Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/eM-vnHPYNh1EO8aNsOHnCYwlAUA.roa
File: eM-vnHPYNh1EO8aNsOHnCYwlAUA.roa (raw, json)
Hash identifier: NUKqNkbiboTSLSM7ypROowFvg7BxZpdJMsaHM+d57qE=
Subject key identifier: 78:CF:AF:9C:73:D8:36:1D:44:3B:C6:8D:B0:E1:E7:09:8C:25:01:40
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01943FA3AE5AF8BBD770CDFB85C97C8F8AAD
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/eM-vnHPYNh1EO8aNsOHnCYwlAUA.roa
Signing time: Tue 07 Jan 2025 07:21:19 +0000
ROA not before: Tue 07 Jan 2025 07:21:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134492
IP address blocks: 103.146.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3f:a3:ae:5a:f8:bb:d7:70:cd:fb:85:c9:7c:8f:8a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 7 07:21:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78cfaf9c73d8361d443bc68db0e1e7098c250140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f7:87:5f:b7:fd:83:74:4a:63:76:92:42:5b:
1a:68:5b:1c:f8:27:92:18:3e:99:da:12:53:cf:11:
09:34:69:13:77:80:f2:39:03:a7:a8:f5:4a:e4:4a:
f4:d3:27:b7:7a:2e:55:5d:0c:8b:d9:68:8a:d6:73:
b2:85:3a:78:ab:94:46:7b:c4:c3:cc:49:09:ec:bf:
e4:9a:df:30:32:07:0e:77:b1:8d:80:5b:6d:4f:a6:
53:ec:e8:b1:37:9f:ba:26:35:c4:93:c3:be:55:aa:
ef:6a:8d:f5:15:d0:82:e7:23:98:2a:73:ff:6b:32:
32:6b:c0:d2:85:49:3f:37:5c:f9:17:89:48:0e:30:
fd:58:54:d8:a8:37:67:31:ce:7c:dc:aa:cf:58:58:
b5:81:d8:d8:62:e0:8f:c4:f9:8d:24:56:38:91:58:
dd:78:2b:77:d9:8c:53:c1:e5:b0:20:72:e1:c5:f7:
c5:a6:2d:24:c1:71:bb:f3:6b:be:16:b7:da:f0:06:
33:cb:03:09:b9:79:9e:bd:d8:6c:d0:76:27:7d:1d:
28:bd:4f:ae:93:54:ac:90:5c:c6:7c:28:0a:ba:04:
50:f8:42:e0:e2:7e:e4:a6:64:c0:7d:a5:55:b9:ff:
bc:dc:7e:f0:77:d9:00:e7:f8:76:9b:0e:50:eb:02:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CF:AF:9C:73:D8:36:1D:44:3B:C6:8D:B0:E1:E7:09:8C:25:01:40
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/eM-vnHPYNh1EO8aNsOHnCYwlAUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.146.101.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:08:12:5e:fc:9d:a9:09:77:d7:f8:c1:06:8c:03:50:ef:95:
a0:cf:6e:01:fe:5c:3a:09:1e:64:0e:6a:a4:42:88:af:02:6f:
33:48:60:ef:79:a5:0c:df:83:9b:60:ee:84:a9:1f:88:5b:c6:
c7:58:7c:d2:b8:22:6b:8a:32:86:b9:d4:07:ad:29:30:0f:69:
49:fa:f8:84:47:14:91:59:28:b3:8b:7d:62:3b:36:81:69:36:
a9:34:e9:b6:8f:03:58:41:9f:1e:c4:f1:e5:8f:e6:4a:fa:11:
1d:0a:fa:94:b7:8b:47:e4:81:91:24:f6:44:a0:4f:8b:32:2f:
26:0c:45:d5:fc:df:41:56:c1:ec:8b:8e:5b:f4:8e:66:65:b4:
8a:3b:f6:a8:98:fa:3f:e2:02:2f:5f:ba:9b:b1:ba:5c:7a:61:
09:cd:1b:50:39:d8:6f:e3:0f:fa:ee:95:46:0a:d5:fe:d9:a2:
57:d8:4c:b1:84:72:30:16:5b:51:bf:78:67:16:ee:4a:f6:3c:
55:4d:30:7a:a1:78:42:15:d4:b7:30:99:22:b4:a5:12:4c:d0:
88:58:31:76:67:99:52:aa:c5:d4:7b:65:50:ec:de:eb:21:12:
de:68:1e:bf:17:ff:db:93:6f:3c:18:41:a9:02:f6:5f:f1:b6:
4b:2c:bf:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:03:07 2025 by rpki-client