Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/Lssg1hmehdX-Lsz9DcV4aLkIYgw.roa
File: Lssg1hmehdX-Lsz9DcV4aLkIYgw.roa (raw, json)
Hash identifier: u6fW/BJ3Ar0dDQcWSBBZvwRYW6WUKzGGcINR5CZtSYk=
Subject key identifier: 2E:CB:20:D6:19:9E:85:D5:FE:2E:CC:FD:0D:C5:78:68:B9:08:62:0C
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01941F8C3EF3E81C0FD1642195D19763569A
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/Lssg1hmehdX-Lsz9DcV4aLkIYgw.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151734
IP address blocks: 103.75.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3e:f3:e8:1c:0f:d1:64:21:95:d1:97:63:56:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ecb20d6199e85d5fe2eccfd0dc57868b908620c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e8:22:f1:99:42:5b:ec:0d:a0:da:32:36:93:
08:30:a6:c2:83:50:88:b8:f4:e3:47:ef:e8:a6:31:
3e:7d:52:82:ff:29:a3:53:16:0f:47:6b:64:30:d7:
67:94:ac:7b:76:f3:38:87:af:e5:3a:d8:9b:fe:56:
8b:f7:cc:e9:0a:13:2b:47:45:99:14:d8:fb:7f:3e:
43:71:07:d5:cb:0a:b2:59:fd:02:7a:c8:e6:cd:a5:
52:5e:14:7c:b5:0d:a0:9b:0e:ab:2d:1f:bc:71:c9:
96:05:4c:dc:16:b8:10:5e:84:b5:19:55:af:08:19:
d1:a7:b2:e3:24:8a:e7:00:07:05:7a:0c:66:99:52:
30:1f:2f:6d:c5:1b:e1:6f:31:8e:1e:82:a6:18:70:
4d:4f:bc:d9:a7:26:e1:a2:d6:db:12:9a:5e:66:74:
9e:4d:36:09:b8:0e:32:34:48:1d:8b:1b:6b:ad:76:
4f:7c:0c:bf:35:9e:2e:e1:dc:d5:c2:25:29:52:b3:
f1:de:b3:ee:2f:bf:dd:0a:f0:22:bc:cd:6d:f8:b9:
99:67:84:e3:d7:b1:11:00:b0:c5:1e:43:ff:2d:f7:
ba:06:af:0a:82:7d:b8:b6:66:30:8e:8f:4a:a1:35:
1e:e0:6c:fd:68:17:02:61:4c:d8:43:26:66:30:b1:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CB:20:D6:19:9E:85:D5:FE:2E:CC:FD:0D:C5:78:68:B9:08:62:0C
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/Lssg1hmehdX-Lsz9DcV4aLkIYgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.71.0/24
Signature Algorithm: sha256WithRSAEncryption
26:14:42:d6:3e:99:72:29:f8:b4:91:1f:88:62:d3:cf:d0:aa:
13:62:7c:fa:aa:89:4b:05:a1:2e:b5:aa:92:c8:cb:48:59:e1:
bf:98:82:c0:39:50:a2:2d:8f:53:a4:f8:71:ed:89:d9:46:63:
a9:44:f8:f0:c6:c8:56:d9:fe:f1:e7:b4:08:73:b2:e3:32:e2:
4f:92:a5:86:51:88:d8:86:40:5f:9d:69:c2:79:0a:e0:d5:f8:
6f:fa:28:03:0e:30:ec:93:7d:7d:d3:a4:6f:9c:2a:4c:1e:5b:
7f:0c:ae:1c:3c:5d:61:06:37:1d:f3:e5:b6:79:18:38:cc:81:
de:fb:55:8c:d1:6b:74:91:1a:67:20:2d:5d:fd:fd:cf:69:f1:
3f:f1:95:ea:c3:68:0e:6a:a4:94:a0:b3:09:f6:bf:0e:42:66:
d2:1e:f8:ca:c9:ca:26:61:f4:95:1f:6f:2b:1b:3c:3a:e6:b1:
8a:7e:e2:10:7d:9d:9f:d9:da:bc:87:4e:4f:ec:fd:83:40:9e:
e7:87:2a:c7:75:4e:2f:24:9e:72:08:73:37:0c:47:a3:2a:12:
f1:e9:64:b7:19:65:39:2e:c7:d8:e1:a3:22:97:83:37:3a:87:
c4:a5:32:8c:16:44:6d:43:bc:a5:b8:cd:ec:b3:f8:41:29:fc:
21:60:05:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:47 2025 by rpki-client