:5a:0a:95:36:f7:c9:10:b6:63:c5:39:63:f4:
74:85:b4:46:07:fc:f8:a4:f8:d8:55:4a:6b:22:af:
1f:d1:8f:ea:cb:d4:9e:01:5b:42:de:4c:94:7f:07:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1B:9B:69:AA:B5:2A:38:90:29:4C:14:69:83:0A:86:84:B9:BC:66
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/IBubaaq1KjiQKUwUaYMKhoS5vGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.249.132.0/22
Signature Algorithm: sha256WithRSAEncryption
55:9f:47:e8:2a:61:39:37:16:70:e7:de:9b:c9:7e:57:40:7b:
a3:3e:6c:18:99:2a:9f:60:44:db:6f:bd:6f:c3:93:63:09:57:
67:db:42:3e:1a:0b:b0:19:d1:0c:11:1b:f1:21:11:e5:22:ba:
26:a7:85:d2:1f:a5:50:61:5f:4b:b5:5e:e4:6f:53:37:2c:af:
e2:87:e6:0b:01:c2:cb:1f:e6:cb:7f:e1:47:39:84:99:c4:13:
86:fc:8d:d9:61:b3:b1:45:d8:7e:6a:9b:28:d3:2a:3f:03:6f:
2d:a4:5d:13:3e:86:e7:80:a8:6c:2a:f1:70:ec:09:fe:3f:ac:
69:65:21:66:6c:e4:14:42:a3:f6:62:16:7a:cd:42:d3:5c:20:
d9:cb:df:7c:92:59:c6:05:4f:82:f1:7b:d9:21:51:a1:c9:6b:
47:4e:01:79:12:41:1d:40:c0:ce:7c:11:01:8c:f1:d6:52:59:
f1:9c:da:76:03:43:dc:2a:73:53:0f:ea:7a:7f:6f:b7:be:e6:
44:12:ae:b5:6c:21:ed:e8:03:89:04:ff:31:56:a3:5c:a5:c6:
a8:11:d3:cd:aa:20:ac:f3:6c:93:01:90:cd:4a:ab:89:8c:c4:
fe:5f:01:2a:5a:e9:f4:56:75:36:3a:2c:3b:0c:d4:f2:8a:3d:
cf:38:0e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:36:08 2025 by rpki-client